Skip to content

Nextcloud Server vulnerabilities

hackerone nextcloud server, nextcloud server +1 moreA reflected Cross-Site Scripting vulnerability in Nextcloud Server 16.0.1 was discovered in the...CVE-2020-81206.1 MediumFebruary 4, 2020
hackerone nextcloud server, nextcloud server +1 moreImproper authorization in Nextcloud server 17.0.0 causes leaking of previews and files when a...CVE-2020-81194.3 MediumFebruary 4, 2020
hackerone nextcloud server, nextcloud server, novell suse linux enterprise server +1 more +3 moreAn authenticated server-side request forgery in Nextcloud server 16.0.1 allowed to detect local...CVE-2020-81185.0 MediumFebruary 4, 2020
hackerone nextcloud server, nextcloud server +1 moreImproper preservation of permissions in Nextcloud Server 14.0.3 causes the event details to be...CVE-2020-81174.3 MediumFebruary 4, 2020
hackerone nextcloud server, nextcloud server, opensuse backports +1 more +3 moreImproper Input Validation in Nextcloud Server 15.0.7 allows group admins to create users with IDs...CVE-2019-156244.9 MediumFebruary 4, 2020
hackerone nextcloud server, nextcloud server, opensuse backports sle +1 more +3 moreExposure of Private Information in Nextcloud Server 16.0.1 causes the server to send it's domain...CVE-2019-156235.3 MediumFebruary 4, 2020
hackerone nextcloud server, nextcloud server +1 moreImproper permissions preservation in Nextcloud Server 16.0.1 causes sharees to be able to reshare...CVE-2019-156216.5 MediumFebruary 4, 2020
hackerone nextcloud server, nextcloud deck, server +1 more +3 moreImproper neutralization of file names, conversation names and board names in Nextcloud Server 16...CVE-2019-156194.8 MediumFebruary 4, 2020
hackerone nextcloud server, nextcloud server +1 moreMissing escaping of HTML in the Updater of Nextcloud 15.0.5 allowed a reflected XSS when starting...CVE-2019-156184.8 MediumFebruary 4, 2020
hackerone nextcloud server, nextcloud server +1 moreA missing check in Nextcloud Server 17.0.0 allowed an attacker to set up a new second factor when...CVE-2019-156175.4 MediumFebruary 4, 2020
hackerone nextcloud server, nextcloud server +1 moreDangling remote share attempts in Nextcloud 16 allow a DNS pollution when running long.CVE-2019-156164.3 MediumFebruary 4, 2020
hackerone nextcloud server, nextcloud server, opensuse backports +2 moreA bug in Nextcloud Server 17.0.1 causes the workflow rules to depend their behaviour on the file...CVE-2019-15613Fix available8.0 HighFebruary 4, 2020
hackerone nextcloud server, nextcloud server +1 moreA bug in Nextcloud Server 15.0.2 causes pending 2FA logins to not be correctly expired when the...CVE-2019-156125.9 MediumFebruary 4, 2020
nextcloud lookup-serverAn SQL Injection in the Nextcloud Lookup-Server < v0.3.0 (running on https://lookup.nextcloud.com...CVE-2019-54769.8 CriticalAugust 7, 2019
hackerone nextcloud server, nextcloud server +1 moreA missing check in the Nextcloud Server prior to version 15.0.1 causes leaking of calendar event...CVE-2019-54494.3 MediumJuly 30, 2019
nextcloud com.nextcloud.client, server +1 moreBypass lock protection in the Nextcloud Android app prior to version 3.6.1 allows accessing the...CVE-2019-54514.6 MediumJuly 30, 2019
hackerone nextcloud server, nextcloud server +1 moreA missing check in Nextcloud Server prior to 14.0.0 could give unauthorized access to the...CVE-2018-164675.3 MediumOctober 30, 2018
hackerone nextcloud server, nextcloud server +1 moreImproper revalidation of permissions in Nextcloud Server prior to 14.0.0, 13.0.6 and 12.0.11 lead...CVE-2018-164668.1 HighOctober 30, 2018
hackerone nextcloud server, nextcloud server +1 moreMissing state in Nextcloud Server prior to 14.0.0 would not enforce the use of a second factor at...CVE-2018-164655.3 MediumOctober 30, 2018
hackerone nextcloud server, nextcloud server +1 moreA missing access check in Nextcloud Server prior to 14.0.0 could lead to continued access to...CVE-2018-164645.7 MediumOctober 30, 2018
hackerone nextcloud server, nextcloud server +1 moreA bug causing session fixation in Nextcloud Server prior to 14.0.0, 13.0.3 and 12.0.8 could...CVE-2018-164633.1 LowOctober 30, 2018
nextcloud server, nextcloud/server +1 moreA missing sanitization of search results for an autocomplete field in NextCloud Server <13.0.5...CVE-2018-3780Fix available5.4 MediumAugust 13, 2018
hackerone nextcloud server, nextcloud server +1 moreImproper input validator in Nextcloud Server prior to 12.0.3 and 11.0.5 could lead to an attacker...CVE-2018-37765.3 MediumAugust 12, 2018
hackerone nextcloud server, nextcloud server +1 moreImproper Authentication in Nextcloud Server prior to version 12.0.3 would allow an attacker that...CVE-2018-37758.8 HighAugust 12, 2018
hackerone nextcloud server, nextcloud server +1 moreNextcloud Server before 12.0.8 and 13.0.3 suffers from improper checks of dropped permissions for...CVE-2018-37624.3 MediumJuly 5, 2018
hackerone nextcloud server, nextcloud server +1 moreNextcloud Server before 12.0.8 and 13.0.3 suffer from improper authentication on the OAuth2 token...CVE-2018-37618.1 HighJuly 5, 2018
hackerone nextcloud server, nextcloud server +1 moreNextcloud Server before 11.0.7 and 12.0.5 suffers from an Authorization Bypass Through User...CVE-2017-09365.7 MediumMarch 28, 2018
hackerone nextcloud server, nextcloud server +1 moreNextcloud Server before 10.0.4 and 11.0.2 are vulnerable to disclosure of calendar and...CVE-2017-08953.5 LowMay 8, 2017
hackerone nextcloud server, nextcloud server +1 moreNextcloud Server before 11.0.3 is vulnerable to disclosure of valid share tokens for public...CVE-2017-08944.3 MediumMay 8, 2017
hackerone nextcloud server, nextcloud server +1 moreNextcloud Server before 9.0.58 and 10.0.5 and 11.0.3 are shipping a vulnerable JavaScript library...CVE-2017-08935.4 MediumMay 8, 2017
hackerone nextcloud server, nextcloud server +1 moreNextcloud Server before 11.0.3 is vulnerable to an improper session handling allowed an...CVE-2017-08923.5 LowMay 8, 2017
hackerone nextcloud server, nextcloud server +1 moreNextcloud Server before 9.0.58 and 10.0.5 and 11.0.3 are vulnerable to an inadequate escaping of...CVE-2017-08915.4 MediumMay 8, 2017
hackerone nextcloud server, nextcloud server +1 moreNextcloud Server before 11.0.3 is vulnerable to an inadequate escaping leading to a XSS...CVE-2017-08905.4 MediumMay 8, 2017
hackerone nextcloud server, nextcloud, nextcloud server +2 moreNextcloud Server before 9.0.55 and 10.0.2 suffers from a Content-Spoofing vulnerability in the ...CVE-2017-08884.3 MediumApril 5, 2017
hackerone nextcloud server, nextcloud server +1 moreNextcloud Server before 9.0.55 and 10.0.2 suffers from a bypass in the quota limitation. Due to...CVE-2017-08874.3 MediumApril 5, 2017
hackerone nextcloud server, nextcloud server +1 moreNextcloud Server before 9.0.55 and 10.0.2 suffers from a Denial of Service attack. Due to an...CVE-2017-08866.5 MediumApril 5, 2017
hackerone nextcloud server, nextcloud server +1 moreNextcloud Server before 9.0.55 and 10.0.2 suffers from a error message disclosing existence of...CVE-2017-08854.3 MediumApril 5, 2017
hackerone nextcloud server, nextcloud server +1 moreNextcloud Server before 9.0.55 and 10.0.2 suffers from a creation of folders in read-only folders...CVE-2017-08844.3 MediumApril 5, 2017
hackerone nextcloud server, nextcloud server +1 moreNextcloud Server before 9.0.55 and 10.0.2 suffers from a permission increase on re-sharing via...CVE-2017-08836.4 MediumApril 5, 2017
nextcloud server, owncloud +1 moreNextcloud Server before 9.0.54 and 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 suffer from...CVE-2016-94685.3 MediumMarch 28, 2017
nextcloud server, owncloud +1 moreNextcloud Server before 9.0.54 and 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 suffer from...CVE-2016-94675.3 MediumMarch 28, 2017
nextcloud server, owncloud +1 moreNextcloud Server before 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 suffer from Reflected XSS...CVE-2016-94666.1 MediumMarch 28, 2017
nextcloud server, owncloud +1 moreNextcloud Server before 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 suffer from Stored XSS in...CVE-2016-94655.4 MediumMarch 28, 2017
nextcloud serverNextcloud Server before 9.0.54 and 10.0.0 suffers from an improper authorization check on...CVE-2016-94644.3 MediumMarch 28, 2017
nextcloud server, owncloud +1 moreNextcloud Server before 9.0.54 and 10.0.1 & ownCloud Server before 9.1.2, 9.0.6, and 8.2.9 suffer...CVE-2016-94638.1 HighMarch 28, 2017
nextcloud server, owncloud +1 moreNextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are not properly verifying restore...CVE-2016-94624.3 MediumMarch 28, 2017
nextcloud server, owncloud +1 moreNextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are not properly verifying edit...CVE-2016-94614.3 MediumMarch 28, 2017
nextcloud server, owncloud +1 moreNextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are vulnerable to a log pollution...CVE-2016-94596.1 MediumMarch 28, 2017
nextcloud server, owncloud +1 moreCross-site scripting (XSS) vulnerability in share.js in the gallery application in ownCloud...CVE-2016-74195.4 MediumSeptember 17, 2016