Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Nextcloud Server

Nextcloud Serverнабор клиент-серверных программ для создания и использования хранилища данных.

Релизный цикл, информация об уязвимостях

Продукт: Nextcloud Server
Вендор: nextcloud

График релизов

3233342025202620272028

Недавние уязвимости Nextcloud Server

Количество 456

debian логотип

CVE-2024-52518

больше 1 года назад

Nextcloud Server is a self hosted personal cloud system. After an atta ...

CVSS3: 4.4
EPSS: Низкий
nvd логотип

CVE-2024-52517

больше 1 года назад

Nextcloud Server is a self hosted personal cloud system. After storing "Global credentials" on the server, the API returns them and adds them into the frontend again, allowing to read them in plain text when an attacker already has access to an active session of a user. It is recommended that the Nextcloud Server is upgraded to 28.0.11, 29.0.8 or 30.0.1 and Nextcloud Enterprise Server is upgraded to 25.0.13.13, 26.0.13.9, 27.1.11.9, 28.0.11, 29.0.8 or 30.0.1.

CVSS3: 4.6
EPSS: Низкий
debian логотип

CVE-2024-52517

больше 1 года назад

Nextcloud Server is a self hosted personal cloud system. After storing ...

CVSS3: 4.6
EPSS: Низкий
nvd логотип

CVE-2024-52516

больше 1 года назад

Nextcloud Server is a self hosted personal cloud system. When a server is configured to only allow sharing with users that are in ones own groups, after a user was removed from a group, previously shared items were not unshared. It is recommended that the Nextcloud Server is upgraded to 22.2.11 or 23.0.11 or 24.0.6 and Nextcloud Enterprise Server is upgraded to 22.2.11 or 23.0.11 or 24.0.6.

CVSS3: 3
EPSS: Низкий
debian логотип

CVE-2024-52516

больше 1 года назад

Nextcloud Server is a self hosted personal cloud system. When a server ...

CVSS3: 3
EPSS: Низкий
nvd логотип

CVE-2024-52515

больше 1 года назад

Nextcloud Server is a self hosted personal cloud system. After an admin enables the default-disabled SVG preview provider, a malicious user could upload a manipulated SVG file referencing paths. If the file would exist the preview of the SVG would preview the other file instead. It is recommended that the Nextcloud Server is upgraded to 27.1.10, 28.0.6 or 29.0.1 and Nextcloud Enterprise Server is upgraded to 24.0.12.15, 25.0.13.10, 26.0.13.4, 27.1.10, 28.0.6 or 29.0.1.

CVSS3: 5.7
EPSS: Низкий
debian логотип

CVE-2024-52515

больше 1 года назад

Nextcloud Server is a self hosted personal cloud system. After an admi ...

CVSS3: 5.7
EPSS: Низкий
nvd логотип

CVE-2024-37887

около 2 лет назад

Nextcloud Server is a self hosted personal cloud system. Private shared calendar events' recurrence exceptions can be read by sharees. It is recommended that the Nextcloud Server is upgraded to 27.1.10 or 28.0.6 or 29.0.1 and that the Nextcloud Enterprise Server is upgraded to 27.1.10 or 28.0.6 or 29.0.1.

CVSS3: 3.5
EPSS: Низкий
debian логотип

CVE-2024-37887

около 2 лет назад

Nextcloud Server is a self hosted personal cloud system. Private share ...

CVSS3: 3.5
EPSS: Низкий
nvd логотип

CVE-2024-37884

около 2 лет назад

Nextcloud Server is a self hosted personal cloud system. A malicious user was able to send delete requests for old versions of files they only got shared with read permissions. It is recommended that the Nextcloud Server is upgraded to 26.0.12 or 27.1.7 or 28.0.3 and that the Nextcloud Enterprise Server is upgraded to 26.0.12 or 27.1.7 or 28.0.3.

CVSS3: 3.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
1
debian логотип
CVE-2024-52518

Nextcloud Server is a self hosted personal cloud system. After an atta ...

CVSS3: 4.4
1%
Низкий
больше 1 года назад
nvd логотип
CVE-2024-52517

Nextcloud Server is a self hosted personal cloud system. After storing "Global credentials" on the server, the API returns them and adds them into the frontend again, allowing to read them in plain text when an attacker already has access to an active session of a user. It is recommended that the Nextcloud Server is upgraded to 28.0.11, 29.0.8 or 30.0.1 and Nextcloud Enterprise Server is upgraded to 25.0.13.13, 26.0.13.9, 27.1.11.9, 28.0.11, 29.0.8 or 30.0.1.

CVSS3: 4.6
1%
Низкий
больше 1 года назад
debian логотип
CVE-2024-52517

Nextcloud Server is a self hosted personal cloud system. After storing ...

CVSS3: 4.6
1%
Низкий
больше 1 года назад
nvd логотип
CVE-2024-52516

Nextcloud Server is a self hosted personal cloud system. When a server is configured to only allow sharing with users that are in ones own groups, after a user was removed from a group, previously shared items were not unshared. It is recommended that the Nextcloud Server is upgraded to 22.2.11 or 23.0.11 or 24.0.6 and Nextcloud Enterprise Server is upgraded to 22.2.11 or 23.0.11 or 24.0.6.

CVSS3: 3
0%
Низкий
больше 1 года назад
debian логотип
CVE-2024-52516

Nextcloud Server is a self hosted personal cloud system. When a server ...

CVSS3: 3
0%
Низкий
больше 1 года назад
nvd логотип
CVE-2024-52515

Nextcloud Server is a self hosted personal cloud system. After an admin enables the default-disabled SVG preview provider, a malicious user could upload a manipulated SVG file referencing paths. If the file would exist the preview of the SVG would preview the other file instead. It is recommended that the Nextcloud Server is upgraded to 27.1.10, 28.0.6 or 29.0.1 and Nextcloud Enterprise Server is upgraded to 24.0.12.15, 25.0.13.10, 26.0.13.4, 27.1.10, 28.0.6 or 29.0.1.

CVSS3: 5.7
1%
Низкий
больше 1 года назад
debian логотип
CVE-2024-52515

Nextcloud Server is a self hosted personal cloud system. After an admi ...

CVSS3: 5.7
1%
Низкий
больше 1 года назад
nvd логотип
CVE-2024-37887

Nextcloud Server is a self hosted personal cloud system. Private shared calendar events' recurrence exceptions can be read by sharees. It is recommended that the Nextcloud Server is upgraded to 27.1.10 or 28.0.6 or 29.0.1 and that the Nextcloud Enterprise Server is upgraded to 27.1.10 or 28.0.6 or 29.0.1.

CVSS3: 3.5
0%
Низкий
около 2 лет назад
debian логотип
CVE-2024-37887

Nextcloud Server is a self hosted personal cloud system. Private share ...

CVSS3: 3.5
0%
Низкий
около 2 лет назад
nvd логотип
CVE-2024-37884

Nextcloud Server is a self hosted personal cloud system. A malicious user was able to send delete requests for old versions of files they only got shared with read permissions. It is recommended that the Nextcloud Server is upgraded to 26.0.12 or 27.1.7 or 28.0.3 and that the Nextcloud Enterprise Server is upgraded to 26.0.12 or 27.1.7 or 28.0.3.

CVSS3: 3.5
0%
Низкий
около 2 лет назад

Уязвимостей на страницу


Поделиться