Browse CVEs

HIGH 8.8 CVE-2023-28643 Nextcloud server is an open source home cloud implementation. In affected versions when a recipient receives 2 shares with the same name, while a mem… Nextcloud Server 24.0.9 / 25.0.3+ Fix from $1,9502023-03-30 HIGH 8.8 CVE-2023-28833 Nextcloud server is an open source home cloud implementation. In affected versions admins of a server were able to upload a logo or a favicon and to … Nextcloud Server 23.0.14 / 24.0.10+ Fix from $1,9502023-03-30 HIGH 7.5 CVE-2023-28644 Nextcloud server is an open source home cloud implementation. In releases of the 25.0.x branch before 25.0.3 an inefficient fetch operation may impac… Nextcloud Server 25.0.3+ Fix from $1,9502023-03-30 MEDIUM 6.8 CVE-2023-28647 Nextcloud iOS is an ios application used to interface with the nextcloud home cloud ecosystem. In versions prior to 4.7.0 when an attacker has physic… Nextcloud 4.7.0+ Fix from $1,6002023-03-30 HIGH 8.1 CVE-2023-25817 Nextcloud server is an open source, personal cloud implementation. In versions from 24.0.0 and before 24.0.9 a user could escalate their permissions … Nextcloud Server 24.0.9+ Fix from $1,9502023-03-27 HIGH 7.1 CVE-2023-25818 Nextcloud server is an open source, personal cloud implementation. In affected versions a malicious user could try to reset the password of another u… Nextcloud Server 21.0.9.10 / 22.2.10.10+ Fix from $1,9502023-03-27 HIGH 7.8 CVE-2023-25820 Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform, and Nextcloud Enterprise Server is the enterprise ve… Nextcloud Server 21.0.9 / 22.2.10.10+ Fix from $1,9502023-03-22 HIGH 7.5 CVE-2023-25821 Nextcloud is an Open Source private cloud software. Versions 24.0.4 and above, prior to 24.0.7, and 25.0.0 and above, prior to 25.0.1, contain Improp… Nextcloud Server 24.0.7+ Fix from $1,9502023-02-25 MEDIUM 6.5 CVE-2023-25816 Nextcloud is an Open Source private cloud software. Versions 25.0.0 and above, prior to 25.0.3, are subject to Uncontrolled Resource Consumption. A u… Nextcloud Server 25.0.3+ Fix from $1,6002023-02-25 HIGH 7.5 CVE-2023-25579 Nextcloud server is a self hosted home cloud product. In affected versions the `OC\Files\Node\Folder::getFullPath()` function was validating and norm… Nextcloud Server 20.0.14 / 21.0.9+ Fix from $1,9502023-02-22 MEDIUM 5.3 CVE-2023-25162 Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Nextcloud Server prior to 24.0.8 and 23.0.12 and Nex… Nextcloud Server 23.0.12 / 24.0.8+ Fix from $1,6002023-02-13 MEDIUM 5.3 CVE-2023-25160 Nextcloud Mail is an email app for the Nextcloud home server platform. Prior to versions 2.2.1, 1.14.5, 1.12.9, and 1.11.8, an attacker can access th… Mail 1.11.8 / 1.12.9+ Fix from $1,6002023-02-13 MEDIUM 5.3 CVE-2023-25161 Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Nextcloud Server and Nextcloud Enterprise Server pri… Nextcloud Server 23.0.12 / 24.0.8+ Fix from $1,6002023-02-13 MEDIUM 5.3 CVE-2023-25159 Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform, and Nextcloud Office is a document collaboration app… Nextcloud Server 6.3.1+ Fix from $1,6002023-02-13 MEDIUM 5.7 CVE-2023-25150 Nextcloud office/richdocuments is an office suit for the nextcloud server platform. In affected versions the Collabora integration can be tricked to … Richdocuments 3.8.7 / 4.2.9+ Fix from $1,6002023-02-08 MEDIUM 6.1 CVE-2023-23942 The Nextcloud Desktop Client is a tool to synchronize files from a Nextcloud Server with your computer. Versions prior to 3.6.3 are missing sanitisat… Desktop 3.6.3+ Fix from $1,6002023-02-06 MEDIUM 6.5 CVE-2023-23944 Nextcloud mail is an email app for the nextcloud home server platform. In versions prior to 2.2.2 user's passwords were stored in cleartext in the da… Mail 2.2.2+ Fix from $1,6002023-02-06 MEDIUM 6.5 CVE-2023-22470 Nextcloud Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. A databas… Deck 1.6.5 / 1.7.3+ Fix from $1,6002023-01-14 HIGH 8.8 CVE-2023-22472 Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. It is possible to m… Desktop Patch available Fix from $1,9502023-01-09 MEDIUM 6.5 CVE-2022-41971 Nextcould Talk android is a video and audio conferencing app for Nextcloud. Prior to versions 12.2.8, 13.0.10, 14.0.6, and 15.0.0, guests can continu… Nextcloud Talk 12.2.8 / 13.0.10+ Fix from $1,6002022-12-01 MEDIUM 5.3 CVE-2022-41968 Nextcloud Server is an open source personal cloud server. Prior to versions 23.0.10 and 24.0.5, calendar name lengths are not validated before writin… Nextcloud Server 23.0.10 / 24.0.5+ Fix from $1,6002022-12-01 MEDIUM 5.3 CVE-2022-41970 Nextcloud Server is an open source personal cloud server. Prior to versions 24.0.7 and 25.0.1, disabled download shares still allow download through … Nextcloud Server 24.0.7+ Fix from $1,6002022-12-01 MEDIUM 6.1 CVE-2022-39333 Nexcloud desktop is the Desktop sync client for Nextcloud. An attacker can inject arbitrary HyperText Markup Language into the Desktop Client applica… Desktop 3.6.1+ Fix from $1,6002022-11-25 MEDIUM 5.4 CVE-2022-39332 Nexcloud desktop is the Desktop sync client for Nextcloud. An attacker can inject arbitrary HyperText Markup Language into the Desktop Client applica… Desktop 3.6.1+ Fix from $1,6002022-11-25 MEDIUM 6.5 CVE-2022-39346 Nextcloud server is an open source personal cloud server. Affected versions of nextcloud server did not properly limit user display names which could… Nextcloud Enterprise Server 22.2.10 / 23.0.7+ Fix from $1,6002022-11-25 MEDIUM 5.5 CVE-2022-41926 Nextcould talk android is the android OS implementation of the nextcloud talk chat system. In affected versions the receiver is not protected by broa… Talk 14.1.0+ Fix from $1,6002022-11-25 MEDIUM 5.4 CVE-2022-39331 Nexcloud desktop is the Desktop sync client for Nextcloud. An attacker can inject arbitrary HyperText Markup Language into the Desktop Client applica… Desktop 3.6.1+ Fix from $1,6002022-11-25 MEDIUM 5.4 CVE-2022-39338 user_oidc is an OpenID Connect user backend for Nextcloud. Versions prior to 1.2.1 did not properly validate discovery urls which may lead to a store… Openid Connect User Backend 1.2.1+ Fix from $1,6002022-11-25 HIGH 7.8 CVE-2022-41882 The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer. In version 3.6.0, if a user received a maliciou… Desktop Patch available Fix from $1,9502022-11-11 MEDIUM 6.5 CVE-2022-39364 Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. In Nextcloud Server prior to versions 23.0.9 and 24.… Nextcloud Enterprise Server 22.2.10.5 / 23.0.9+ Fix from $1,6002022-10-27