NE
Product
nextcloud/server
189
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 42Medium 125Low 15
Watch
Add nextcloud/server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-45148 | 4.3 | Oct 16 | Nextcloud is an open source home cloud server Affected: 22.0.0 before 22.2.10.16; 23.0.0 before 23.0.12.11; 24.0.0 before 24.0.12.7; 25.0.0 before 25.0.11; 25.0.0 before 25.0.11; 26.0.0 before 26.0.6; +3 more |
| CVE-2023-39961 | 4.3 | Aug 10 | Nextcloud Server provides data storage for Nextcloud, an open source cloud platform Affected: 25.0.0 before 25.0.9; 25.0.0 before 25.0.9; 26.0.0 before 26.0.4; 26.0.0 before 26.0.4; 27.0.0; 27.0.0 |
| CVE-2023-28834 | 4.3 | Apr 3 | Nextcloud Server is an open source personal cloud server Affected: 23.0.0 before 23.0.14; 24.0.0 before 24.0.10; 24.0.0 before 24.0.10; 25.0.0 before 25.0.4; 25.0.0 before 25.0.4 |
| CVE-2022-39330 | 4.3 | Oct 27 | Database resource exhaustion for logged-in users via sharee recommendations with circles Affected: before 23.0.10; 24.0.0 before 24.0.6 |
| CVE-2022-29243 | 4.3 | May 31 | Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform Affected: before 22.2.7; after 23.0.0 before 23.0.4 |
| CVE-2022-29163 | 4.3 | May 20 | Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform Affected: before 22.2.6; 23.0.0 before 23.0.3 |
| CVE-2022-24889 | 4.3 | Apr 27 | Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform Affected: before 21.0.8; 22.0.0 before 22.2.4; 23.0.0 before 23.0.1 |
| CVE-2022-24888 | 4.3 | Apr 27 | Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform Affected: before 20.0.14.4; 21.0.0 before 21.0.8; 22.0.0 before 22.2.4; 23.0.0 before 23.0.1 |
| CVE-2021-41241 | 4.3 | Mar 8 | Nextcloud server is a self hosted system designed to provide cloud style services Affected: before 20.0.14; 21.0.0 before 21.0.6; 22.2.0 |
| CVE-2021-32657 | 4.3 | Jun 1 | Nextcloud Server is a Nextcloud package that handles data storage Affected: before 19.0.11; 20.0.0 before 20.0.10; 21.0.0 before 21.0.2 |
| CVE-2020-8122 | 4.3 | Feb 4 | A missing check in Nextcloud Server 14.0.3 could give recipient the possibility to extend the expiration date of a share they received Affected: before 12.0.13; 13.0.0 before 13.0.8; 14.0.0 before 14.0.4; 14.0.5 before 15.0.0 |
| CVE-2020-8119 | 4.3 | Feb 4 | Improper authorization in Nextcloud server 17.0.0 causes leaking of previews and files when a file-drop share link is opened via the gallery app Affected: before 15.0.13; 16.0.0 before 16.0.6; 17.0.0 before 17.0.1 |
| CVE-2020-8117 | 4.3 | Feb 4 | Improper preservation of permissions in Nextcloud Server 14.0.3 causes the event details to be leaked when sharing a non-public event Affected: before 12.0.13; 13.0.0 before 13.0.8; 14.0.0 before 14.0.4 |
| CVE-2019-15616 | 4.3 | Feb 4 | Dangling remote share attempts in Nextcloud 16 allow a DNS pollution when running long Affected: before 17.0.0 |
| CVE-2019-5449 | 4.3 | Jul 30 | A missing check in the Nextcloud Server prior to version 15.0.1 causes leaking of calendar event names when adding or modifying confidential or private events Affected: before 15.0.1 |
| CVE-2018-3762 | 4.3 | Jul 5 | Nextcloud Server before 12.0.8 and 13.0.3 suffers from improper checks of dropped permissions for incoming shares allowing a user to still request previews for files it should not… Affected: before 12.0.8; 13.0.0 before 13.0.3 |
| CVE-2017-0894 | 4.3 | May 8 | Nextcloud Server before 11.0.3 is vulnerable to disclosure of valid share tokens for public calendars due to a logical error Affected: before 11.0.3 |
| CVE-2017-0888 | 4.3 | Apr 5 | Nextcloud Server before 9.0.55 and 10.0.2 suffers from a Content-Spoofing vulnerability in the "files" app Affected: 10.0.2 |
| CVE-2017-0887 | 4.3 | Apr 5 | Nextcloud Server before 9.0.55 and 10.0.2 suffers from a bypass in the quota limitation Affected: before 9.0.55; 10.0.0 before 10.0.2 |
| CVE-2017-0885 | 4.3 | Apr 5 | Nextcloud Server before 9.0.55 and 10.0.2 suffers from a error message disclosing existence of file in write-only share Affected: before 9.0.55; 10.0.0 before 10.0.2 |
| CVE-2017-0884 | 4.3 | Apr 5 | Nextcloud Server before 9.0.55 and 10.0.2 suffers from a creation of folders in read-only folders despite lacking permissions issue Affected: before 9.0.55; 10.0.0 before 10.0.2 |
| CVE-2016-9464 | 4.3 | Mar 28 | Nextcloud Server before 9.0.54 and 10.0.0 suffers from an improper authorization check on removing shares Affected: before 9.0.54; 10.0 |
| CVE-2016-9462 | 4.3 | Mar 28 | Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are not properly verifying restore privileges when restoring a file Affected: before 9.0.52 |
| CVE-2016-9461 | 4.3 | Mar 28 | Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are not properly verifying edit check permissions on WebDAV copy actions Affected: before 9.0.52 |
| CVE-2020-8150 | 4.1 | Nov 9 | A cryptographic issue in Nextcloud Server 19.0.1 allowed an attacker to downgrade the encryption scheme and break the integrity of encrypted files Affected: before 19.0.2 |