Логотип exploitDog
product: "nextcloud_server"
Консоль
Логотип exploitDog

exploitDog

product: "nextcloud_server"
Nextcloud Server

Nextcloud Serverнабор клиент-серверных программ для создания и использования хранилища данных.

Релизный цикл, информация об уязвимостях

Продукт: Nextcloud Server
Вендор: nextcloud

График релизов

3132202520262027

Недавние уязвимости Nextcloud Server

Количество 437

nvd логотип

CVE-2017-0892

больше 8 лет назад

Nextcloud Server before 11.0.3 is vulnerable to an improper session handling allowed an application specific password without permission to the files access to the users file.

CVSS3: 3.5
EPSS: Низкий
debian логотип

CVE-2017-0892

больше 8 лет назад

Nextcloud Server before 11.0.3 is vulnerable to an improper session ha ...

CVSS3: 3.5
EPSS: Низкий
nvd логотип

CVE-2017-0891

больше 8 лет назад

Nextcloud Server before 9.0.58 and 10.0.5 and 11.0.3 are vulnerable to an inadequate escaping of error messages leading to XSS vulnerabilities in multiple components.

CVSS3: 5.4
EPSS: Низкий
debian логотип

CVE-2017-0891

больше 8 лет назад

Nextcloud Server before 9.0.58 and 10.0.5 and 11.0.3 are vulnerable to ...

CVSS3: 5.4
EPSS: Низкий
nvd логотип

CVE-2017-0890

больше 8 лет назад

Nextcloud Server before 11.0.3 is vulnerable to an inadequate escaping leading to a XSS vulnerability in the search module. To be exploitable a user has to write or paste malicious content into the search dialogue.

CVSS3: 5.4
EPSS: Низкий
debian логотип

CVE-2017-0890

больше 8 лет назад

Nextcloud Server before 11.0.3 is vulnerable to an inadequate escaping ...

CVSS3: 5.4
EPSS: Низкий
nvd логотип

CVE-2017-0888

больше 8 лет назад

Nextcloud Server before 9.0.55 and 10.0.2 suffers from a Content-Spoofing vulnerability in the "files" app. The top navigation bar displayed in the files list contained partially user-controllable input leading to a potential misrepresentation of information.

CVSS3: 4.3
EPSS: Низкий
debian логотип

CVE-2017-0888

больше 8 лет назад

Nextcloud Server before 9.0.55 and 10.0.2 suffers from a Content-Spoof ...

CVSS3: 4.3
EPSS: Низкий
nvd логотип

CVE-2017-0887

больше 8 лет назад

Nextcloud Server before 9.0.55 and 10.0.2 suffers from a bypass in the quota limitation. Due to not properly sanitizing values provided by the `OC-Total-Length` HTTP header an authenticated adversary may be able to exceed their configured user quota. Thus using more space than allowed by the administrator.

CVSS3: 4.3
EPSS: Низкий
debian логотип

CVE-2017-0887

больше 8 лет назад

Nextcloud Server before 9.0.55 and 10.0.2 suffers from a bypass in the ...

CVSS3: 4.3
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
1
nvd логотип
CVE-2017-0892

Nextcloud Server before 11.0.3 is vulnerable to an improper session handling allowed an application specific password without permission to the files access to the users file.

CVSS3: 3.5
0%
Низкий
больше 8 лет назад
debian логотип
CVE-2017-0892

Nextcloud Server before 11.0.3 is vulnerable to an improper session ha ...

CVSS3: 3.5
0%
Низкий
больше 8 лет назад
nvd логотип
CVE-2017-0891

Nextcloud Server before 9.0.58 and 10.0.5 and 11.0.3 are vulnerable to an inadequate escaping of error messages leading to XSS vulnerabilities in multiple components.

CVSS3: 5.4
0%
Низкий
больше 8 лет назад
debian логотип
CVE-2017-0891

Nextcloud Server before 9.0.58 and 10.0.5 and 11.0.3 are vulnerable to ...

CVSS3: 5.4
0%
Низкий
больше 8 лет назад
nvd логотип
CVE-2017-0890

Nextcloud Server before 11.0.3 is vulnerable to an inadequate escaping leading to a XSS vulnerability in the search module. To be exploitable a user has to write or paste malicious content into the search dialogue.

CVSS3: 5.4
0%
Низкий
больше 8 лет назад
debian логотип
CVE-2017-0890

Nextcloud Server before 11.0.3 is vulnerable to an inadequate escaping ...

CVSS3: 5.4
0%
Низкий
больше 8 лет назад
nvd логотип
CVE-2017-0888

Nextcloud Server before 9.0.55 and 10.0.2 suffers from a Content-Spoofing vulnerability in the "files" app. The top navigation bar displayed in the files list contained partially user-controllable input leading to a potential misrepresentation of information.

CVSS3: 4.3
1%
Низкий
больше 8 лет назад
debian логотип
CVE-2017-0888

Nextcloud Server before 9.0.55 and 10.0.2 suffers from a Content-Spoof ...

CVSS3: 4.3
1%
Низкий
больше 8 лет назад
nvd логотип
CVE-2017-0887

Nextcloud Server before 9.0.55 and 10.0.2 suffers from a bypass in the quota limitation. Due to not properly sanitizing values provided by the `OC-Total-Length` HTTP header an authenticated adversary may be able to exceed their configured user quota. Thus using more space than allowed by the administrator.

CVSS3: 4.3
0%
Низкий
больше 8 лет назад
debian логотип
CVE-2017-0887

Nextcloud Server before 9.0.55 and 10.0.2 suffers from a bypass in the ...

CVSS3: 4.3
0%
Низкий
больше 8 лет назад

Уязвимостей на страницу


Поделиться