Filters
Software
Nextcloud DesktopIn Nextcloud Desktop Client 3.13.1 through 3.13.3 on Linux, synchronized files (between the server a…
9.1
First published (updated )
Nextcloud Global Site SelectorNextcloud global site selector authentication bypass
9.8
EPSS
0.10%
First published (updated )
Nextcloud Nextcloud ServerBruteforce protection can be bypassed with misconfigured proxy
9.8
First published (updated )
Nextcloud mailNextcloud Mail app vulnerable to Server-Side Request Forgery
9.8
First published (updated )
Nextcloud Nextcloud ServerNextcloud Server DNS pin middleware can be tricked into DNS rebinding allowing SSRF
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Nextcloud Nextcloud ServerNextcloud Server password reset endpoint is not brute force protected
9.1
First published (updated )
Nextcloud User OidcNextcloud user_oidc app is missing brute force protection
9.8
First published (updated )
Nextcloud Nextcloud ServerScope of workflow operations is not validated in nextcloud server
9.1
First published (updated )
Nextcloud mailUnauthenticated SSRF in 3rd party module "cerdic/csstidy"
9.8
First published (updated )
Nextcloud calendarCommand Injection in Appointment Emails for Nextcloud Calendar
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Nextcloud Nextcloud ServerPreview generation used third-party library not suited for user-generated content in Nextcloud server
10
First published (updated )
Nextcloud Nextcloud ServerWebauthn tokens not removed after user has been deleted
9.8
First published (updated )
Nextcloud Nextcloud ServerNextcloud server before 19.0.11, 20.0.10, 21.0.2 is vulnerable to brute force attacks due to lack of…
9.8
First published (updated )
Nextcloud Nextcloud ServerAttacker can obtain write access to any federated share/public link
9.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.