Filters

Nextcloud DeckNextcloud Deck can access comments and attachments of deleted cards

First published (updated )

Nextcloud DeckCross-site Scripting when sending HTML as a comment in the Nextcloud Deck app

EPSS
0.05%
First published (updated )

Nextcloud DeckNextcloud Deck vulnerable to authorization bypass

First published (updated )

Nextcloud DeckNextcloud Deck vulnerable to uncontrolled resource consumption

First published (updated )

Nextcloud DeckNextcloud Deck card vulnerable to data leak to unauthorized users via reference preview cache

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Nextcloud DeckError in deleting deck cards attachment reveals the full application path in Nextcloud Deck

First published (updated )

Nextcloud DeckPossibility for anyone to add a stack with existing tasks on anyone's board in Nextcloud Deck

First published (updated )

Nextcloud DeckCircle can be accessed by non-Circle members in Nextcloud Deck

First published (updated )

Nextcloud DeckInfoleak

First published (updated )

Nextcloud DeckNextcloud Deck before 1.0.2 suffers from an insecure direct object reference (IDOR) vulnerability th…

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Nextcloud DeckMissing access control in Nextcloud Deck 1.0.4 caused an insecure direct object reference allowing a…

First published (updated )

Nextcloud DeckImproper access control in Nextcloud Deck 1.0.0 allowed an attacker to inject tasks into other users…

First published (updated )

Nextcloud DeckXSS

First published (updated )

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203