Skip to contentKiteworks Security-advisories vulnerabilities
- nextcloud desktop, debian linux, kiteworks security-advisories +2 moreEnd-to-end encryption device setup did not verify public keyCVE-2021-32728Fix available6.5 Medium
- nextcloud richdocuments, kiteworks security-advisories +1 moreWOPI API not protected by credentials/IP checkCVE-2021-327484.3 Medium
- nextcloud server, kiteworks security-advisories +1 moreLack of ratelimit on public share link mount endpointCVE-2021-327415.3 Medium
- nextcloud server, kiteworks security-advisories +1 moreFile path disclosure of shared files in Nextcloud Text applicationCVE-2021-327343.1 Low
- nextcloud server, kiteworks security-advisories +1 moreXSS in Nextcloud Text applicationCVE-2021-327334.8 Medium
- nextcloud, kiteworks security-advisories +1 moreEnd-to-end encryption device setup did not verify public keyCVE-2021-32727Fix available5.7 Medium
- nextcloud server, kiteworks security-advisories +1 moreWebauthn tokens not removed after user has been deletedCVE-2021-327267.1 High
- nextcloud server, kiteworks security-advisories +1 moreDefault share permissions not respected for federated resharesCVE-2021-327253.5 Low
- nextcloud mail, kiteworks security-advisories +1 moreBypass of image blocking in Nextcloud MailCVE-2021-327074.3 Medium
- nextcloud talk, kiteworks security-advisories +1 moreNextcloud Talk not properly disassociating users from chats after account deletionCVE-2021-326898.1 High
- nextcloud server, fedoraproject fedora, kiteworks security-advisories +2 moreLack of ratelimit on public DAV endpointCVE-2021-327055.3 Medium
- nextcloud server, fedoraproject fedora, kiteworks security-advisories +2 moreLack of ratelimit on shareinfo endpointCVE-2021-327035.3 Medium
- nextcloud server, fedoraproject fedora, kiteworks security-advisories +2 moreApplication specific tokens can change their own scopeCVE-2021-326888.8 High
- nextcloud server, fedoraproject fedora, kiteworks security-advisories +2 moreAudit log is not properly logging unsetting of share expiration dateCVE-2021-326803.3 Low
- nextcloud server, fedoraproject fedora, kiteworks security-advisories +2 moreFilenames not escaped by default in controllers using DownloadResponseCVE-2021-326793.5 Low
- nextcloud server, fedoraproject fedora, kiteworks security-advisories +2 moreRatelimit not applied on OCS API responsesCVE-2021-326783.7 Low
- nextcloud, kiteworks security-advisories +1 moreMalicious Android application can crash the Nextcloud Android ClientCVE-2021-32694Fix available4.1 Medium
- nextcloud, kiteworks security-advisories +1 moreMalicious Android app could access Shared Preferences of the Nextcloud Android clientCVE-2021-32695Fix available3.9 Low
- nextcloud talk, kiteworks security-advisories +1 moreSession Fixation in Nextcloud TalkCVE-2021-326766.5 Medium
- nextcloud, kiteworks security-advisories +1 moreSensitive data may not be removed from storage on account removalCVE-2021-32658Fix available4.7 Medium
- nextcloud server, kiteworks security-advisories +1 moreMalicious user could break user administration pageCVE-2021-326574.3 Medium
- nextcloud server, kiteworks security-advisories +1 moreTrusted servers exchange can be triggered by attackerCVE-2021-326568.6 High
- nextcloud server, kiteworks security-advisories +1 moreFiles Drop public link can be added as federated shareCVE-2021-326553.5 Low
- nextcloud server, kiteworks security-advisories +1 moreAttacker can obtain write access to any federated share/public linkCVE-2021-326548.1 High
- nextcloud server, kiteworks security-advisories +1 moreDefault settings leak federated cloud ID to lookup server of all usersCVE-2021-326532.7 Low
- nextcloud mail, kiteworks security-advisories +1 moreMissing permission check on email metadata retrievalCVE-2021-326528.8 High