Поиск уязвимостей
Количество 11
Количество 11
ALT-PU-2018-1913
ALT-PU-2018-1913: package `nextcloud` update to version 13.0.4-alt1
openSUSE-SU-2018:1924-1
Security update for nextcloud
CVE-2018-16463
A bug causing session fixation in Nextcloud Server prior to 14.0.0, 13.0.3 and 12.0.8 could potentially allow an attacker to obtain access to password protected shares.
CVE-2018-16463
A bug causing session fixation in Nextcloud Server prior to 14.0.0, 13 ...
GHSA-67vq-qwwf-fc2h
A bug causing session fixation in Nextcloud Server prior to 14.0.0, 13.0.3 and 12.0.8 could potentially allow an attacker to obtain access to password protected shares.
CVE-2018-3762
Nextcloud Server before 12.0.8 and 13.0.3 suffers from improper checks of dropped permissions for incoming shares allowing a user to still request previews for files it should not have access to.
CVE-2018-3762
Nextcloud Server before 12.0.8 and 13.0.3 suffers from improper checks ...
CVE-2018-3761
Nextcloud Server before 12.0.8 and 13.0.3 suffer from improper authentication on the OAuth2 token endpoint. Missing checks potentially allowed handing out new tokens in case the OAuth2 client was partly compromised.
CVE-2018-3761
Nextcloud Server before 12.0.8 and 13.0.3 suffer from improper authent ...
GHSA-frc3-rhfw-jxf5
Nextcloud Server before 12.0.8 and 13.0.3 suffer from improper authentication on the OAuth2 token endpoint. Missing checks potentially allowed handing out new tokens in case the OAuth2 client was partly compromised.
GHSA-6p7m-f494-cjvp
Nextcloud Server before 12.0.8 and 13.0.3 suffers from improper checks of dropped permissions for incoming shares allowing a user to still request previews for files it should not have access to.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2018-1913 ALT-PU-2018-1913: package `nextcloud` update to version 13.0.4-alt1 | CVSS3: 8.1 | больше 8 лет назад | |
 | openSUSE-SU-2018:1924-1 Security update for nextcloud | больше 8 лет назад | ||
 | CVE-2018-16463 A bug causing session fixation in Nextcloud Server prior to 14.0.0, 13.0.3 and 12.0.8 could potentially allow an attacker to obtain access to password protected shares. | CVSS3: 3.1 | 1% Низкий | около 8 лет назад |
| CVE-2018-16463 A bug causing session fixation in Nextcloud Server prior to 14.0.0, 13 ... | CVSS3: 3.1 | 1% Низкий | около 8 лет назад |
| GHSA-67vq-qwwf-fc2h A bug causing session fixation in Nextcloud Server prior to 14.0.0, 13.0.3 and 12.0.8 could potentially allow an attacker to obtain access to password protected shares. | CVSS3: 3.1 | 1% Низкий | больше 4 лет назад |
| CVE-2018-3762 Nextcloud Server before 12.0.8 and 13.0.3 suffers from improper checks of dropped permissions for incoming shares allowing a user to still request previews for files it should not have access to. | CVSS3: 4.3 | 1% Низкий | больше 8 лет назад |
| CVE-2018-3762 Nextcloud Server before 12.0.8 and 13.0.3 suffers from improper checks ... | CVSS3: 4.3 | 1% Низкий | больше 8 лет назад |
| CVE-2018-3761 Nextcloud Server before 12.0.8 and 13.0.3 suffer from improper authentication on the OAuth2 token endpoint. Missing checks potentially allowed handing out new tokens in case the OAuth2 client was partly compromised. | CVSS3: 8.1 | 2% Низкий | больше 8 лет назад |
| CVE-2018-3761 Nextcloud Server before 12.0.8 and 13.0.3 suffer from improper authent ... | CVSS3: 8.1 | 2% Низкий | больше 8 лет назад |
| GHSA-frc3-rhfw-jxf5 Nextcloud Server before 12.0.8 and 13.0.3 suffer from improper authentication on the OAuth2 token endpoint. Missing checks potentially allowed handing out new tokens in case the OAuth2 client was partly compromised. | CVSS3: 8.1 | 2% Низкий | больше 4 лет назад |
| GHSA-6p7m-f494-cjvp Nextcloud Server before 12.0.8 and 13.0.3 suffers from improper checks of dropped permissions for incoming shares allowing a user to still request previews for files it should not have access to. | CVSS3: 4.3 | 1% Низкий | больше 4 лет назад |
Уязвимостей на страницу