Browse CVEs

HIGH 7.8 CVE-2023-39963 Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 20.0.0 and prior to versions 20.0.14.15, 21.… Nextcloud Server 20.0.14.15 / 21.0.9.13+ Fix from $1,9502023-08-10 HIGH 7.7 CVE-2023-39962 Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 19.0.0 and prior to versions 19.0.13.10, 20.… Nextcloud Server 19.0.13.10 / 20.0.14.15+ Fix from $1,9502023-08-10 MEDIUM 5.3 CVE-2023-39959 Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.9, 26.0.4,… Nextcloud Server 25.0.9 / 26.0.4+ Fix from $1,6002023-08-10 MEDIUM 5.3 CVE-2023-39958 Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 22.0.0 and prior to versions 22.2.10.13, 23.… Nextcloud Server 22.2.10.14 / 23.0.12.9+ Fix from $1,6002023-08-10 HIGH 7.8 CVE-2023-39957 Nextcloud Talk Android allows users to place video and audio calls through Nextcloud on Android. Prior to version 17.0.0, an unprotected intend allow… Talk 17.0.0+ Fix from $1,9502023-08-10 HIGH 8.1 CVE-2023-39954 user_oidc provides the OIDC connect user backend for Nextcloud, an open-source cloud platform. Starting in version 1.0.0 and prior to version 1.3.3, … User Oidc 1.3.3+ Fix from $1,9502023-08-10 MEDIUM 6.1 CVE-2023-39955 Notes is a note-taking app for Nextcloud, an open-source cloud platform. Starting in version 4.4.0 and prior to version 4.8.0, when creating a note f… Notes 4.8.0+ Fix from $1,6002023-08-10 MEDIUM 6.5 CVE-2023-39952 Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 22.0.0 and prior to versions 22.2.10.13, 23.… Nextcloud Server 22.2.10.13 / 23.0.12.8+ Fix from $1,6002023-08-10 HIGH 8.8 CVE-2023-35928 Nextcloud Server is a space for data storage on Nextcloud, a self-hosted productivity playform. In NextCloud Server versions 25.0.0 until 25.0.7 and … Nextcloud Server 19.0.13.9 / 20.0.14.14+ Fix from $1,9502023-06-23 CRITICAL 9.1 CVE-2023-35172 NextCloud Server and NextCloud Enterprise Server provide file storage for Nextcloud, a self-hosted productivity platform. In NextCloud Server version… Nextcloud Server 21.0.9.12 / 22.2.10.12+ Fix from $2,3002023-06-23 HIGH 8.1 CVE-2023-35927 NextCloud Server and NextCloud Enterprise Server provide file storage for Nextcloud, a self-hosted productivity platform. In NextCloud Server version… Nextcloud Server 19.0.13.9 / 20.0.14.14+ Fix from $1,9502023-06-23 MEDIUM 6.5 CVE-2023-35173 Nextcloud End-to-end encryption app provides all the necessary APIs to implement End-to-End encryption on the client side. By providing an invalid me… End To End Encryption 1.12.4+ Fix from $1,6002023-06-23 MEDIUM 6.1 CVE-2023-35171 NextCloud Server and NextCloud Enterprise Server provide file storage for Nextcloud, a self-hosted productivity platform. Starting in version 26.0.0 … Nextcloud Server 26.0.2+ Fix from $1,6002023-06-23 HIGH 7.5 CVE-2023-32320 Nextcloud Server is a data storage system for Nextcloud, a self-hosted productivity platform. When multiple requests are sent in parallel, all of the… Nextcloud Server 21.0.9.12 / 22.2.10.12+ Fix from $1,9502023-06-22 MEDIUM 5.3 CVE-2023-33184 Nextcloud Mail is a mail app in Nextcloud. A blind SSRF attack allowed to send GET requests to services running in the same web server. It is recomme… Mail 1.15.3 / 2.2.5+ Fix from $1,6002023-05-27 MEDIUM 6.5 CVE-2023-32319 Nextcloud server is an open source personal cloud implementation. Missing brute-force protection on the WebDAV endpoints via the basic auth header al… Nextcloud Server 24.0.11 / 25.0.5+ Fix from $1,6002023-05-26 HIGH 8.8 CVE-2023-31128 NextCloud Cookbook is a recipe library app. Prior to commit a46d9855 on the `master` branch and commit 489bb744 on the `main-0.9.x` branch, the `pull… Cookbook 0.9.19+ Fix from $1,9502023-05-26 MEDIUM 6.7 CVE-2023-32318 Nextcloud server provides a home for data. A regression in the session handling between Nextcloud Server and the Nextcloud Text app prevented a corre… Nextcloud Server 25.0.6+ Fix from $1,6002023-05-26 CRITICAL 9.8 CVE-2023-32074 user_oidc app is an OpenID Connect user backend for Nextcloud. Authentication can be broken/bypassed in user_oidc app. It is recommended that the Nex… User Oidc 1.3.2+ Fix from $2,3002023-05-25 HIGH 7.5 CVE-2023-28847 Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. In Nextcloud Server 24.0.0 prior to 24.0.11 and 25.0… Nextcloud Server 23.0.12.6 / 24.0.11+ Fix from $1,9502023-04-25 HIGH 8.8 CVE-2023-30539 Nextcloud is a personal home server system. Depending on the set up tags and other workflows this issue can be used to limit access of others or bein… Nextcloud Files Automated Tagging 1.14.2 / 1.15.3+ Fix from $1,9502023-04-17 MEDIUM 6.5 CVE-2023-29000 The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server. Starting with version 3.0.0 and prior to version 3.7.0, by trustin… Desktop 3.7.0+ Fix from $1,6002023-04-04 MEDIUM 6.4 CVE-2023-28999 Nextcloud is an open-source productivity platform. In Nextcloud Desktop client 3.0.0 until 3.8.0, Nextcloud Android app 3.13.0 until 3.25.0, and Next… Desktop 3.8.0 / 3.25.0+ Fix from $1,6002023-04-04 MEDIUM 6.5 CVE-2023-28997 The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server. Starting with version 3.0.0 and prior to version 3.6.5, a maliciou… Desktop 3.6.5+ Fix from $1,6002023-04-04 MEDIUM 6.1 CVE-2023-28998 The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server. Starting with version 3.0.0 and prior to version 3.6.5, a maliciou… Desktop 3.6.5+ Fix from $1,6002023-04-04 MEDIUM 5.4 CVE-2023-28848 user_oidc is the OIDC connect user backend for Nextcloud, an open source collaboration platform. A vulnerability in versions 1.0.0 until 1.3.0 effect… User Oidc 1.3.0+ Fix from $1,6002023-04-04 MEDIUM 6.5 CVE-2023-28645 Nextcloud richdocuments is a Nextcloud app integrating the office suit Collabora Online. In affected versions the secure view feature of the rich doc… Richdocuments 6.3.2 / 7.0.2+ Fix from $1,6002023-03-31 MEDIUM 6.5 CVE-2023-28844 Nextcloud server is an open source home cloud implementation. In affected versions users that should not be able to download a file can still downloa… Nextcloud Server 24.0.10 / 25.0.4+ Fix from $1,6002023-03-31 HIGH 7.5 CVE-2023-28835 Nextcloud server is an open source home cloud implementation. In affected versions the generated fallback password when creating a share was using a … Nextcloud Server 23.0.14 / 24.0.10+ Fix from $1,9502023-03-30 HIGH 8.8 CVE-2023-26482 Nextcloud server is an open source home cloud implementation. In affected versions a missing scope validation allowed users to create workflows which… Nextcloud Server 20.0.14.12 / 21.0.9.10+ Fix from $1,9502023-03-30