Skip to main content

Vendor/product archive

nextcloud / nextcloud_server CVEs

Beta · best-effort

189 CVEs tagged to nextcloud / nextcloud_server3 Critical, 28 High, 114 Medium, 44 Low, 0 Unrated.

CVE-2023-25579

Published Feb 22, 2023

Nextcloud server is a self hosted home cloud product. In affected versions the `OC\Files\Node\Folder::getFullPath()` function was validating and normalizing the string in the wron…

CVSS 6.0 · Medium
Vendor/product tagsBeta · best-effort

CVE-2023-25162

Published Feb 13, 2023

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Nextcloud Server prior to 24.0.8 and 23.0.12 and Nextcloud Enterprise server prior…

CVSS 5.3 · Medium
Vendor/product tagsBeta · best-effort

CVE-2023-25161

Published Feb 13, 2023

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Nextcloud Server and Nextcloud Enterprise Server prior to versions 25.0.1 24.0.8,…

CVSS 3.7 · Low
Vendor/product tagsBeta · best-effort

CVE-2022-41970

Published Dec 1, 2022

Nextcloud Server is an open source personal cloud server. Prior to versions 24.0.7 and 25.0.1, disabled download shares still allow download through preview images. Images could b…

CVSS 2.6 · Low
Vendor/product tagsBeta · best-effort

CVE-2022-41969

Published Dec 1, 2022

Nextcloud Server is an open source personal cloud server. Prior to versions 23.0.11, 24.0.7, and 25.0.0, there is no password length limit when creating a user as an administrator…

CVSS 2.4 · Low
Vendor/product tagsBeta · best-effort

CVE-2022-41968

Published Dec 1, 2022

Nextcloud Server is an open source personal cloud server. Prior to versions 23.0.10 and 24.0.5, calendar name lengths are not validated before writing to a database. As a result,…

CVSS 3.5 · Low
Vendor/product tagsBeta · best-effort

CVE-2022-31120

Published Aug 4, 2022

Nextcloud server is an open source personal cloud solution. The audit log is used to get a full trail of the actions which has been incompletely populated. In affected versions fe…

CVSS 2.1 · Low
Vendor/product tagsBeta · best-effort

CVE-2022-31118

Published Aug 4, 2022

Nextcloud server is an open source personal cloud solution. In affected versions an attacker could brute force to find if federated sharing is being used and potentially try to br…

CVSS 6.5 · Medium
Vendor/product tagsBeta · best-effort

CVE-2022-31014

Published Jul 5, 2022

Nextcloud server is an open source personal cloud server. Affected versions were found to be vulnerable to SMTP command injection. The impact varies based on which commands are su…

CVSS 5.4 · Medium
Vendor/product tagsBeta · best-effort

CVE-2022-29243

Published May 31, 2022

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Prior to versions 22.2.7 and 23.0.4, missing input-size validation of new session…

CVSS 4.3 · Medium
Vendor/product tagsBeta · best-effort

CVE-2022-29163

Published May 20, 2022

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Prior to versions 22.2.6 and 23.0.3, a user can create a link that is not password…

CVSS 3.5 · Low
Vendor/product tagsBeta · best-effort

CVE-2022-24889

Published Apr 27, 2022

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Prior to versions 21.0.8, 22.2.4, and 23.0.1, it is possible to trick administrato…

CVSS 2.4 · Low
Vendor/product tagsBeta · best-effort

CVE-2022-24888

Published Apr 27, 2022

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Prior to versions 20.0.14.4, 21.0.8, 22.2.4, and 23.0.1, it is possible to create…

CVSS 4.3 · Medium
Vendor/product tagsBeta · best-effort

CVE-2021-41233

Published Mar 10, 2022

Nextcloud text is a collaborative document editing using Markdown built for the nextcloud server. Due to an issue with the Nextcloud Text application, which is by default shipped…

CVSS 6.5 · Medium
Vendor/product tagsBeta · best-effort

CVE-2022-24741

Published Mar 9, 2022

Nextcloud server is an open source, self hosted cloud style services platform. In affected versions an attacker can cause a denial of service by uploading specially crafted files…

CVSS 3.5 · Low
Vendor/product tagsBeta · best-effort

CVE-2021-41241

Published Mar 8, 2022

Nextcloud server is a self hosted system designed to provide cloud style services. The groupfolders application for Nextcloud allows sharing a folder with a group of people. In ad…

CVSS 4.3 · Medium
Vendor/product tagsBeta · best-effort

CVE-2021-41239

Published Mar 8, 2022

Nextcloud server is a self hosted system designed to provide cloud style services. In affected versions the User Status API did not consider the user enumeration settings by the a…

CVSS 5.3 · Medium
Vendor/product tagsBeta · best-effort

CVE-2021-41177

Published Oct 25, 2021

Nextcloud is an open-source, self-hosted productivity platform. Prior to versions 20.0.13, 21.0.5, and 22.2.0, Nextcloud Server did not implement a database backend for rate-limit…

CVSS 8.1 · High
Vendor/product tagsBeta · best-effort
Showing 76-100 of 189 CVEsPage 4 of 8