Поиск уязвимостей
Количество 12
Количество 12
ALT-PU-2018-2265
ALT-PU-2018-2265: package `nextcloud` update to version 13.0.6-alt1
CVE-2018-16466
Improper revalidation of permissions in Nextcloud Server prior to 14.0.0, 13.0.6 and 12.0.11 lead to not accepting access restrictions by acess tokens.
CVE-2018-16466
Improper revalidation of permissions in Nextcloud Server prior to 14.0 ...
CVE-2018-3780
A missing sanitization of search results for an autocomplete field in NextCloud Server <13.0.5 could lead to a stored XSS requiring user-interaction. The missing sanitization only affected user names, hence malicious search results could only be crafted by authenticated users.
CVE-2018-3780
A missing sanitization of search results for an autocomplete field in ...
GHSA-6mm6-pp6h-9p36
Improper revalidation of permissions in Nextcloud Server prior to 14.0.0, 13.0.6 and 12.0.11 lead to not accepting access restrictions by acess tokens.
openSUSE-SU-2018:4002-1
Security update for nextcloud
openSUSE-SU-2018:3999-1
Security update for nextcloud
openSUSE-SU-2018:2521-2
Security update for nextcloud
openSUSE-SU-2018:2521-1
Security update for nextcloud
openSUSE-SU-2018:2510-1
Security update for nextcloud
GHSA-9qxg-6mvx-c4mc
A missing sanitization of search results for an autocomplete field in NextCloud Server <13.0.5 could lead to a stored XSS requiring user-interaction. The missing sanitization only affected user names, hence malicious search results could only be crafted by authenticated users.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2018-2265 ALT-PU-2018-2265: package `nextcloud` update to version 13.0.6-alt1 | CVSS3: 8.1 | около 8 лет назад | |
 | CVE-2018-16466 Improper revalidation of permissions in Nextcloud Server prior to 14.0.0, 13.0.6 and 12.0.11 lead to not accepting access restrictions by acess tokens. | CVSS3: 8.1 | 1% Низкий | около 8 лет назад |
| CVE-2018-16466 Improper revalidation of permissions in Nextcloud Server prior to 14.0 ... | CVSS3: 8.1 | 1% Низкий | около 8 лет назад |
| CVE-2018-3780 A missing sanitization of search results for an autocomplete field in NextCloud Server <13.0.5 could lead to a stored XSS requiring user-interaction. The missing sanitization only affected user names, hence malicious search results could only be crafted by authenticated users. | CVSS3: 5.4 | 1% Низкий | около 8 лет назад |
| CVE-2018-3780 A missing sanitization of search results for an autocomplete field in ... | CVSS3: 5.4 | 1% Низкий | около 8 лет назад |
| GHSA-6mm6-pp6h-9p36 Improper revalidation of permissions in Nextcloud Server prior to 14.0.0, 13.0.6 and 12.0.11 lead to not accepting access restrictions by acess tokens. | CVSS3: 8.1 | 1% Низкий | больше 4 лет назад |
 | openSUSE-SU-2018:4002-1 Security update for nextcloud | 1% Низкий | почти 8 лет назад | |
| openSUSE-SU-2018:3999-1 Security update for nextcloud | 1% Низкий | почти 8 лет назад | |
| openSUSE-SU-2018:2521-2 Security update for nextcloud | 1% Низкий | около 8 лет назад | |
| openSUSE-SU-2018:2521-1 Security update for nextcloud | 1% Низкий | около 8 лет назад | |
| openSUSE-SU-2018:2510-1 Security update for nextcloud | 1% Низкий | около 8 лет назад | |
| GHSA-9qxg-6mvx-c4mc A missing sanitization of search results for an autocomplete field in NextCloud Server <13.0.5 could lead to a stored XSS requiring user-interaction. The missing sanitization only affected user names, hence malicious search results could only be crafted by authenticated users. | CVSS3: 5.4 | 1% Низкий | больше 4 лет назад |
Уязвимостей на страницу