Filter
AND
-Infinity
0

Nextcloud ServerUser enumeration setting not respected in Nextcloud server

First published (updated )

Nextcloud ServerAdvanced permissions is not respected for subfolders in Nextcloud server

First published (updated )

Nextcloud ServerMissing authorization in Nextcloud text

First published (updated )

Nextcloud ServerPossible Injection in Nextcloud Server

First published (updated )

Nextcloud ServerBypass of password requirements when sharing a folder via the Circles app in Nextcloud Server

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Nextcloud ServerImproper input-size validation on the user new session name in Nextcloud Server

First published (updated )

Nextcloud ServerMissing brute force protection on cloud federation sharing in Nextcloud Server

First published (updated )

Nextcloud Enterprise ServerServer-Side Request Forgery (SSRF) via potential filter bypass in Nextcloud Server

First published (updated )

Nextcloud Enterprise ServerProfile of disabled user stays accessible

First published (updated )

Nextcloud Enterprise ServerDatabase resource exhaustion for logged-in users via sharee recommendations with circles

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Nextcloud Enterprise ServerMissing length validation of user displayname in nextcloud server

First published (updated )

Nextcloud ServerNextcloud Server's calendar name length not validated before writing to database

First published (updated )

Nextcloud ServerNextcloud Server's disabled download shares still allow download through preview images

First published (updated )

Nextcloud ServerHigh memory usage in Nextcloud server

First published (updated )

Nextcloud ServerInsufficient Verification of Data Authenticity in Nextcloud Server

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Nextcloud ServerSMTP Command Injection in iCalendar Attachments to emails via newlines in Nextcloud Server

First published (updated )

Nextcloud Enterprise ServerException logging in Sharepoint app reveals clear-text connection details

First published (updated )

Nextcloud ServerNextcloud Server previews are accessible without a watermark

First published (updated )

Nextcloud ServerNextcloud Server's missing rate limiting on password reset functionality allows sending lots of emails

First published (updated )

Nextcloud ServerNextcloud Server vulnerable to SSRF via filter bypass due to lax checking on IPs

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Nextcloud Servernextcloud vulnerable to Uncontrolled Resource Consumption

First published (updated )

Nextcloud ServerUser without download rights can download older version of that file in nextcloud server

First published (updated )

Nextcloud ServerFull path of data directory exposed to Nextcloud server users

First published (updated )

Nextcloud ServerNextcloud Server is missing password confirmation when changing external storage options

First published (updated )

Nextcloud ServerNextcloud Server has a potential hash collision for background jobs could skip queuing them

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Nextcloud ServerNextcloud Server's global credentials of external storages are sent back to the frontend

First published (updated )

Nextcloud ServerNextcloud Server's shares are not removed when user is limited to share with in their groups and being removed from one of them

First published (updated )

Nextcloud ServerNextcloud Server user_ldap app logs user passwords in the log file on level debug

First published (updated )

Nextcloud ServerTwo-Factor Authentication not enforced for pages marked as public

First published (updated )

Nextcloud ServerNextcloud Server Custom defined credentials of external storages are sent back to the frontend

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203