Nextcloud Server — набор клиент-серверных программ для создания и использования хранилища данных.
Релизный цикл, информация об уязвимостях
График релизов
Количество 409
CVE-2020-8183
A logic error in Nextcloud Server 19.0.0 caused a plaintext storage of the share password when it was given on the initial create API call.
CVE-2020-8183
A logic error in Nextcloud Server 19.0.0 caused a plaintext storage of ...
CVE-2020-8173
A too small set of random characters being used for encryption in Nextcloud Server 18.0.4 allowed decryption in shorter time than intended.
CVE-2020-8173
A too small set of random characters being used for encryption in Next ...
CVE-2020-8223
A logic error in Nextcloud Server 19.0.0 caused a privilege escalation allowing malicious users to reshare with higher permissions than they got assigned themselves.
CVE-2020-8223
A logic error in Nextcloud Server 19.0.0 caused a privilege escalation ...
CVE-2020-8155
An outdated 3rd party library in the Files PDF viewer for Nextcloud Server 18.0.2 caused a Cross-site scripting vulnerability when opening a malicious PDF.
CVE-2020-8155
An outdated 3rd party library in the Files PDF viewer for Nextcloud Se ...
CVE-2020-8154
An Insecure direct object reference vulnerability in Nextcloud Server 18.0.2 allowed an attacker to remote wipe devices of other users when sending a malicious request directly to the endpoint.
CVE-2020-8154
An Insecure direct object reference vulnerability in Nextcloud Server ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
 | CVE-2020-8183 A logic error in Nextcloud Server 19.0.0 caused a plaintext storage of the share password when it was given on the initial create API call. | CVSS3: 7.5 | 1% Низкий | больше 4 лет назад |
| CVE-2020-8183 A logic error in Nextcloud Server 19.0.0 caused a plaintext storage of ... | CVSS3: 7.5 | 1% Низкий | больше 4 лет назад |
| CVE-2020-8173 A too small set of random characters being used for encryption in Nextcloud Server 18.0.4 allowed decryption in shorter time than intended. | CVSS3: 2.2 | 0% Низкий | больше 4 лет назад |
| CVE-2020-8173 A too small set of random characters being used for encryption in Next ... | CVSS3: 2.2 | 0% Низкий | больше 4 лет назад |
| CVE-2020-8223 A logic error in Nextcloud Server 19.0.0 caused a privilege escalation allowing malicious users to reshare with higher permissions than they got assigned themselves. | CVSS3: 6.5 | 0% Низкий | больше 4 лет назад |
| CVE-2020-8223 A logic error in Nextcloud Server 19.0.0 caused a privilege escalation ... | CVSS3: 6.5 | 0% Низкий | больше 4 лет назад |
| CVE-2020-8155 An outdated 3rd party library in the Files PDF viewer for Nextcloud Server 18.0.2 caused a Cross-site scripting vulnerability when opening a malicious PDF. | CVSS3: 5.4 | 1% Низкий | около 5 лет назад |
| CVE-2020-8155 An outdated 3rd party library in the Files PDF viewer for Nextcloud Se ... | CVSS3: 5.4 | 1% Низкий | около 5 лет назад |
| CVE-2020-8154 An Insecure direct object reference vulnerability in Nextcloud Server 18.0.2 allowed an attacker to remote wipe devices of other users when sending a malicious request directly to the endpoint. | CVSS3: 7.7 | 1% Низкий | около 5 лет назад |
| CVE-2020-8154 An Insecure direct object reference vulnerability in Nextcloud Server ... | CVSS3: 7.7 | 1% Низкий | около 5 лет назад |
Уязвимостей на страницу