Skip to contentKiteworks vulnerabilities
Newest
- nextcloud server, richdocuments, kiteworks security-advisories +2 moreNextcloud Server previews are accessible without a watermarkCVE-2023-251592.3 Low
- nextcloud richdocuments, kiteworks security-advisories +1 moreDocument content of files can be obtained through Collabora for files of other usersCVE-2023-251505.8 Medium
- nextcloud desktop, kiteworks security-advisories +1 moreSelf reflected HTML injection in Desktop clientCVE-2023-23942Fix available5.4 Medium
- nextcloud mail, kiteworks security-advisories +1 moreBlind SSRF via server URL input in the Nextcloud Mail appCVE-2023-239435.0 Medium
- nextcloud mail, kiteworks security-advisories +1 moreNexcloud Mail app temporarily stores cleartext password in databaseCVE-2023-239442.0 Low
- nextcloud deck, kiteworks security-advisories +1 moreNextcloud Deck vulnerable to authorization bypassCVE-2023-224713.5 Low
- nextcloud deck, kiteworks security-advisories +1 moreNextcloud Deck vulnerable to uncontrolled resource consumptionCVE-2023-224703.5 Low
- nextcloud deck, kiteworks security-advisories +1 moreNextcloud Deck card vulnerable to data leak to unauthorized users via reference preview cacheCVE-2023-224695.8 Medium
- nextcloud talk, kiteworks security-advisories +1 morePasscode bypass on Talk-Android appCVE-2023-224732.1 Low
- nextcloud desktop, kiteworks security-advisories +1 moreNextcloud Deck Desktop Client is vulnerable to Cross-Site Request Forgery (CSRF) via malicious linkCVE-2023-22472Fix available5.3 Medium
- nextcloud talk, kiteworks security-advisories +1 moreNextcloud Talk guests can continue to receive video streams from call after being removed from a conversationCVE-2022-419714.8 Medium
- nextcloud server, kiteworks security-advisories +1 moreNextcloud Server's disabled download shares still allow download through preview imagesCVE-2022-419702.6 Low
- nextcloud server, kiteworks security-advisories +1 moreNextcloud Server has no password length limit when creating a user as an administratorCVE-2022-419692.4 Low
- nextcloud server, kiteworks security-advisories +1 moreNextcloud Server's calendar name length not validated before writing to databaseCVE-2022-419683.5 Low
- nextcloud talk, kiteworks security-advisories +1 moreNextcloud Talk Android broadcast incorrect permission handlingCVE-2022-419263.3 Low
- nextcloud server, fedoraproject fedora, kiteworks security-advisories +1 more +3 moreMissing length validation of user displayname in nextcloud serverCVE-2022-393463.5 Low
- nextcloud openid connect user backend, kiteworks security-advisories +1 moreCleartext Transmission of Sensitive Information in user_oidcCVE-2022-393394.3 Medium
- nextcloud openid connect user backend, kiteworks security-advisories +1 moreStored cross site scripting (XSS) vulnerability via Authorization Endpoint in user_oidcCVE-2022-393383.5 Low
- nextcloud desktop, kiteworks security-advisories +1 morenextcloudcmd incorrectly trusts bad TLS certificatesCVE-2022-39334Fix available3.9 Low
- nextcloud desktop, kiteworks security-advisories +1 moreCross-site scripting (XSS) in Nextcloud Desktop ClientCVE-2022-39333Fix available4.6 Medium
- nextcloud desktop, kiteworks security-advisories +1 moreCross-site scripting (XSS) in Nextcloud Desktop ClientCVE-2022-39332Fix available4.6 Medium
- nextcloud desktop, kiteworks security-advisories +1 moreCross-site Scripting (XSS) in Nexcloud Desktop ClientCVE-2022-39331Fix available4.6 Medium
- nextcloud desktop, kiteworks security-advisories +1 moreNextcloud Desktop vulnerable to code injection via malicious linkCVE-2022-41882Fix available6.6 Medium
- nextcloud enterprise server, server, kiteworks security-advisories +2 moreException logging in Sharepoint app reveals clear-text connection detailsCVE-2022-393644.0 Medium
- nextcloud enterprise server, server, kiteworks security-advisories +2 moreDatabase resource exhaustion for logged-in users via sharee recommendations with circlesCVE-2022-393304.8 Medium
- nextcloud enterprise server, server, kiteworks security-advisories +2 moreProfile of disabled user stays accessibleCVE-2022-393293.5 Low
- nextcloud talk, kiteworks security-advisories +1 moreLast video frame is still sent after video is disabled in a call in Nextcloud TalkCVE-2022-392124.3 Medium
- nextcloud, kiteworks security-advisories +1 moreAccess to internal files of the Nextcloud Android appCVE-2022-39210Fix available3.2 Low
- nextcloud enterprise server, server, kiteworks security-advisories +2 moreServer-Side Request Forgery (SSRF) via potential filter bypass in Nextcloud ServerCVE-2022-392113.0 Low
- nextcloud enterprise server, server, kiteworks security-advisories +2 moreAuthentication headers exposed on by Nextcloud ServerCVE-2022-360746.4 Medium
- nextcloud files access control, kiteworks security-advisories +1 moreFile list exposure in Nextcloud Files Access ControlCVE-2022-360752.6 Low
- nextcloud password policy, kiteworks security-advisories +1 moreNextcloud Password Policy's generated passwords are not fully validated by HIBPValidatorCVE-2022-359312.7 Low
- nextcloud talk, kiteworks security-advisories +1 moreMissing rate limit when trying to join a password protected Nextcloud Talk conversationCVE-2022-359323.5 Low
- nextcloud mail, kiteworks security-advisories +1 morePassword disclosure in log file in Nextcloud Mail AppCVE-2022-311193.1 Low
- nextcloud mail, kiteworks security-advisories +1 moreUnauthenticated SSRF in 3rd party module "cerdic/csstidy"CVE-2022-311328.3 High
- nextcloud server, kiteworks security-advisories +1 moreFederated share accepting/declining is not logged in audit log in Nextcloud ServerCVE-2022-311202.1 Low
- nextcloud server, kiteworks security-advisories +1 moreMissing brute force protection on cloud federation sharing in Nextcloud ServerCVE-2022-311186.5 Medium
- kiteworks security-advisories, nextcloud mail +1 moreOwnership check missing when updating or deleting mail attachments in Nextcloud mailCVE-2022-311315.4 Medium
- nextcloud server, kiteworks security-advisories +1 moreSMTP Command Injection in iCalendar Attachments to emails via newlines in Nextcloud ServerCVE-2022-310145.4 Medium
- nextcloud richdocuments, kiteworks security-advisories +1 moreFederated editing allows iframing remote servers by default in richdocumentsCVE-2022-310246.5 Medium
- nextcloud server, kiteworks security-advisories +1 moreImproper input-size validation on the user new session name in Nextcloud ServerCVE-2022-292434.3 Medium
- nextcloud server, kiteworks security-advisories +1 moreBypass of password requirements when sharing a folder via the Circles app in Nextcloud ServerCVE-2022-291633.5 Low
- nextcloud, kiteworks security-advisories +1 moreSensitive files/data exist after deletion of user account in Nextcloud AndroidCVE-2022-29160Fix available2.8 Low
- nextcloud deck, kiteworks security-advisories +1 moreError in deleting deck cards attachment reveals the full application path in Nextcloud DeckCVE-2022-249063.5 Low
- nextcloud deck, kiteworks security-advisories +1 morePossibility for anyone to add a stack with existing tasks on anyone's board in Nextcloud DeckCVE-2022-291595.0 Medium
- nextcloud talk, kiteworks security-advisories +1 moreExposure of Private Personal Information to an Unauthorized Actor in Nextcloud TalkCVE-2022-248902.4 Low
- nextcloud server, kiteworks security-advisories +1 moreInsufficient Verification of Data Authenticity in Nextcloud ServerCVE-2022-248892.4 Low
- nextcloud server, kiteworks security-advisories +1 morePossible Injection in Nextcloud ServerCVE-2022-248884.3 Medium
- nextcloud talk, kiteworks security-advisories +1 moreOpen Redirect in Nextcloud TalkCVE-2022-248874.3 Medium
- nextcloud, kiteworks security-advisories +1 moreExposure of Sensitive Information to an Unauthorized Actor in com.nextcloud.clientCVE-2022-24886Fix available2.2 Low
- Show moreLoading…