Latest vulnerabilities for "nextcloud desktop client"

7.8

First published (updated )

CVE-2024-37885

Nextcloud Desktop ClientNextcloud Desktop client does not verify received singed certificate in end-to-end encryption

6.5

First published (updated )

CVE-2023-29000

Nextcloud NextcloudNextcloud: Lack of authenticity of metadata keys allows a malicious server to gain access to E2EE folders

6.9

First published (updated )

CVE-2023-28999

Nextcloud Desktop ClientNextcloud Desktop client misbehaves with E2EE when the server returns empty list of metadata keys

6.7

First published (updated )

CVE-2023-28998

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Nextcloud Desktop ClientNextcloud Desktop: Initialization vector reuse in E2EE allows malicious server admin to break, manipulate, access files

6.7

First published (updated )

CVE-2023-28997

Nextcloud Desktop ClientSelf reflected HTML injection in Desktop client

6.1

First published (updated )

CVE-2023-23942

Nextcloud Desktop ClientNextcloud Deck Desktop Client is vulnerable to Cross-Site Request Forgery (CSRF) via malicious link

8.8

First published (updated )

CVE-2023-22472

Nextcloud Desktop ClientCross-site Scripting (XSS) in Nexcloud Desktop Client

5.4

First published (updated )

CVE-2022-39331

Nextcloud Desktop ClientCross-site scripting (XSS) in Nextcloud Desktop Client

5.4

First published (updated )

CVE-2022-39332

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Nextcloud Desktop ClientCross-site scripting (XSS) in Nextcloud Desktop Client

6.1

First published (updated )

CVE-2022-39333

Nextcloud Desktop Clientnextcloudcmd incorrectly trusts bad TLS certificates

4.7

First published (updated )

CVE-2022-39334

Nextcloud Desktop ClientNextcloud Desktop vulnerable to code injection via malicious link

7.8

First published (updated )

CVE-2022-41882

Nextcloud Desktop ClientUntrusted Search Path in Nextcloud Desktop Client

7.3

First published (updated )

CVE-2021-37617

Debian Debian LinuxEnd-to-end encryption device setup did not verify public key

6.5

First published (updated )

CVE-2021-32728

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Debian Debian LinuxNextcloud Desktop Client before 3.3.1 is vulnerable to improper certificate validation due to lack o…

5.9

First published (updated )

CVE-2021-22895

Nextcloud Desktop ClientNextcloud Desktop Client prior to 3.1.3 is vulnerable to resource injection by way of missing valida…

8.8

First published (updated )

CVE-2021-22879

Nextcloud Desktop ClientA cleartext storage of sensitive information in Nextcloud Desktop Client 2.6.4 gave away information…

7.5

First published (updated )

CVE-2020-8225

Nextcloud Desktop ClientXSS

5.4

First published (updated )

CVE-2020-8189

Nextcloud Desktop ClientPath Traversal

7.1

First published (updated )

CVE-2020-8227

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Nextcloud Desktop ClientBuffer Overflow

5.5

First published (updated )

CVE-2020-8230

Nextcloud Desktop ClientCode Injection

7.8

First published (updated )

CVE-2020-8224

Nextcloud Desktop ClientA memory leak in the OCUtil.dll library used by Nextcloud Desktop Client 2.6.4 can lead to a DoS aga…

5.5

First published (updated )

CVE-2020-8229

Nextcloud Desktop ClientCode Injection