CVE-2024-52518
Published Nov 15, 2024Nextcloud Server is a self hosted personal cloud system. After an attacker got access to the session of a user or administrator, the attacker would be able to create, change or de…
Vendor/product archive
nextcloud / nextcloud_server CVEs
Beta · best-effort189 CVEs tagged to nextcloud / nextcloud_server — 3 Critical, 28 High, 114 Medium, 44 Low, 0 Unrated.
CVE-2024-52517
Published Nov 15, 2024Nextcloud Server is a self hosted personal cloud system. After storing "Global credentials" on the server, the API returns them and adds them into the frontend again, allowing to…
CVE-2024-52516
Published Nov 15, 2024Nextcloud Server is a self hosted personal cloud system. When a server is configured to only allow sharing with users that are in ones own groups, after a user was removed from a…
CVE-2024-52515
Published Nov 15, 2024Nextcloud Server is a self hosted personal cloud system. After an admin enables the default-disabled SVG preview provider, a malicious user could upload a manipulated SVG file ref…
CVE-2024-37887
Published Jun 14, 2024Nextcloud Server is a self hosted personal cloud system. Private shared calendar events' recurrence exceptions can be read by sharees. It is recommended that the Nextcloud Server…
CVE-2024-37884
Published Jun 14, 2024Nextcloud Server is a self hosted personal cloud system. A malicious user was able to send delete requests for old versions of files they only got shared with read permissions. It…
CVE-2024-37882
Published Jun 14, 2024Nextcloud Server is a self hosted personal cloud system. A recipient of a share with read&share permissions could reshare the item with more permissions. It is recommended that th…
CVE-2024-37315
Published Jun 14, 2024Nextcloud Server is a self hosted personal cloud system. An attacker with read-only access to a file is able to restore older versions of a document when the files_versions app is…
CVE-2024-37314
Published Jun 14, 2024Nextcloud Photos is a photo management app. Users can remove photos from the album of registered users. It is recommended that the Nextcloud Server is upgraded to 25.0.7 or 26.0.2…
CVE-2024-37313
Published Jun 14, 2024Nextcloud server is a self hosted personal cloud system. Under some circumstance it was possible to bypass the second factor of 2FA after successfully providing the user credentia…
CVE-2024-22403
Published Jan 18, 2024Nextcloud server is a self hosted personal cloud system. In affected versions OAuth codes did not expire. When an attacker would get access to an authorization code they could aut…
CVE-2023-49792
Published Dec 22, 2023Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. In Nextcloud Server prior to versions 26.0.9 and 27.1.4; as well as Nextcloud Enterprise Serve…
CVE-2023-49791
Published Dec 22, 2023Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. In Nextcloud Server prior to versions 26.0.9 and 27.1.4; as well as Nextcloud Enterprise Serve…
CVE-2023-48306
Published Nov 21, 2023Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.11, 26.0.6, and 27.1.0 of Nextcloud Serv…
CVE-2023-48305
Published Nov 21, 2023Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.11, 26.0.6, and 27.1.0 of Nextcloud Serv…
CVE-2023-48304
Published Nov 21, 2023Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.11, 26.0.6, and 27.1.0 of Nextcloud Serv…
CVE-2023-48303
Published Nov 21, 2023Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.11, 26.0.6, and 27.1.0 of Nextcloud Serv…
CVE-2023-48302
Published Nov 21, 2023Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.13, 26.0.8, and 27.1.3 of Nextcloud Serv…
CVE-2023-48301
Published Nov 21, 2023Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.13, 26.0.8, and 27.1.3 of Nextcloud Serv…
CVE-2023-48239
Published Nov 21, 2023Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.13, 26.0.8, and 27.1.3 of Nextcloud Serv…
CVE-2023-45151
Published Oct 16, 2023Nextcloud server is an open source home cloud platform. Affected versions of Nextcloud stored OAuth2 tokens in plaintext which allows an attacker who has gained access to the serv…
CVE-2023-45148
Published Oct 16, 2023Nextcloud is an open source home cloud server. When Memcached is used as `memcache.distributed` the rate limiting in Nextcloud Server could be reset unexpectedly resetting the rat…
CVE-2023-39960
Published Oct 13, 2023Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. In Nextcloud Server starting with 25.0.0 and prior to 25.09 and 26.04; as well as Nextcloud En…
CVE-2023-39963
Published Aug 10, 2023Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 20.0.0 and prior to versions 20.0.14.15, 21.0.9.13, 22.2.10.14, 23.0.12.8,…
CVE-2023-39962
Published Aug 10, 2023Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 19.0.0 and prior to versions 19.0.13.10, 20.0.14.15, 21.0.9.13, 22.2.10.14…
Showing 26-50 of 189 CVEsPage 2 of 8