Filter
AND
-Infinity
0
Trending
Nextcloud ServerUser enumeration setting not respected in Nextcloud server
5.3
First published (updated )
Nextcloud ServerAdvanced permissions is not respected for subfolders in Nextcloud server
4.3
First published (updated )
Nextcloud ServerMissing authorization in Nextcloud text
6.5
First published (updated )
Nextcloud ServerPossible Injection in Nextcloud Server
First published (updated )
Nextcloud ServerHigh memory usage in Nextcloud server
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Nextcloud ServerSMTP Command Injection in iCalendar Attachments to emails via newlines in Nextcloud Server
5.4
First published (updated )
Nextcloud ServerDirectory traversal in Nextcloud server
7.5
First published (updated )
Nextcloud ServerNextcloud Server and Enterprise Server missing brute force protection on password confirmation modal
7.8
First published (updated )
Nextcloud ServerScope of workflow operations is not validated in nextcloud server
9.1
First published (updated )
Nextcloud ServerUsers can set up workflows using restricted and invisible system tags in Nextcloud
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Nextcloud ServerNextcloud Server's brute force protection allows someone to send more requests than intended
8.7
First published (updated )
Nextcloud ServerNextcloud user scoped external storage can be used to gather credentials of other users
8.8
First published (updated )
Nextcloud ServerNextcloud Server password reset endpoint is not brute force protected
9.1
First published (updated )
Nextcloud ServerRate-limits not working on instances without configured memory cache backend
8.1
First published (updated )
Nextcloud ServerNextcloud system addressbooks can be modified by malicious trusted server
8.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Nextcloud ServerMissing password confirmation when creating app passwords
8.1
First published (updated )
Nextcloud ServerUsers can delete external storage mount points
7.7
First published (updated )
Nextcloud ServerExceptions may have logged Encryption-at-Rest key content in Nextcloud server
5.5
First published (updated )
Nextcloud ServerBypass of Two Factor Authentication in Nextcloud server
8.1
First published (updated )
Nextcloud ServerNextcloud Text app can disclose existence of folders in "File Drop" link share
5.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Nextcloud ServerPreview generation used third-party library not suited for user-generated content in Nextcloud server
10
First published (updated )
Nextcloud ServerFile path disclosure of shared files in Nextcloud Text application
5.3
First published (updated )
Nextcloud ServerLack of ratelimit on public share link mount endpoint
5.3
First published (updated )
Nextcloud ServerDefault share permissions not respected for federated reshares
5.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Nextcloud ServerWebauthn tokens not removed after user has been deleted
9.8
First published (updated )
Nextcloud ServerFilenames not escaped by default in controllers using DownloadResponse
8.8
First published (updated )
Nextcloud ServerRatelimit not applied on OCS API responses
5.3
First published (updated )
Nextcloud ServerAudit log is not properly logging unsetting of share expiration date
3.3
First published (updated )
Nextcloud ServerApplication specific tokens can change their own scope
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.