CVE-2017-0886
Published Apr 5, 2017Nextcloud Server before 9.0.55 and 10.0.2 suffers from a Denial of Service attack. Due to an error in the application logic an authenticated adversary may trigger an endless recur…
Vendor/product archive
nextcloud / nextcloud_server CVEs
Beta · best-effort189 CVEs tagged to nextcloud / nextcloud_server — 3 Critical, 28 High, 114 Medium, 44 Low, 0 Unrated.
CVE-2017-0885
Published Apr 5, 2017Nextcloud Server before 9.0.55 and 10.0.2 suffers from a error message disclosing existence of file in write-only share. Due to an error in the application logic an adversary with…
CVE-2017-0884
Published Apr 5, 2017Nextcloud Server before 9.0.55 and 10.0.2 suffers from a creation of folders in read-only folders despite lacking permissions issue. Due to a logical error in the file caching lay…
CVE-2017-0883
Published Apr 5, 2017Nextcloud Server before 9.0.55 and 10.0.2 suffers from a permission increase on re-sharing via OCS API issue. A permission related issue within the OCS sharing API allowed an auth…
CVE-2016-9468
Published Mar 28, 2017Nextcloud Server before 9.0.54 and 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 suffer from content spoofing in the dav app. The exception message displayed on the DAV endpoint…
CVE-2016-9467
Published Mar 28, 2017Nextcloud Server before 9.0.54 and 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 suffer from content spoofing in the files app. The location bar in the files app was not verifyi…
CVE-2016-9466
Published Mar 28, 2017Nextcloud Server before 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 suffer from Reflected XSS in the Gallery application. The gallery app was not properly sanitizing exception…
CVE-2016-9465
Published Mar 28, 2017Nextcloud Server before 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 suffer from Stored XSS in CardDAV image export. The CardDAV image export functionality as implemented in Ne…
CVE-2016-9464
Published Mar 28, 2017Nextcloud Server before 9.0.54 and 10.0.0 suffers from an improper authorization check on removing shares. The Sharing Backend as implemented in Nextcloud does differentiate betwe…
CVE-2016-9463
Published Mar 28, 2017Nextcloud Server before 9.0.54 and 10.0.1 & ownCloud Server before 9.1.2, 9.0.6, and 8.2.9 suffer from SMB User Authentication Bypass. Nextcloud/ownCloud include an optional and n…
CVE-2016-9462
Published Mar 28, 2017Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are not properly verifying restore privileges when restoring a file. The restore capability of Nextcloud/ownCloud was…
CVE-2016-9461
Published Mar 28, 2017Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are not properly verifying edit check permissions on WebDAV copy actions. The WebDAV endpoint was not properly checki…
CVE-2016-9459
Published Mar 28, 2017Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are vulnerable to a log pollution vulnerability potentially leading to a local XSS. The download log functionality in…
CVE-2016-7419
Published Sep 17, 2016Cross-site scripting (XSS) vulnerability in share.js in the gallery application in ownCloud Server before 9.0.4 and Nextcloud Server before 9.0.52 allows remote authenticated user…
Showing 176-189 of 189 CVEsPage 8 of 8