Browse CVEs

MEDIUM 5.7 CVE-2024-52509 Nextcloud Mail is the mail app for Nextcloud, a self-hosted productivity platform. The Nextcloud mail app incorrectly allowed attaching shared files … Mail 2.2.10 / 3.6.2+ Fix from $1,6002024-11-15 HIGH 7.5 CVE-2024-52525 Nextcloud Server is a self hosted personal cloud system. Under certain conditions the password of a user was stored unencrypted in the session data. … Nextcloud Server 28.0.12 / 29.0.9+ Fix from $1,9502024-11-15 MEDIUM 6.5 CVE-2024-52520 Nextcloud Server is a self hosted personal cloud system. Due to a pre-flighted HEAD request, the link reference provider could be tricked into downlo… Nextcloud Server 27.1.11.8 / 28.0.10+ Fix from $1,6002024-11-15 MEDIUM 6.5 CVE-2024-52523 Nextcloud Server is a self hosted personal cloud system. After setting up a user or administrator defined external storage with fixed credentials, th… Nextcloud Server 25.0.13.14 / 26.0.13.10+ Fix from $1,6002024-11-15 MEDIUM 5.3 CVE-2024-52521 Nextcloud Server is a self hosted personal cloud system. MD5 hashes were used to check background jobs for their uniqueness. This increased the chanc… Nextcloud Server 28.0.10 / 29.0.7+ Fix from $1,6002024-11-15 HIGH 8.2 CVE-2024-52519 Nextcloud Server is a self hosted personal cloud system. The OAuth2 client secrets were stored in a recoverable way, so that an attacker that got acc… Nextcloud Server 27.1.11.8 / 28.0.10+ Fix from $1,9502024-11-15 MEDIUM 5.9 CVE-2024-52517 Nextcloud Server is a self hosted personal cloud system. After storing "Global credentials" on the server, the API returns them and adds them into th… Nextcloud Server 25.0.13.13 / 26.0.13.9+ Fix from $1,6002024-11-15 MEDIUM 5.4 CVE-2024-52518 Nextcloud Server is a self hosted personal cloud system. After an attacker got access to the session of a user or administrator, the attacker would b… Nextcloud Server 28.0.12 / 29.0.9+ Fix from $1,6002024-11-15 MEDIUM 6.5 CVE-2024-52515 Nextcloud Server is a self hosted personal cloud system. After an admin enables the default-disabled SVG preview provider, a malicious user could upl… Nextcloud Server 24.0.12.15 / 25.0.13.10+ Fix from $1,6002024-11-15 CRITICAL 9.1 CVE-2024-46958 In Nextcloud Desktop Client 3.13.1 through 3.13.3 on Linux, synchronized files (between the server and client) may become world writable or world rea… Desktop 3.13.4+ Fix from $2,3002024-09-16 HIGH 7.8 CVE-2024-37885 The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer. A code injection in Nextcloud Desktop Client fo… Desktop 3.12.0+ Fix from $1,9502024-06-14 MEDIUM 5.4 CVE-2024-37884 Nextcloud Server is a self hosted personal cloud system. A malicious user was able to send delete requests for old versions of files they only got sh… Nextcloud Server 25.0.13.7 / 26.0.13+ Fix from $1,6002024-06-14 HIGH 8.1 CVE-2024-37882 Nextcloud Server is a self hosted personal cloud system. A recipient of a share with read&share permissions could reshare the item with more permissi… Nextcloud Server 23.0.12.17 / 24.0.12.13+ Fix from $1,9502024-06-14 HIGH 7.5 CVE-2024-37313 Nextcloud server is a self hosted personal cloud system. Under some circumstance it was possible to bypass the second factor of 2FA after successfull… Nextcloud Server 21.0.9.17 / 22.2.10.22+ Fix from $1,9502024-06-14 MEDIUM 6.3 CVE-2024-37312 user_oidc app is an OpenID Connect user backend for Nextcloud. Missing access control on the ID4me endpoint allows an attacker to register an account… User Oidc 5.0.0+ Fix from $1,6002024-06-14 CRITICAL 9.8 CVE-2024-30247 NextcloudPi is a ready to use image for Virtual Machines, Raspberry Pi, Odroid HC1, Rock64 and other boards. A command injection vulnerability in Nex… Nextcloudpi 1.53.1+ Fix from $2,3002024-03-29 MEDIUM 5.4 CVE-2024-22402 Nextcloud guests app is a utility to create guest users which can only see files shared with them. In affected versions users were able to load the f… Guests 2.4.1+ Fix from $1,6002024-01-18 MEDIUM 6.1 CVE-2024-22400 Nextcloud User Saml is an app for authenticating Nextcloud users using SAML. In affected versions users can be given a link to the Nextcloud server a… Sso \& Saml Authentication 5.1.5 / 5.2.5+ Fix from $1,6002024-01-18 MEDIUM 5.4 CVE-2024-22213 Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. In affected version… Deck 1.9.5 / 1.11.2+ Fix from $1,6002024-01-18 CRITICAL 9.8 CVE-2024-22212 Nextcloud Global Site Selector is a tool which allows you to run multiple small Nextcloud instances and redirect users to the right server. A problem… Global Site Selector 1.4.1 / 2.1.2+ Fix from $2,3002024-01-18 CRITICAL 9.8 CVE-2023-49792 Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. In Nextcloud Server prior to versions 26.0.9 and 27.1.4; as well… Nextcloud Server 23.0.12.13 / 24.0.12.9+ Fix from $2,3002023-12-22 MEDIUM 5.4 CVE-2023-49791 Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. In Nextcloud Server prior to versions 26.0.9 and 27.1.4; as well… Nextcloud Server 23.0.12.13 / 24.0.12.9+ Fix from $1,6002023-12-22 MEDIUM 6.5 CVE-2023-48308 Nextcloud/Cloud is a calendar app for Nextcloud. An attacker can gain access to stacktrace and internal paths of the server when generating an except… Calendar 4.5.3+ Fix from $1,6002023-12-22 CRITICAL 9.8 CVE-2023-48306 Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.11, 26.0.6… Nextcloud Server 22.2.10.16 / 23.0.12.11+ Fix from $2,3002023-11-21 CRITICAL 9.8 CVE-2023-48307 Nextcloud Mail is the mail app for Nextcloud, a self-hosted productivity platform. Starting in version 1.13.0 and prior to version 2.2.8 and 3.3.0, a… Mail 2.2.8 / 3.3.0+ Fix from $2,3002023-11-21 MEDIUM 5.4 CVE-2023-48301 Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.13, 26.0.8… Nextcloud Server 25.0.13 / 26.0.8+ Fix from $1,6002023-11-21 MEDIUM 5.4 CVE-2023-48302 Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.13, 26.0.8… Nextcloud Server 25.0.13 / 26.0.8+ Fix from $1,6002023-11-21 HIGH 7.1 CVE-2023-48239 Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.13, 26.0.8… Nextcloud Server 20.0.14.16 / 21.0.9.13+ Fix from $1,9502023-11-21 HIGH 8.8 CVE-2023-45151 Nextcloud server is an open source home cloud platform. Affected versions of Nextcloud stored OAuth2 tokens in plaintext which allows an attacker who… Nextcloud Server 25.0.8 / 26.0.3+ Fix from $1,9502023-10-16 HIGH 7.5 CVE-2023-39960 Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. In Nextcloud Server starting with 25.0.0 and prior to 25.09 and … Nextcloud Server 22.2.10.14 / 23.0.12.9+ Fix from $1,9502023-10-13