Skip to contentNextcloud Server vulnerabilities
- hackerone nextcloud server, nextcloud server +1 moreA missing check in Nextcloud Server 17.0.0 allowed an attacker to set up a new second factor when...CVE-2019-156175.4 Medium
- hackerone nextcloud server, nextcloud server +1 moreDangling remote share attempts in Nextcloud 16 allow a DNS pollution when running long.CVE-2019-156164.3 Medium
- hackerone nextcloud server, nextcloud server, opensuse backports +2 moreA bug in Nextcloud Server 17.0.1 causes the workflow rules to depend their behaviour on the file...CVE-2019-15613Fix available8.0 High
- hackerone nextcloud server, nextcloud server +1 moreA bug in Nextcloud Server 15.0.2 causes pending 2FA logins to not be correctly expired when the...CVE-2019-156125.9 Medium
- hackerone nextcloud server, nextcloud server +1 moreA missing check in the Nextcloud Server prior to version 15.0.1 causes leaking of calendar event...CVE-2019-54494.3 Medium
- nextcloud com.nextcloud.client, server +1 moreBypass lock protection in the Nextcloud Android app prior to version 3.6.1 allows accessing the...CVE-2019-54514.6 Medium
- hackerone nextcloud server, nextcloud server +1 moreA missing check in Nextcloud Server prior to 14.0.0 could give unauthorized access to the...CVE-2018-164675.3 Medium
- hackerone nextcloud server, nextcloud server +1 moreImproper revalidation of permissions in Nextcloud Server prior to 14.0.0, 13.0.6 and 12.0.11 lead...CVE-2018-164668.1 High
- hackerone nextcloud server, nextcloud server +1 moreMissing state in Nextcloud Server prior to 14.0.0 would not enforce the use of a second factor at...CVE-2018-164655.3 Medium
- hackerone nextcloud server, nextcloud server +1 moreA missing access check in Nextcloud Server prior to 14.0.0 could lead to continued access to...CVE-2018-164645.7 Medium
- hackerone nextcloud server, nextcloud server +1 moreA bug causing session fixation in Nextcloud Server prior to 14.0.0, 13.0.3 and 12.0.8 could...CVE-2018-164633.1 Low
- nextcloud server, nextcloud/server +1 moreA missing sanitization of search results for an autocomplete field in NextCloud Server <13.0.5...CVE-2018-3780Fix available5.4 Medium
- hackerone nextcloud server, nextcloud server +1 moreImproper input validator in Nextcloud Server prior to 12.0.3 and 11.0.5 could lead to an attacker...CVE-2018-37765.3 Medium
- hackerone nextcloud server, nextcloud server +1 moreImproper Authentication in Nextcloud Server prior to version 12.0.3 would allow an attacker that...CVE-2018-37758.8 High
- hackerone nextcloud server, nextcloud server +1 moreNextcloud Server before 12.0.8 and 13.0.3 suffers from improper checks of dropped permissions for...CVE-2018-37624.3 Medium
- hackerone nextcloud server, nextcloud server +1 moreNextcloud Server before 12.0.8 and 13.0.3 suffer from improper authentication on the OAuth2 token...CVE-2018-37618.1 High
- hackerone nextcloud server, nextcloud server +1 moreNextcloud Server before 11.0.7 and 12.0.5 suffers from an Authorization Bypass Through User...CVE-2017-09365.7 Medium
- hackerone nextcloud server, nextcloud server +1 moreNextcloud Server before 10.0.4 and 11.0.2 are vulnerable to disclosure of calendar and...CVE-2017-08953.5 Low
- hackerone nextcloud server, nextcloud server +1 moreNextcloud Server before 11.0.3 is vulnerable to disclosure of valid share tokens for public...CVE-2017-08944.3 Medium
- hackerone nextcloud server, nextcloud server +1 moreNextcloud Server before 9.0.58 and 10.0.5 and 11.0.3 are shipping a vulnerable JavaScript library...CVE-2017-08935.4 Medium
- hackerone nextcloud server, nextcloud server +1 moreNextcloud Server before 11.0.3 is vulnerable to an improper session handling allowed an...CVE-2017-08923.5 Low
- hackerone nextcloud server, nextcloud server +1 moreNextcloud Server before 9.0.58 and 10.0.5 and 11.0.3 are vulnerable to an inadequate escaping of...CVE-2017-08915.4 Medium
- hackerone nextcloud server, nextcloud server +1 moreNextcloud Server before 11.0.3 is vulnerable to an inadequate escaping leading to a XSS...CVE-2017-08905.4 Medium
- hackerone nextcloud server, nextcloud, nextcloud server +2 moreNextcloud Server before 9.0.55 and 10.0.2 suffers from a Content-Spoofing vulnerability in the ...CVE-2017-08884.3 Medium
- hackerone nextcloud server, nextcloud server +1 moreNextcloud Server before 9.0.55 and 10.0.2 suffers from a bypass in the quota limitation. Due to...CVE-2017-08874.3 Medium
- hackerone nextcloud server, nextcloud server +1 moreNextcloud Server before 9.0.55 and 10.0.2 suffers from a Denial of Service attack. Due to an...CVE-2017-08866.5 Medium
- hackerone nextcloud server, nextcloud server +1 moreNextcloud Server before 9.0.55 and 10.0.2 suffers from a error message disclosing existence of...CVE-2017-08854.3 Medium
- hackerone nextcloud server, nextcloud server +1 moreNextcloud Server before 9.0.55 and 10.0.2 suffers from a creation of folders in read-only folders...CVE-2017-08844.3 Medium
- hackerone nextcloud server, nextcloud server +1 moreNextcloud Server before 9.0.55 and 10.0.2 suffers from a permission increase on re-sharing via...CVE-2017-08836.4 Medium
- nextcloud server, owncloud +1 moreNextcloud Server before 9.0.54 and 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 suffer from...CVE-2016-94685.3 Medium
- nextcloud server, owncloud +1 moreNextcloud Server before 9.0.54 and 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 suffer from...CVE-2016-94675.3 Medium
- nextcloud server, owncloud +1 moreNextcloud Server before 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 suffer from Reflected XSS...CVE-2016-94666.1 Medium
- nextcloud server, owncloud +1 moreNextcloud Server before 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 suffer from Stored XSS in...CVE-2016-94655.4 Medium
- nextcloud serverNextcloud Server before 9.0.54 and 10.0.0 suffers from an improper authorization check on...CVE-2016-94644.3 Medium
- nextcloud server, owncloud +1 moreNextcloud Server before 9.0.54 and 10.0.1 & ownCloud Server before 9.1.2, 9.0.6, and 8.2.9 suffer...CVE-2016-94638.1 High
- nextcloud server, owncloud +1 moreNextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are not properly verifying restore...CVE-2016-94624.3 Medium
- nextcloud server, owncloud +1 moreNextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are not properly verifying edit...CVE-2016-94614.3 Medium
- nextcloud server, owncloud +1 moreNextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are vulnerable to a log pollution...CVE-2016-94596.1 Medium
- nextcloud server, owncloud +1 moreCross-site scripting (XSS) vulnerability in share.js in the gallery application in ownCloud...CVE-2016-74195.4 Medium