Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Nextcloud Server

Nextcloud Serverнабор клиент-серверных программ для создания и использования хранилища данных.

Релизный цикл, информация об уязвимостях

Продукт: Nextcloud Server
Вендор: nextcloud

График релизов

3233342025202620272028

Недавние уязвимости Nextcloud Server

Количество 456

nvd логотип

CVE-2022-41968

больше 3 лет назад

Nextcloud Server is an open source personal cloud server. Prior to versions 23.0.10 and 24.0.5, calendar name lengths are not validated before writing to a database. As a result, an attacker can send unnecessary amounts of data against the database. Version 23.0.10 and 24.0.5 contain patches for the issue. No known workarounds are available.

CVSS3: 3.5
EPSS: Низкий
debian логотип

CVE-2022-41968

больше 3 лет назад

Nextcloud Server is an open source personal cloud server. Prior to ver ...

CVSS3: 3.5
EPSS: Низкий
nvd логотип

CVE-2022-39346

больше 3 лет назад

Nextcloud server is an open source personal cloud server. Affected versions of nextcloud server did not properly limit user display names which could allow a malicious users to overload the backing database and cause a denial of service. It is recommended that the Nextcloud Server is upgraded to 22.2.10, 23.0.7 or 24.0.3. There are no known workarounds for this issue.

CVSS3: 3.5
EPSS: Низкий
debian логотип

CVE-2022-39346

больше 3 лет назад

Nextcloud server is an open source personal cloud server. Affected ver ...

CVSS3: 3.5
EPSS: Низкий
nvd логотип

CVE-2022-39364

почти 4 года назад

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. In Nextcloud Server prior to versions 23.0.9 and 24.0.5 and Nextcloud Enterprise Server prior to versions 22.2.10.5, 23.0.9, and 24.0.5 an attacker reading `nextcloud.log` may gain knowledge of credentials to connect to a SharePoint service. Nextcloud Server versions 23.0.9 and 24.0.5 and Nextcloud Enterprise Server versions 22.2.10.5, 23.0.9, and 24.0.5 contain a patch for this issue. As a workaround, set `zend.exception_ignore_args = On` as an option in `php.ini`.

CVSS3: 4
EPSS: Низкий
debian логотип

CVE-2022-39364

почти 4 года назад

Nextcloud Server is the file server software for Nextcloud, a self-hos ...

CVSS3: 4
EPSS: Низкий
nvd логотип

CVE-2022-39330

почти 4 года назад

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Nextcloud Server prior to versions 23.0.10 and 24.0.6 and Nextcloud Enterprise Server prior to versions 22.2.10, 23.0.10, and 24.0.6 are vulnerable to a logged-in attacker slowing down the system by generating a lot of database/cpu load. Nextcloud Server versions 23.0.10 and 24.0.6 and Nextcloud Enterprise Server versions 22.2.10, 23.0.10, and 24.0.6 contain patches for this issue. As a workaround, disable the Circles app.

CVSS3: 4.8
EPSS: Низкий
debian логотип

CVE-2022-39330

почти 4 года назад

Nextcloud Server is the file server software for Nextcloud, a self-hos ...

CVSS3: 4.8
EPSS: Низкий
nvd логотип

CVE-2022-39329

почти 4 года назад

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Nextcloud Server and Nextcloud Enterprise Server prior to versions 23.0.9 and 24.0.5 are vulnerable to exposure of information that cannot be controlled by administrators without direct database access. Versions 23.0.9 and 24.0.5 contains patches for this issue. No known workarounds are available.

CVSS3: 3.5
EPSS: Низкий
debian логотип

CVE-2022-39329

почти 4 года назад

Nextcloud Server is the file server software for Nextcloud, a self-hos ...

CVSS3: 3.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
1
nvd логотип
CVE-2022-41968

Nextcloud Server is an open source personal cloud server. Prior to versions 23.0.10 and 24.0.5, calendar name lengths are not validated before writing to a database. As a result, an attacker can send unnecessary amounts of data against the database. Version 23.0.10 and 24.0.5 contain patches for the issue. No known workarounds are available.

CVSS3: 3.5
1%
Низкий
больше 3 лет назад
debian логотип
CVE-2022-41968

Nextcloud Server is an open source personal cloud server. Prior to ver ...

CVSS3: 3.5
1%
Низкий
больше 3 лет назад
nvd логотип
CVE-2022-39346

Nextcloud server is an open source personal cloud server. Affected versions of nextcloud server did not properly limit user display names which could allow a malicious users to overload the backing database and cause a denial of service. It is recommended that the Nextcloud Server is upgraded to 22.2.10, 23.0.7 or 24.0.3. There are no known workarounds for this issue.

CVSS3: 3.5
1%
Низкий
больше 3 лет назад
debian логотип
CVE-2022-39346

Nextcloud server is an open source personal cloud server. Affected ver ...

CVSS3: 3.5
1%
Низкий
больше 3 лет назад
nvd логотип
CVE-2022-39364

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. In Nextcloud Server prior to versions 23.0.9 and 24.0.5 and Nextcloud Enterprise Server prior to versions 22.2.10.5, 23.0.9, and 24.0.5 an attacker reading `nextcloud.log` may gain knowledge of credentials to connect to a SharePoint service. Nextcloud Server versions 23.0.9 and 24.0.5 and Nextcloud Enterprise Server versions 22.2.10.5, 23.0.9, and 24.0.5 contain a patch for this issue. As a workaround, set `zend.exception_ignore_args = On` as an option in `php.ini`.

CVSS3: 4
0%
Низкий
почти 4 года назад
debian логотип
CVE-2022-39364

Nextcloud Server is the file server software for Nextcloud, a self-hos ...

CVSS3: 4
0%
Низкий
почти 4 года назад
nvd логотип
CVE-2022-39330

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Nextcloud Server prior to versions 23.0.10 and 24.0.6 and Nextcloud Enterprise Server prior to versions 22.2.10, 23.0.10, and 24.0.6 are vulnerable to a logged-in attacker slowing down the system by generating a lot of database/cpu load. Nextcloud Server versions 23.0.10 and 24.0.6 and Nextcloud Enterprise Server versions 22.2.10, 23.0.10, and 24.0.6 contain patches for this issue. As a workaround, disable the Circles app.

CVSS3: 4.8
1%
Низкий
почти 4 года назад
debian логотип
CVE-2022-39330

Nextcloud Server is the file server software for Nextcloud, a self-hos ...

CVSS3: 4.8
1%
Низкий
почти 4 года назад
nvd логотип
CVE-2022-39329

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Nextcloud Server and Nextcloud Enterprise Server prior to versions 23.0.9 and 24.0.5 are vulnerable to exposure of information that cannot be controlled by administrators without direct database access. Versions 23.0.9 and 24.0.5 contains patches for this issue. No known workarounds are available.

CVSS3: 3.5
1%
Низкий
почти 4 года назад
debian логотип
CVE-2022-39329

Nextcloud Server is the file server software for Nextcloud, a self-hos ...

CVSS3: 3.5
1%
Низкий
почти 4 года назад

Уязвимостей на страницу


Поделиться