Логотип exploitDog
product: "nextcloud_server"
Консоль
Логотип exploitDog

exploitDog

product: "nextcloud_server"

Количество 437

Количество 437

debian логотип

CVE-2020-8121

почти 6 лет назад

A bug in Nextcloud Server 14.0.4 could expose more data in reshared li ...

CVSS3: 8.1
EPSS: Низкий
nvd логотип

CVE-2020-8120

почти 6 лет назад

A reflected Cross-Site Scripting vulnerability in Nextcloud Server 16.0.1 was discovered in the svg generation.

CVSS3: 6.1
EPSS: Низкий
debian логотип

CVE-2020-8120

почти 6 лет назад

A reflected Cross-Site Scripting vulnerability in Nextcloud Server 16. ...

CVSS3: 6.1
EPSS: Низкий
nvd логотип

CVE-2020-8119

почти 6 лет назад

Improper authorization in Nextcloud server 17.0.0 causes leaking of previews and files when a file-drop share link is opened via the gallery app.

CVSS3: 4.3
EPSS: Низкий
debian логотип

CVE-2020-8119

почти 6 лет назад

Improper authorization in Nextcloud server 17.0.0 causes leaking of pr ...

CVSS3: 4.3
EPSS: Низкий
nvd логотип

CVE-2020-8117

почти 6 лет назад

Improper preservation of permissions in Nextcloud Server 14.0.3 causes the event details to be leaked when sharing a non-public event.

CVSS3: 4.3
EPSS: Низкий
debian логотип

CVE-2020-8117

почти 6 лет назад

Improper preservation of permissions in Nextcloud Server 14.0.3 causes ...

CVSS3: 4.3
EPSS: Низкий
nvd логотип

CVE-2019-5451

больше 6 лет назад

Bypass lock protection in the Nextcloud Android app prior to version 3.6.1 allows accessing the files when repeatedly opening and closing the app in a very short time.

CVSS3: 4.6
EPSS: Низкий
nvd логотип

CVE-2019-5449

больше 6 лет назад

A missing check in the Nextcloud Server prior to version 15.0.1 causes leaking of calendar event names when adding or modifying confidential or private events.

CVSS3: 4.3
EPSS: Низкий
debian логотип

CVE-2019-5449

больше 6 лет назад

A missing check in the Nextcloud Server prior to version 15.0.1 causes ...

CVSS3: 4.3
EPSS: Низкий
nvd логотип

CVE-2019-15624

почти 6 лет назад

Improper Input Validation in Nextcloud Server 15.0.7 allows group admins to create users with IDs of system folders.

CVSS3: 4.9
EPSS: Низкий
debian логотип

CVE-2019-15624

почти 6 лет назад

Improper Input Validation in Nextcloud Server 15.0.7 allows group admi ...

CVSS3: 4.9
EPSS: Низкий
nvd логотип

CVE-2019-15621

почти 6 лет назад

Improper permissions preservation in Nextcloud Server 16.0.1 causes sharees to be able to reshare with write permissions when sharing the mount point of a share they received, as a public link.

CVSS3: 6.5
EPSS: Низкий
debian логотип

CVE-2019-15621

почти 6 лет назад

Improper permissions preservation in Nextcloud Server 16.0.1 causes sh ...

CVSS3: 6.5
EPSS: Низкий
nvd логотип

CVE-2019-15618

почти 6 лет назад

Missing escaping of HTML in the Updater of Nextcloud 15.0.5 allowed a reflected XSS when starting the updater from a malicious location.

CVSS3: 4.8
EPSS: Низкий
debian логотип

CVE-2019-15618

почти 6 лет назад

Missing escaping of HTML in the Updater of Nextcloud 15.0.5 allowed a ...

CVSS3: 4.8
EPSS: Низкий
nvd логотип

CVE-2019-15617

почти 6 лет назад

A missing check in Nextcloud Server 17.0.0 allowed an attacker to set up a new second factor when trying to login.

CVSS3: 5.4
EPSS: Низкий
debian логотип

CVE-2019-15617

почти 6 лет назад

A missing check in Nextcloud Server 17.0.0 allowed an attacker to set ...

CVSS3: 5.4
EPSS: Низкий
nvd логотип

CVE-2019-15616

почти 6 лет назад

Dangling remote share attempts in Nextcloud 16 allow a DNS pollution when running long.

CVSS3: 4.3
EPSS: Низкий
debian логотип

CVE-2019-15616

почти 6 лет назад

Dangling remote share attempts in Nextcloud 16 allow a DNS pollution w ...

CVSS3: 4.3
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
debian логотип
CVE-2020-8121

A bug in Nextcloud Server 14.0.4 could expose more data in reshared li ...

CVSS3: 8.1
0%
Низкий
почти 6 лет назад
nvd логотип
CVE-2020-8120

A reflected Cross-Site Scripting vulnerability in Nextcloud Server 16.0.1 was discovered in the svg generation.

CVSS3: 6.1
0%
Низкий
почти 6 лет назад
debian логотип
CVE-2020-8120

A reflected Cross-Site Scripting vulnerability in Nextcloud Server 16. ...

CVSS3: 6.1
0%
Низкий
почти 6 лет назад
nvd логотип
CVE-2020-8119

Improper authorization in Nextcloud server 17.0.0 causes leaking of previews and files when a file-drop share link is opened via the gallery app.

CVSS3: 4.3
1%
Низкий
почти 6 лет назад
debian логотип
CVE-2020-8119

Improper authorization in Nextcloud server 17.0.0 causes leaking of pr ...

CVSS3: 4.3
1%
Низкий
почти 6 лет назад
nvd логотип
CVE-2020-8117

Improper preservation of permissions in Nextcloud Server 14.0.3 causes the event details to be leaked when sharing a non-public event.

CVSS3: 4.3
0%
Низкий
почти 6 лет назад
debian логотип
CVE-2020-8117

Improper preservation of permissions in Nextcloud Server 14.0.3 causes ...

CVSS3: 4.3
0%
Низкий
почти 6 лет назад
nvd логотип
CVE-2019-5451

Bypass lock protection in the Nextcloud Android app prior to version 3.6.1 allows accessing the files when repeatedly opening and closing the app in a very short time.

CVSS3: 4.6
0%
Низкий
больше 6 лет назад
nvd логотип
CVE-2019-5449

A missing check in the Nextcloud Server prior to version 15.0.1 causes leaking of calendar event names when adding or modifying confidential or private events.

CVSS3: 4.3
0%
Низкий
больше 6 лет назад
debian логотип
CVE-2019-5449

A missing check in the Nextcloud Server prior to version 15.0.1 causes ...

CVSS3: 4.3
0%
Низкий
больше 6 лет назад
nvd логотип
CVE-2019-15624

Improper Input Validation in Nextcloud Server 15.0.7 allows group admins to create users with IDs of system folders.

CVSS3: 4.9
0%
Низкий
почти 6 лет назад
debian логотип
CVE-2019-15624

Improper Input Validation in Nextcloud Server 15.0.7 allows group admi ...

CVSS3: 4.9
0%
Низкий
почти 6 лет назад
nvd логотип
CVE-2019-15621

Improper permissions preservation in Nextcloud Server 16.0.1 causes sharees to be able to reshare with write permissions when sharing the mount point of a share they received, as a public link.

CVSS3: 6.5
0%
Низкий
почти 6 лет назад
debian логотип
CVE-2019-15621

Improper permissions preservation in Nextcloud Server 16.0.1 causes sh ...

CVSS3: 6.5
0%
Низкий
почти 6 лет назад
nvd логотип
CVE-2019-15618

Missing escaping of HTML in the Updater of Nextcloud 15.0.5 allowed a reflected XSS when starting the updater from a malicious location.

CVSS3: 4.8
0%
Низкий
почти 6 лет назад
debian логотип
CVE-2019-15618

Missing escaping of HTML in the Updater of Nextcloud 15.0.5 allowed a ...

CVSS3: 4.8
0%
Низкий
почти 6 лет назад
nvd логотип
CVE-2019-15617

A missing check in Nextcloud Server 17.0.0 allowed an attacker to set up a new second factor when trying to login.

CVSS3: 5.4
0%
Низкий
почти 6 лет назад
debian логотип
CVE-2019-15617

A missing check in Nextcloud Server 17.0.0 allowed an attacker to set ...

CVSS3: 5.4
0%
Низкий
почти 6 лет назад
nvd логотип
CVE-2019-15616

Dangling remote share attempts in Nextcloud 16 allow a DNS pollution when running long.

CVSS3: 4.3
0%
Низкий
почти 6 лет назад
debian логотип
CVE-2019-15616

Dangling remote share attempts in Nextcloud 16 allow a DNS pollution w ...

CVSS3: 4.3
0%
Низкий
почти 6 лет назад

Уязвимостей на страницу