CVE-2022-39330
- EPSS 0.09%
- Veröffentlicht 27.10.2022 14:15:12
- Zuletzt bearbeitet 21.11.2024 07:18:03
Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Nextcloud Server prior to versions 23.0.10 and 24.0.6 and Nextcloud Enterprise Server prior to versions 22.2.10, 23.0.10, and 24.0.6 are vulnerable to a ...
CVE-2022-39329
- EPSS 0.16%
- Veröffentlicht 27.10.2022 14:15:11
- Zuletzt bearbeitet 21.11.2024 07:18:03
Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Nextcloud Server and Nextcloud Enterprise Server prior to versions 23.0.9 and 24.0.5 are vulnerable to exposure of information that cannot be controlled ...
CVE-2022-39211
- EPSS 0.15%
- Veröffentlicht 16.09.2022 23:15:11
- Zuletzt bearbeitet 21.11.2024 07:17:47
Nextcloud server is an open source personal cloud platform. In affected versions it was found that locally running webservices can be found and requested erroneously. It is recommended that the Nextcloud Server is upgraded to 23.0.8 or 24.0.4. It is ...
CVE-2022-36074
- EPSS 0.13%
- Veröffentlicht 15.09.2022 22:15:11
- Zuletzt bearbeitet 21.11.2024 07:12:19
Nextcloud server is an open source personal cloud product. Affected versions of this package are vulnerable to Information Exposure which fails to strip the Authorization header on HTTP downgrade. This can lead to account access exposure and compromi...
CVE-2022-31118
- EPSS 0.16%
- Veröffentlicht 04.08.2022 17:15:08
- Zuletzt bearbeitet 21.11.2024 07:03:55
Nextcloud server is an open source personal cloud solution. In affected versions an attacker could brute force to find if federated sharing is being used and potentially try to brute force access tokens for federated shares (`a-zA-Z0-9` ^ 15). It is ...
CVE-2022-31120
- EPSS 0.45%
- Veröffentlicht 04.08.2022 17:15:08
- Zuletzt bearbeitet 21.11.2024 07:03:56
Nextcloud server is an open source personal cloud solution. The audit log is used to get a full trail of the actions which has been incompletely populated. In affected versions federated share events were not properly logged which would allow brute f...
CVE-2022-31014
- EPSS 0.87%
- Veröffentlicht 05.07.2022 18:15:07
- Zuletzt bearbeitet 21.11.2024 07:03:42
Nextcloud server is an open source personal cloud server. Affected versions were found to be vulnerable to SMTP command injection. The impact varies based on which commands are supported by the backend SMTP server. However, the main risk here is that...
CVE-2022-29243
- EPSS 0.7%
- Veröffentlicht 31.05.2022 17:15:07
- Zuletzt bearbeitet 21.11.2024 06:58:47
Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Prior to versions 22.2.7 and 23.0.4, missing input-size validation of new session names allows users to create app passwords with long names. These long ...
CVE-2022-29163
- EPSS 0.48%
- Veröffentlicht 20.05.2022 16:15:09
- Zuletzt bearbeitet 21.11.2024 06:58:37
Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Prior to versions 22.2.6 and 23.0.3, a user can create a link that is not password protected even if the administrator requires links to be password prot...
- EPSS 0.49%
- Veröffentlicht 27.04.2022 15:15:09
- Zuletzt bearbeitet 21.11.2024 06:51:19
Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Prior to versions 20.0.14.4, 21.0.8, 22.2.4, and 23.0.1, it is possible to create files and folders that have leading and trailing \n, \r, \t, and \v cha...