Filter
AND
Versions
25.0.0
43
24.0.0
41
21.0.0
40
23.0.0
36
26.0.0
28
20.0.0
26
22.0.0
24
27.0.0
21
10.0.0
12
16.0.0
8
13.0.0
7
19.0.0
6
15.0.0
5
22.2.0
5
11.0.0
4
14.0.0
4
17.0.0
4
18.0.0
4
28.0.0
4
24.0.4
3
10.0.2
2
14.0.0-beta1
2
14.0.0-beta2
2
14.0.0-beta3
2
14.0.0-beta4
2
14.0.0-rc1
2
14.0.0-rc2
2
10.0-rc1
1
10.0.1
1
12.0.0
1
12.0.5
1
14.0.5
1
14.0.6
1
16.0.1
1
19.0.1
1
22.2.10.16
1
23.0.12
1
24.0.0-beta1
1
24.0.0-beta2
1
24.0.0-beta3
1
24.0.0-rc1
1
24.0.0-rc2
1
24.0.0-rc3
1
24.0.12
1
24.0.2
1
24.0.8
1
25.0.13
1
25.0.2
1
26.0.8
1
27.1.3
1
28.0.6
1
29.0.0
1
9.0.51
1
9.0.54
1
Nextcloud Nextcloud ServerPreview generation used third-party library not suited for user-generated content in Nextcloud server
10
First published (updated )
Nextcloud Nextcloud ServerWebauthn tokens not removed after user has been deleted
9.8
First published (updated )
Nextcloud Nextcloud ServerNextcloud server before 19.0.11, 20.0.10, 21.0.2 is vulnerable to brute force attacks due to lack of…
9.8
First published (updated )
Nextcloud Nextcloud ServerNextcloud Server DNS pin middleware can be tricked into DNS rebinding allowing SSRF
9.8
First published (updated )
Nextcloud Nextcloud ServerBruteforce protection can be bypassed with misconfigured proxy
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Nextcloud Nextcloud ServerAttacker can obtain write access to any federated share/public link
9.1
First published (updated )
Nextcloud Nextcloud ServerScope of workflow operations is not validated in nextcloud server
9.1
First published (updated )
Nextcloud Nextcloud ServerNextcloud Server password reset endpoint is not brute force protected
9.1
First published (updated )
Nextcloud Nextcloud ServerOAuth2 client_secret stored in plain text in the Nextcloud database
8.8
First published (updated )
Nextcloud Nextcloud ServerFilenames not escaped by default in controllers using DownloadResponse
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Nextcloud Nextcloud ServerImproper Authentication in Nextcloud Server prior to version 12.0.3 would allow an attacker that obt…
8.8
First published (updated )
Nextcloud Nextcloud ServerApplication specific tokens can change their own scope
8.8
First published (updated )
Nextcloud Nextcloud ServerUnrestricted filenames for logo or favicon as admin in the theming settings in nextcloud server
8.8
First published (updated )
Nextcloud Nextcloud ServerUsers can set up workflows using restricted and invisible system tags in Nextcloud
8.8
First published (updated )
Nextcloud Nextcloud ServerNextcloud user scoped external storage can be used to gather credentials of other users
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Nextcloud Nextcloud ServerNextcloud Server's brute force protection allows someone to send more requests than intended
8.7
First published (updated )
Nextcloud Nextcloud ServerTrusted servers exchange can be triggered by attacker
8.6
First published (updated )
Nextcloud Nextcloud ServerNextcloud Server users can make external storage mount points inaccessible for other users
8.5
First published (updated )
Nextcloud Nextcloud ServerNextcloud server is an open source personal cloud implementation. Missing brute-force protection on …
8.1
First published (updated )
Nextcloud Nextcloud ServerNextcloud Server can reshare read&share only folder with more permissions
8.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Nextcloud Nextcloud ServerInsufficient protection of the server-side encryption keys in Nextcloud Server 19.0.1 allowed an att…
8.1
First published (updated )
Nextcloud Nextcloud ServerA bug in Nextcloud Server 14.0.4 could expose more data in reshared link shares than intended by the…
8.1
First published (updated )
Nextcloud Nextcloud ServerImproper revalidation of permissions in Nextcloud Server prior to 14.0.0, 13.0.6 and 12.0.11 lead to…
8.1
First published (updated )
ownCloud ownCloudNextcloud Server before 9.0.54 and 10.0.1 & ownCloud Server before 9.1.2, 9.0.6, and 8.2.9 suffer fr…
8.1
First published (updated )
Nextcloud Nextcloud ServerRate-limits not working on instances without configured memory cache backend
8.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Nextcloud Nextcloud ServerBypass of Two Factor Authentication in Nextcloud server
8.1
First published (updated )
Nextcloud Nextcloud ServerNextcloud Server before 12.0.8 and 13.0.3 suffer from improper authentication on the OAuth2 token en…
8.1
First published (updated )
Nextcloud Nextcloud ServerDelete permissions are not saved when creating public share in Nextcloud server
8.1
First published (updated )
Nextcloud Nextcloud ServerMissing password confirmation when creating app passwords
8.1
First published (updated )
Nextcloud Nextcloud ServerNextcloud system addressbooks can be modified by malicious trusted server
8.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.