Skip to main content

Vendor/product archive

nextcloud / nextcloud_server CVEs

Beta · best-effort

189 CVEs tagged to nextcloud / nextcloud_server3 Critical, 28 High, 114 Medium, 44 Low, 0 Unrated.

CVE-2023-39961

Published Aug 10, 2023

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 24.0.4 and prior to versions 25.0.9, 26.0.4, and 27.0.1, when a folder wit…

CVSS 3.5 · Low
Vendor/product tagsBeta · best-effort

CVE-2023-39959

Published Aug 10, 2023

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.9, 26.0.4, and 27.0.1, unauthenticated u…

CVSS 3.5 · Low
Vendor/product tagsBeta · best-effort

CVE-2023-39958

Published Aug 10, 2023

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 22.0.0 and prior to versions 22.2.10.13, 23.0.12.8, 24.0.12.5, 25.0.9, 26.…

CVSS 5.8 · Medium
Vendor/product tagsBeta · best-effort

CVE-2023-39952

Published Aug 10, 2023

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 22.0.0 and prior to versions 22.2.10.13, 23.0.12.8, 24.0.12.4, 25.0.8, 26.…

CVSS 6.5 · Medium
Vendor/product tagsBeta · best-effort

CVE-2023-35928

Published Jun 23, 2023

Nextcloud Server is a space for data storage on Nextcloud, a self-hosted productivity playform. In NextCloud Server versions 25.0.0 until 25.0.7 and 26.0.0 until 26.0.2 and Nextcl…

CVSS 8.4 · High
Vendor/product tagsBeta · best-effort

CVE-2023-35927

Published Jun 23, 2023

NextCloud Server and NextCloud Enterprise Server provide file storage for Nextcloud, a self-hosted productivity platform. In NextCloud Server versions 25.0.0 until 25.0.7 and 26.0…

CVSS 7.6 · High
Vendor/product tagsBeta · best-effort

CVE-2023-35172

Published Jun 23, 2023

NextCloud Server and NextCloud Enterprise Server provide file storage for Nextcloud, a self-hosted productivity platform. In NextCloud Server versions 25.0.0 until 25.0.7 and 26.0…

CVSS 8.7 · High
Vendor/product tagsBeta · best-effort

CVE-2023-35171

Published Jun 23, 2023

NextCloud Server and NextCloud Enterprise Server provide file storage for Nextcloud, a self-hosted productivity platform. Starting in version 26.0.0 and prior to version 26.0.2, a…

CVSS 4.1 · Medium
Vendor/product tagsBeta · best-effort

CVE-2023-32320

Published Jun 22, 2023

Nextcloud Server is a data storage system for Nextcloud, a self-hosted productivity platform. When multiple requests are sent in parallel, all of them were executed even if the am…

CVSS 8.7 · High
Vendor/product tagsBeta · best-effort

CVE-2023-32319

Published May 26, 2023

Nextcloud server is an open source personal cloud implementation. Missing brute-force protection on the WebDAV endpoints via the basic auth header allowed to brute-force user cred…

CVSS 8.1 · High
Vendor/product tagsBeta · best-effort

CVE-2023-32318

Published May 26, 2023

Nextcloud server provides a home for data. A regression in the session handling between Nextcloud Server and the Nextcloud Text app prevented a correct destruction of the session…

CVSS 7.2 · High
Vendor/product tagsBeta · best-effort

CVE-2023-28847

Published Apr 25, 2023

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. In Nextcloud Server 24.0.0 prior to 24.0.11 and 25.0.0 prior to 25.0.5; as well as…

CVSS 3.1 · Low
Vendor/product tagsBeta · best-effort

CVE-2023-28834

Published Apr 3, 2023

Nextcloud Server is an open source personal cloud server. Nextcloud Server 24.0.0 until 24.0.6 and 25.0.0 until 25.0.4, as well as Nextcloud Enterprise Server 23.0.0 until 23.0.11…

CVSS 3.5 · Low
Vendor/product tagsBeta · best-effort

CVE-2023-28844

Published Mar 31, 2023

Nextcloud server is an open source home cloud implementation. In affected versions users that should not be able to download a file can still download an older version and use tha…

CVSS 5.7 · Medium
Vendor/product tagsBeta · best-effort

CVE-2023-28835

Published Mar 30, 2023

Nextcloud server is an open source home cloud implementation. In affected versions the generated fallback password when creating a share was using a weak complexity random number…

CVSS 3.5 · Low
Vendor/product tagsBeta · best-effort

CVE-2023-28833

Published Mar 30, 2023

Nextcloud server is an open source home cloud implementation. In affected versions admins of a server were able to upload a logo or a favicon and to provided a file name which was…

CVSS 2.4 · Low
Vendor/product tagsBeta · best-effort

CVE-2023-28644

Published Mar 30, 2023

Nextcloud server is an open source home cloud implementation. In releases of the 25.0.x branch before 25.0.3 an inefficient fetch operation may impact server performances and/or c…

CVSS 5.7 · Medium
Vendor/product tagsBeta · best-effort

CVE-2023-28643

Published Mar 30, 2023

Nextcloud server is an open source home cloud implementation. In affected versions when a recipient receives 2 shares with the same name, while a memory cache is configured, the s…

CVSS 5.5 · Medium
Vendor/product tagsBeta · best-effort

CVE-2023-26482

Published Mar 30, 2023

Nextcloud server is an open source home cloud implementation. In affected versions a missing scope validation allowed users to create workflows which are designed to be only avail…

CVSS 9.0 · Critical
Vendor/product tagsBeta · best-effort

CVE-2023-25817

Published Mar 27, 2023

Nextcloud server is an open source, personal cloud implementation. In versions from 24.0.0 and before 24.0.9 a user could escalate their permissions to delete files they were not…

CVSS 3.5 · Low
Vendor/product tagsBeta · best-effort

CVE-2023-25818

Published Mar 27, 2023

Nextcloud server is an open source, personal cloud implementation. In affected versions a malicious user could try to reset the password of another user and then brute force the 6…

CVSS 5.3 · Medium
Vendor/product tagsBeta · best-effort

CVE-2023-25820

Published Mar 22, 2023

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform, and Nextcloud Enterprise Server is the enterprise version of the file server softw…

CVSS 4.2 · Medium
Vendor/product tagsBeta · best-effort

CVE-2023-25821

Published Feb 25, 2023

Nextcloud is an Open Source private cloud software. Versions 24.0.4 and above, prior to 24.0.7, and 25.0.0 and above, prior to 25.0.1, contain Improper Access Control. Secure view…

CVSS 5.7 · Medium
Vendor/product tagsBeta · best-effort

CVE-2023-25816

Published Feb 25, 2023

Nextcloud is an Open Source private cloud software. Versions 25.0.0 and above, prior to 25.0.3, are subject to Uncontrolled Resource Consumption. A user can configure a very long…

CVSS 4.3 · Medium
Vendor/product tagsBeta · best-effort
Showing 51-75 of 189 CVEsPage 3 of 8