Nextcloud

Nextcloud

155 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2023-45151

  • EPSS 0.48%
  • Veröffentlicht 16.10.2023 19:15:10
  • Zuletzt bearbeitet 21.11.2024 08:26:27

Nextcloud server is an open source home cloud platform. Affected versions of Nextcloud stored OAuth2 tokens in plaintext which allows an attacker who has gained access to the server to potentially elevate their privilege. This issue has been addresse...

7.5

CVE-2023-39960

  • EPSS 0.58%
  • Veröffentlicht 13.10.2023 13:15:11
  • Zuletzt bearbeitet 21.11.2024 08:16:07

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. In Nextcloud Server starting with 25.0.0 and prior to 25.09 and 26.04; as well as Nextcloud Enterprise Server starting with 22.0.0 and prior to 22.2.10.14, 23.0.12.9...

5.3

CVE-2023-39959

  • EPSS 0.49%
  • Veröffentlicht 10.08.2023 18:15:10
  • Zuletzt bearbeitet 21.11.2024 08:16:07

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.9, 26.0.4, and 27.0.1, unauthenticated users could send a DAV request which reveals whether a calendar or an ad...

4.3

CVE-2023-39961

  • EPSS 0.47%
  • Veröffentlicht 10.08.2023 18:15:10
  • Zuletzt bearbeitet 21.11.2024 08:16:07

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 24.0.4 and prior to versions 25.0.9, 26.0.4, and 27.0.1, when a folder with images or an image was shared without download permissions, the user ...

7.7

CVE-2023-39962

  • EPSS 0.82%
  • Veröffentlicht 10.08.2023 18:15:10
  • Zuletzt bearbeitet 21.11.2024 08:16:07

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 19.0.0 and prior to versions 19.0.13.10, 20.0.14.15, 21.0.9.13, 22.2.10.14, 23.0.12.8, 24.0.12.5, 25.0.9, 26.0.4, and 27.0.1, a malicious user co...

7.8

CVE-2023-39963

  • EPSS 0.24%
  • Veröffentlicht 10.08.2023 18:15:10
  • Zuletzt bearbeitet 21.11.2024 08:16:07

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 20.0.0 and prior to versions 20.0.14.15, 21.0.9.13, 22.2.10.14, 23.0.12.8, 24.0.12.5, 25.0.9, 26.0.4, and 27.0.1, a missing password confirmation...

5.3

CVE-2023-39958

  • EPSS 0.58%
  • Veröffentlicht 10.08.2023 18:15:09
  • Zuletzt bearbeitet 21.11.2024 08:16:07

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 22.0.0 and prior to versions 22.2.10.13, 23.0.12.8, 24.0.12.5, 25.0.9, 26.0.4, and 27.0.1, missing protection allows an attacker to brute force t...

6.5

CVE-2023-39952

  • EPSS 0.81%
  • Veröffentlicht 10.08.2023 14:15:15
  • Zuletzt bearbeitet 21.11.2024 08:16:06

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 22.0.0 and prior to versions 22.2.10.13, 23.0.12.8, 24.0.12.4, 25.0.8, 26.0.3, and 27.0.1, a user can access files inside a subfolder of a groupf...

8.8

CVE-2023-35928

  • EPSS 0.98%
  • Veröffentlicht 23.06.2023 21:15:10
  • Zuletzt bearbeitet 21.11.2024 08:08:59

Nextcloud Server is a space for data storage on Nextcloud, a self-hosted productivity playform. In NextCloud Server versions 25.0.0 until 25.0.7 and 26.0.0 until 26.0.2 and Nextcloud Enterprise Server versions 19.0.0 until 19.0.13.9, 20.0.0 until 20....

6.1

CVE-2023-35171

Exploit
  • EPSS 0.59%
  • Veröffentlicht 23.06.2023 21:15:09
  • Zuletzt bearbeitet 21.11.2024 08:08:05

NextCloud Server and NextCloud Enterprise Server provide file storage for Nextcloud, a self-hosted productivity platform. Starting in version 26.0.0 and prior to version 26.0.2, an attacker could supply a URL that redirects an unsuspecting victim fro...