Nextcloud Server — набор клиент-серверных программ для создания и использования хранилища данных.
Релизный цикл, информация об уязвимостях
График релизов
Количество 456
CVE-2019-15619
Improper neutralization of file names, conversation names and board na ...
CVE-2019-5451
Bypass lock protection in the Nextcloud Android app prior to version 3.6.1 allows accessing the files when repeatedly opening and closing the app in a very short time.
CVE-2019-5449
A missing check in the Nextcloud Server prior to version 15.0.1 causes leaking of calendar event names when adding or modifying confidential or private events.
CVE-2019-5449
A missing check in the Nextcloud Server prior to version 15.0.1 causes ...
openSUSE-SU-2018:3999-1
Security update for nextcloud
openSUSE-SU-2018:4002-1
Security update for nextcloud
CVE-2018-16467
A missing check in Nextcloud Server prior to 14.0.0 could give unauthorized access to the previews of single file password protected shares.
CVE-2018-16466
Improper revalidation of permissions in Nextcloud Server prior to 14.0.0, 13.0.6 and 12.0.11 lead to not accepting access restrictions by acess tokens.
CVE-2018-16464
A missing access check in Nextcloud Server prior to 14.0.0 could lead to continued access to password protected link shares when the owner had changed the password.
CVE-2018-16465
Missing state in Nextcloud Server prior to 14.0.0 would not enforce the use of a second factor at login if the the provider of the second factor failed to load.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| CVE-2019-15619 Improper neutralization of file names, conversation names and board na ... | CVSS3: 4.8 | 1% Низкий | почти 7 лет назад |
 | CVE-2019-5451 Bypass lock protection in the Nextcloud Android app prior to version 3.6.1 allows accessing the files when repeatedly opening and closing the app in a very short time. | CVSS3: 4.6 | 0% Низкий | больше 7 лет назад |
| CVE-2019-5449 A missing check in the Nextcloud Server prior to version 15.0.1 causes leaking of calendar event names when adding or modifying confidential or private events. | CVSS3: 4.3 | 1% Низкий | больше 7 лет назад |
| CVE-2019-5449 A missing check in the Nextcloud Server prior to version 15.0.1 causes ... | CVSS3: 4.3 | 1% Низкий | больше 7 лет назад |
 | openSUSE-SU-2018:3999-1 Security update for nextcloud | 1% Низкий | почти 8 лет назад | |
| openSUSE-SU-2018:4002-1 Security update for nextcloud | 1% Низкий | почти 8 лет назад | |
| CVE-2018-16467 A missing check in Nextcloud Server prior to 14.0.0 could give unauthorized access to the previews of single file password protected shares. | CVSS3: 5.3 | 1% Низкий | около 8 лет назад |
| CVE-2018-16466 Improper revalidation of permissions in Nextcloud Server prior to 14.0.0, 13.0.6 and 12.0.11 lead to not accepting access restrictions by acess tokens. | CVSS3: 8.1 | 1% Низкий | около 8 лет назад |
| CVE-2018-16464 A missing access check in Nextcloud Server prior to 14.0.0 could lead to continued access to password protected link shares when the owner had changed the password. | CVSS3: 5.7 | 1% Низкий | около 8 лет назад |
| CVE-2018-16465 Missing state in Nextcloud Server prior to 14.0.0 would not enforce the use of a second factor at login if the the provider of the second factor failed to load. | CVSS3: 5.3 | 1% Низкий | около 8 лет назад |
Уязвимостей на страницу