Skip to contentNextcloud vulnerabilities
Newest
- nextcloud server, kiteworks security-advisories +1 moreNextcloud Server's disabled download shares still allow download through preview imagesCVE-2022-419702.6 Low
- nextcloud server, kiteworks security-advisories +1 moreNextcloud Server has no password length limit when creating a user as an administratorCVE-2022-419692.4 Low
- nextcloud server, kiteworks security-advisories +1 moreNextcloud Server's calendar name length not validated before writing to databaseCVE-2022-419683.5 Low
- nextcloud talk, kiteworks security-advisories +1 moreNextcloud Talk Android broadcast incorrect permission handlingCVE-2022-419263.3 Low
- nextcloud server, fedoraproject fedora, kiteworks security-advisories +1 more +3 moreMissing length validation of user displayname in nextcloud serverCVE-2022-393463.5 Low
- nextcloud openid connect user backend, kiteworks security-advisories +1 moreCleartext Transmission of Sensitive Information in user_oidcCVE-2022-393394.3 Medium
- nextcloud openid connect user backend, kiteworks security-advisories +1 moreStored cross site scripting (XSS) vulnerability via Authorization Endpoint in user_oidcCVE-2022-393383.5 Low
- nextcloud desktop, kiteworks security-advisories +1 morenextcloudcmd incorrectly trusts bad TLS certificatesCVE-2022-39334Fix available3.9 Low
- nextcloud desktop, kiteworks security-advisories +1 moreCross-site scripting (XSS) in Nextcloud Desktop ClientCVE-2022-39333Fix available4.6 Medium
- nextcloud desktop, kiteworks security-advisories +1 moreCross-site scripting (XSS) in Nextcloud Desktop ClientCVE-2022-39332Fix available4.6 Medium
- nextcloud desktop, kiteworks security-advisories +1 moreCross-site Scripting (XSS) in Nexcloud Desktop ClientCVE-2022-39331Fix available4.6 Medium
- nextcloud desktop, kiteworks security-advisories +1 moreNextcloud Desktop vulnerable to code injection via malicious linkCVE-2022-41882Fix available6.6 Medium
- nextcloud enterprise server, server, kiteworks security-advisories +2 moreException logging in Sharepoint app reveals clear-text connection detailsCVE-2022-393644.0 Medium
- nextcloud enterprise server, server, kiteworks security-advisories +2 moreDatabase resource exhaustion for logged-in users via sharee recommendations with circlesCVE-2022-393304.8 Medium
- nextcloud enterprise server, server, kiteworks security-advisories +2 moreProfile of disabled user stays accessibleCVE-2022-393293.5 Low
- nextcloud talk, kiteworks security-advisories +1 moreLast video frame is still sent after video is disabled in a call in Nextcloud TalkCVE-2022-392124.3 Medium
- nextcloud, kiteworks security-advisories +1 moreAccess to internal files of the Nextcloud Android appCVE-2022-39210Fix available3.2 Low
- nextcloud enterprise server, server, kiteworks security-advisories +2 moreServer-Side Request Forgery (SSRF) via potential filter bypass in Nextcloud ServerCVE-2022-392113.0 Low
- nextcloud enterprise server, server, kiteworks security-advisories +2 moreAuthentication headers exposed on by Nextcloud ServerCVE-2022-360746.4 Medium
- nextcloud files access control, kiteworks security-advisories +1 moreFile list exposure in Nextcloud Files Access ControlCVE-2022-360752.6 Low
- nextcloud password policy, kiteworks security-advisories +1 moreNextcloud Password Policy's generated passwords are not fully validated by HIBPValidatorCVE-2022-359312.7 Low
- nextcloud talk, kiteworks security-advisories +1 moreMissing rate limit when trying to join a password protected Nextcloud Talk conversationCVE-2022-359323.5 Low
- nextcloud mail, kiteworks security-advisories +1 morePassword disclosure in log file in Nextcloud Mail AppCVE-2022-311193.1 Low
- nextcloud mail, kiteworks security-advisories +1 moreUnauthenticated SSRF in 3rd party module "cerdic/csstidy"CVE-2022-311328.3 High
- nextcloud server, kiteworks security-advisories +1 moreFederated share accepting/declining is not logged in audit log in Nextcloud ServerCVE-2022-311202.1 Low
- nextcloud server, kiteworks security-advisories +1 moreMissing brute force protection on cloud federation sharing in Nextcloud ServerCVE-2022-311186.5 Medium
- kiteworks security-advisories, nextcloud mail +1 moreOwnership check missing when updating or deleting mail attachments in Nextcloud mailCVE-2022-311315.4 Medium
- nextcloud server, kiteworks security-advisories +1 moreSMTP Command Injection in iCalendar Attachments to emails via newlines in Nextcloud ServerCVE-2022-310145.4 Medium
- nextcloud richdocuments, kiteworks security-advisories +1 moreFederated editing allows iframing remote servers by default in richdocumentsCVE-2022-310246.5 Medium
- nextcloud server, kiteworks security-advisories +1 moreImproper input-size validation on the user new session name in Nextcloud ServerCVE-2022-292434.3 Medium
- nextcloud server, kiteworks security-advisories +1 moreBypass of password requirements when sharing a folder via the Circles app in Nextcloud ServerCVE-2022-291633.5 Low
- nextcloud, kiteworks security-advisories +1 moreSensitive files/data exist after deletion of user account in Nextcloud AndroidCVE-2022-29160Fix available2.8 Low
- nextcloud deck, kiteworks security-advisories +1 moreError in deleting deck cards attachment reveals the full application path in Nextcloud DeckCVE-2022-249063.5 Low
- nextcloud deck, kiteworks security-advisories +1 morePossibility for anyone to add a stack with existing tasks on anyone's board in Nextcloud DeckCVE-2022-291595.0 Medium
- nextcloud talk, kiteworks security-advisories +1 moreExposure of Private Personal Information to an Unauthorized Actor in Nextcloud TalkCVE-2022-248902.4 Low
- nextcloud server, kiteworks security-advisories +1 moreInsufficient Verification of Data Authenticity in Nextcloud ServerCVE-2022-248892.4 Low
- nextcloud server, kiteworks security-advisories +1 morePossible Injection in Nextcloud ServerCVE-2022-248884.3 Medium
- nextcloud talk, kiteworks security-advisories +1 moreOpen Redirect in Nextcloud TalkCVE-2022-248874.3 Medium
- nextcloud, kiteworks security-advisories +1 moreExposure of Sensitive Information to an Unauthorized Actor in com.nextcloud.clientCVE-2022-24886Fix available2.2 Low
- nextcloud, kiteworks security-advisories +1 moreImproper Authentication in Nextcloud Android FilesCVE-2022-24885Fix available2.0 Low
- nextcloud calendar, kiteworks security-advisories +1 moreCommand Injection in Appointment Emails for Nextcloud CalendarCVE-2022-24838EPSS 33.0%5.3 Medium
- nextcloud server, kiteworks security-advisories +1 moreMissing authorization in Nextcloud textCVE-2021-412336.5 Medium
- nextcloud server, kiteworks security-advisories +1 moreHigh memory usage in Nextcloud serverCVE-2022-247413.5 Low
- nextcloud server, kiteworks security-advisories +1 moreAdvanced permissions is not respected for subfolders in Nextcloud serverCVE-2021-412414.3 Medium
- nextcloud server, kiteworks security-advisories +1 moreUser enumeration setting not respected in Nextcloud serverCVE-2021-412395.3 Medium
- nextcloud talk, kiteworks security-advisories +1 moreNextcloud Talk app exposes chat messages on lockscreenCVE-2021-411812.4 Low
- nextcloud talk, kiteworks security-advisories +1 moreGeolocation preview links can be set to arbitrary links in nextcloud talkCVE-2021-411804.7 Medium
- nextcloud, kiteworks security-advisories +1 morePermission bypass in Nextcloud Android AppCVE-2021-41166Fix available4.3 Medium
- google android, nextcloud +1 moreSQL Injection in FileContentProvider (GHSL-2021-1007)CVE-2021-43863Fix available7.5 High
- nextcloud news, news-android +1 moreIntent URI permissions manipulation in nextcloud news-androidCVE-2021-412565.8 Medium
- Show moreLoading…