Skip to main content

Nextcloud

377 CVEs product

Monthly

CVE-2023-25816 Feb 25, 00:15 MEDIUM POC PATCH This Month

Nextcloud is an Open Source private cloud software. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

Denial Of Service Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
6.5
EPSS
1.4%
CVE-2023-25579 Feb 22, 19:15 HIGH PATCH This Week

Nextcloud server is a self hosted home cloud product. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Path Traversal vulnerability could allow attackers to access files and directories outside the intended path.

Path Traversal Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
7.5
EPSS
0.5%
CVE-2023-25162 Feb 13, 21:15 MEDIUM POC This Month

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

SSRF Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
5.3
EPSS
0.8%
CVE-2023-25161 Feb 13, 21:15 MEDIUM PATCH This Month

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
5.3
EPSS
0.7%
CVE-2023-25160 Feb 13, 21:15 MEDIUM PATCH This Month

Nextcloud Mail is an email app for the Nextcloud home server platform. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Nextcloud Mail
NVD GitHub
CVSS 3.1
5.3
EPSS
0.5%
CVE-2023-25159 Feb 13, 17:15 MEDIUM This Month

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform, and Nextcloud Office is a document collaboration app for the same platform. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Microsoft Nextcloud Server Nextcloud Richdocuments
NVD GitHub
CVSS 3.1
5.3
EPSS
0.5%
CVE-2023-25150 Feb 08, 20:15 MEDIUM PATCH This Month

Nextcloud office/richdocuments is an office suit for the nextcloud server platform. Rated medium severity (CVSS 5.7), this vulnerability is remotely exploitable, low attack complexity.

Authentication Bypass Microsoft Nextcloud Richdocuments
NVD GitHub
CVSS 3.1
5.7
EPSS
0.7%
CVE-2023-23943 Feb 06, 21:15 MEDIUM POC PATCH This Month

Nextcloud mail is an email app for the nextcloud home server platform. Rated medium severity (CVSS 4.3), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

SSRF Nextcloud Mail
NVD GitHub
CVSS 3.1
4.3
EPSS
0.9%
CVE-2023-23942 Feb 06, 21:15 MEDIUM PATCH This Month

The Nextcloud Desktop Client is a tool to synchronize files from a Nextcloud Server with your computer. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Desktop Nextcloud
NVD GitHub
CVSS 3.1
6.1
EPSS
0.7%
CVE-2023-23944 Feb 06, 20:15 MEDIUM PATCH This Month

Nextcloud mail is an email app for the nextcloud home server platform. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Nextcloud Mail
NVD GitHub
CVSS 3.1
6.5
EPSS
0.5%
CVE-2023-22471 Jan 14, 01:15 MEDIUM PATCH This Month

Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity.

Authentication Bypass Deck Nextcloud
NVD GitHub
CVSS 3.1
4.3
EPSS
0.5%
CVE-2023-22470 Jan 14, 01:15 MEDIUM PATCH This Month

Nextcloud Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. This Uncontrolled Resource Consumption vulnerability could allow attackers to cause denial of service by exhausting system resources.

Denial Of Service Deck Nextcloud
NVD GitHub
CVSS 3.1
6.5
EPSS
0.7%
CVE-2023-22469 Jan 10, 21:15 LOW POC PATCH Monitor

Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

Authentication Bypass Deck Nextcloud
NVD GitHub
CVSS 3.1
3.5
EPSS
0.7%
CVE-2023-22473 Jan 09, 15:15 LOW POC PATCH Monitor

Talk-Android enables users to have video & audio calls through Nextcloud on Android. Rated low severity (CVSS 2.1), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

Authentication Bypass Google Nextcloud Talk
NVD GitHub
CVSS 3.1
2.1
EPSS
0.6%
CVE-2023-22472 Jan 09, 14:15 HIGH PATCH This Week

Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Request Forgery (CSRF) vulnerability could allow attackers to trick authenticated users into performing unintended actions.

CSRF Microsoft Desktop Nextcloud
NVD GitHub
CVSS 3.1
8.8
EPSS
0.2%
CVE-2022-41971 Dec 01, 21:15 MEDIUM This Month

Nextcould Talk android is a video and audio conferencing app for Nextcloud. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Google Nextcloud Nextcloud Talk
NVD GitHub
CVSS 3.1
6.5
EPSS
0.8%
CVE-2022-41970 Dec 01, 21:15 MEDIUM PATCH This Month

Nextcloud Server is an open source personal cloud server. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
5.3
EPSS
0.6%
CVE-2022-41969 Dec 01, 21:15 LOW PATCH Monitor

Nextcloud Server is an open source personal cloud server. Rated low severity (CVSS 2.7), this vulnerability is remotely exploitable, low attack complexity. This Uncontrolled Resource Consumption vulnerability could allow attackers to cause denial of service by exhausting system resources.

Denial Of Service Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
2.7
EPSS
0.8%
CVE-2022-41968 Dec 01, 21:15 MEDIUM PATCH This Month

Nextcloud Server is an open source personal cloud server. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Uncontrolled Resource Consumption vulnerability could allow attackers to cause denial of service by exhausting system resources.

Denial Of Service Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
5.3
EPSS
0.8%
CVE-2022-39333 Nov 25, 20:15 MEDIUM POC PATCH This Month

Nexcloud desktop is the Desktop sync client for Nextcloud. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

XSS Desktop Nextcloud
NVD GitHub
CVSS 3.1
6.1
EPSS
0.9%
CVE-2022-39332 Nov 25, 20:15 MEDIUM POC PATCH This Month

Nexcloud desktop is the Desktop sync client for Nextcloud. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

XSS Desktop Nextcloud
NVD GitHub
CVSS 3.1
5.4
EPSS
0.9%
CVE-2022-41926 Nov 25, 19:15 MEDIUM PATCH This Month

Nextcould talk android is the android OS implementation of the nextcloud talk chat system. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Google Nextcloud Talk
NVD GitHub VulDB
CVSS 3.1
5.5
EPSS
0.3%
CVE-2022-39346 Nov 25, 19:15 MEDIUM PATCH This Month

Nextcloud server is an open source personal cloud server. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Denial Of Service Fedora Nextcloud Server Nextcloud Nextcloud Enterprise Server +1
NVD GitHub
CVSS 3.1
6.5
EPSS
1.0%
CVE-2022-39339 Nov 25, 19:15 MEDIUM PATCH This Month

user_oidc is an OpenID Connect user backend for Nextcloud. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Nextcloud Openid Connect User Backend
NVD GitHub
CVSS 3.1
4.3
EPSS
0.4%
CVE-2022-39338 Nov 25, 19:15 MEDIUM PATCH This Month

user_oidc is an OpenID Connect user backend for Nextcloud. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity.

XSS Apple Nextcloud Openid Connect User Backend
NVD GitHub
CVSS 3.1
5.4
EPSS
0.6%
CVE-2022-39334 Nov 25, 19:15 MEDIUM POC PATCH This Month

Nextcloud also ships a CLI utility called nextcloudcmd which is sometimes used for automated scripting and headless servers. Rated medium severity (CVSS 4.7). Public exploit code available.

Information Disclosure Desktop Nextcloud
NVD GitHub
CVSS 3.1
4.7
EPSS
0.2%
CVE-2022-39331 Nov 25, 19:15 MEDIUM POC PATCH This Month

Nexcloud desktop is the Desktop sync client for Nextcloud. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

XSS Desktop Nextcloud
NVD GitHub
CVSS 3.1
5.4
EPSS
0.9%
CVE-2022-41882 Nov 11, 19:15 HIGH PATCH This Week

The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. This Code Injection vulnerability could allow attackers to inject and execute arbitrary code within the application.

RCE Microsoft Code Injection Desktop Nextcloud
NVD GitHub VulDB
CVSS 3.1
7.8
EPSS
0.5%
CVE-2022-39364 Oct 27, 15:15 MEDIUM POC PATCH This Month

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

Information Disclosure Microsoft Nextcloud Server Nextcloud Nextcloud Enterprise Server
NVD GitHub
CVSS 3.1
6.5
EPSS
0.5%
CVE-2022-39330 Oct 27, 14:15 MEDIUM PATCH This Month

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. This Uncontrolled Resource Consumption vulnerability could allow attackers to cause denial of service by exhausting system resources.

Denial Of Service Nextcloud Server Nextcloud Nextcloud Enterprise Server
NVD GitHub
CVSS 3.1
4.3
EPSS
0.8%
CVE-2022-39329 Oct 27, 14:15 MEDIUM PATCH This Month

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Nextcloud Server Nextcloud Nextcloud Enterprise Server
NVD GitHub
CVSS 3.1
5.3
EPSS
0.6%
CVE-2022-39212 Sep 17, 00:15 MEDIUM PATCH This Month

Nextcloud Talk is an open source chat, video & audio calls client for the Nextcloud platform. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Nextcloud Talk
NVD GitHub
CVSS 3.1
5.3
EPSS
0.5%
CVE-2022-39210 Sep 17, 00:15 MEDIUM PATCH This Month

Nextcloud android is the official Android client for the Nextcloud home server platform. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. This Path Traversal vulnerability could allow attackers to access files and directories outside the intended path.

Path Traversal Google Nextcloud
NVD GitHub
CVSS 3.1
5.5
EPSS
0.3%
CVE-2022-39211 Sep 16, 23:15 MEDIUM PATCH This Month

Nextcloud server is an open source personal cloud platform. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Server-Side Request Forgery (SSRF) vulnerability could allow attackers to make the server perform requests to unintended internal or external resources.

SSRF Nextcloud Server Nextcloud Nextcloud Enterprise Server
NVD GitHub
CVSS 3.1
5.3
EPSS
0.7%
CVE-2022-36075 Sep 15, 22:15 MEDIUM PATCH This Month

Nextcloud files access control is a nextcloud app to manage access control for files. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Nextcloud Files Access Control
NVD GitHub
CVSS 3.1
4.3
EPSS
0.4%
CVE-2022-36074 Sep 15, 22:15 HIGH PATCH This Week

Nextcloud server is an open source personal cloud product. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Nextcloud Server Nextcloud Nextcloud Enterprise Server
NVD GitHub
CVSS 3.1
7.5
EPSS
0.6%
CVE-2022-35931 Sep 06, 18:15 LOW PATCH Monitor

Nextcloud Password Policy is an app that enables a Nextcloud server admin to define certain rules for passwords. Rated low severity (CVSS 2.7), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Nextcloud Password Policy
NVD GitHub
CVSS 3.1
2.7
EPSS
0.4%
CVE-2022-35932 Aug 12, 16:15 MEDIUM PATCH This Month

Nextcloud Talk is a video and audio conferencing app for Nextcloud. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Nextcloud Talk
NVD GitHub
CVSS 3.1
5.3
EPSS
1.1%
CVE-2022-31119 Aug 04, 18:15 MEDIUM PATCH This Month

Nextcloud Mail is an email application for the nextcloud personal cloud product. Rated medium severity (CVSS 4.9), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Nextcloud Mail
NVD GitHub
CVSS 3.1
4.9
EPSS
0.6%
CVE-2022-31132 Aug 04, 17:15 CRITICAL Act Now

Nextcloud Mail is an email application for the nextcloud personal cloud product. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP SSRF Nextcloud Mail
NVD GitHub
CVSS 3.1
9.8
EPSS
0.6%
CVE-2022-31120 Aug 04, 17:15 LOW PATCH Monitor

Nextcloud server is an open source personal cloud solution. Rated low severity (CVSS 2.7), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
2.7
EPSS
0.7%
CVE-2022-31118 Aug 04, 17:15 MEDIUM PATCH This Month

Nextcloud server is an open source personal cloud solution. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Allocation of Resources Without Limits vulnerability could allow attackers to exhaust system resources through uncontrolled allocation.

PHP Denial Of Service Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
5.3
EPSS
0.6%
CVE-2022-31131 Jul 06, 18:15 MEDIUM POC PATCH This Month

Nextcloud mail is a Mail app for the Nextcloud home server product. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

Authentication Bypass Nextcloud Nextcloud Mail
NVD GitHub
CVSS 3.1
4.3
EPSS
0.7%
CVE-2022-31014 Jul 05, 18:15 LOW POC PATCH Monitor

Nextcloud server is an open source personal cloud server. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

Command Injection Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
3.5
EPSS
2.4%
CVE-2022-31024 Jun 02, 19:15 MEDIUM PATCH This Month

richdocuments is the repository for NextCloud Collabra, the app for Nextcloud Office collaboration. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Microsoft Nextcloud Richdocuments
NVD GitHub
CVSS 3.1
6.5
EPSS
0.6%
CVE-2022-29243 May 31, 17:15 MEDIUM PATCH This Month

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
4.3
EPSS
1.4%
CVE-2022-29163 May 20, 16:15 MEDIUM PATCH This Month

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
4.3
EPSS
1.0%
CVE-2022-29160 May 20, 16:15 LOW POC PATCH Monitor

Nextcloud Android is the Android client for Nextcloud, a self-hosted productivity platform. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity. Public exploit code available.

Authentication Bypass Google Nextcloud
NVD GitHub
CVSS 3.1
3.3
EPSS
0.4%
CVE-2022-29159 May 20, 16:15 MEDIUM POC PATCH This Month

Nextcloud Deck is a Kanban-style project & personal management tool for Nextcloud. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

Authentication Bypass Deck Nextcloud
NVD GitHub
CVSS 3.1
4.3
EPSS
0.9%
CVE-2022-24906 May 20, 16:15 MEDIUM POC PATCH This Month

Nextcloud Deck is a Kanban-style project & personal management tool for Nextcloud, similar to Trello. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

Information Disclosure Deck Nextcloud
NVD GitHub
CVSS 3.1
4.3
EPSS
1.0%
CVE-2022-24890 May 17, 19:15 MEDIUM POC PATCH This Month

Nextcloud Talk is a video and audio conferencing app for Nextcloud. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

Information Disclosure Nextcloud Talk
NVD GitHub
CVSS 3.1
4.3
EPSS
0.9%
CVE-2022-24889 Apr 27, 15:15 MEDIUM POC This Month

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
4.3
EPSS
0.6%
CVE-2022-24888 Apr 27, 15:15 MEDIUM PATCH This Month

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity.

Code Injection Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
4.3
EPSS
1.2%
CVE-2022-24887 Apr 27, 14:15 MEDIUM POC PATCH This Month

Nextcloud Talk is a video and audio conferencing app for Nextcloud, a self-hosted productivity platform. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Open Redirect Nextcloud Talk
NVD GitHub
CVSS 3.1
6.1
EPSS
0.9%
CVE-2022-24886 Apr 27, 14:15 LOW Monitor

Nextcloud Android app is the Android client for Nextcloud, a self-hosted productivity platform. Rated low severity (CVSS 3.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Nextcloud
NVD GitHub
CVSS 3.1
3.8
EPSS
0.4%
CVE-2022-24885 Apr 27, 14:15 LOW POC PATCH Monitor

Nextcloud Android app is the Android client for Nextcloud, a self-hosted productivity platform. Rated low severity (CVSS 2.4), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

Authentication Bypass Google Nextcloud
NVD GitHub
CVSS 3.1
2.4
EPSS
0.5%
CVE-2022-24838 Apr 11, 21:15 CRITICAL PATCH Act Now

Nextcloud Calendar is a calendar application for the nextcloud framework. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Command Injection Calendar Nextcloud
NVD GitHub
CVSS 3.1
9.8
EPSS
32.3%
CVE-2022-24741 Mar 09, 22:15 MEDIUM POC PATCH This Month

Nextcloud server is an open source, self hosted cloud style services platform. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Denial Of Service Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
6.5
EPSS
1.6%
CVE-2021-41256 Nov 30, 21:15 HIGH POC PATCH This Week

nextcloud news-android is an Android client for the Nextcloud news/feed reader app. Rated high severity (CVSS 7.1), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

Information Disclosure Google Nextcloud News
NVD GitHub
CVSS 3.1
7.1
EPSS
1.1%
CVE-2021-39222 Nov 15, 19:15 MEDIUM This Month

Nextcloud is an open-source, self-hosted productivity platform. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Nextcloud Talk
NVD GitHub
CVSS 3.1
6.1
EPSS
1.1%
CVE-2021-41179 Oct 25, 22:15 MEDIUM PATCH This Month

Nextcloud is an open-source, self-hosted productivity platform. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Server Nextcloud
NVD GitHub
CVSS 3.1
6.5
EPSS
1.2%
CVE-2021-41178 Oct 25, 22:15 MEDIUM PATCH This Month

Nextcloud is an open-source, self-hosted productivity platform. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

XSS Server Nextcloud
NVD GitHub
CVSS 3.1
6.5
EPSS
1.7%
CVE-2021-41177 Oct 25, 22:15 HIGH PATCH This Week

Nextcloud is an open-source, self-hosted productivity platform. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, low attack complexity.

PHP Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
8.1
EPSS
1.5%
CVE-2021-39225 Oct 25, 22:15 HIGH PATCH This Week

Nextcloud is an open-source, self-hosted productivity platform. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, low attack complexity.

Authentication Bypass Deck Nextcloud
NVD GitHub
CVSS 3.1
8.1
EPSS
1.3%
CVE-2021-39224 Oct 25, 22:15 MEDIUM PATCH This Month

Nextcloud is an open-source, self-hosted productivity platform. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Nextcloud Officeonline
NVD GitHub
CVSS 3.1
5.3
EPSS
0.8%
CVE-2021-39223 Oct 25, 22:15 MEDIUM PATCH This Month

Nextcloud is an open-source, self-hosted productivity platform. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Nextcloud Richdocuments
NVD GitHub
CVSS 3.1
5.3
EPSS
1.0%
CVE-2021-39221 Oct 25, 19:15 MEDIUM This Month

Nextcloud is an open-source, self-hosted productivity platform. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Nextcloud Contacts
NVD GitHub
CVSS 3.1
5.4
EPSS
0.5%
CVE-2021-39220 Oct 25, 19:15 LOW PATCH Monitor

Nextcloud is an open-source, self-hosted productivity platform The Nextcloud Mail application prior to versions 1.10.4 and 1.11.0 does by default not render images in emails to not leak the read. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Nextcloud Mail
NVD GitHub
CVSS 3.1
3.5
EPSS
0.8%
CVE-2021-32802 Sep 07, 22:15 CRITICAL Act Now

Nextcloud server is an open source, self hosted personal cloud. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
9.8
EPSS
2.6%
CVE-2021-32801 Sep 07, 22:15 MEDIUM This Month

Nextcloud server is an open source, self hosted personal cloud. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
5.5
EPSS
0.2%
CVE-2021-32800 Sep 07, 22:15 HIGH PATCH This Week

Nextcloud server is an open source, self hosted personal cloud. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, low attack complexity. This Missing Authentication for Critical Function vulnerability could allow attackers to access critical functionality without authentication.

Authentication Bypass Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
8.1
EPSS
1.8%
CVE-2021-37629 Sep 07, 21:15 MEDIUM This Month

Nextcloud Richdocuments is an open source collaborative office suite. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Microsoft Nextcloud Richdocuments
NVD GitHub
CVSS 3.1
5.3
EPSS
1.4%
CVE-2021-37628 Sep 07, 21:15 HIGH PATCH This Week

Nextcloud Richdocuments is an open source collaborative office suite. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Microsoft Nextcloud Richdocuments
NVD GitHub
CVSS 3.1
7.5
EPSS
2.1%
CVE-2021-32766 Sep 07, 21:15 MEDIUM PATCH This Month

Nextcloud Text is an open source plaintext editing application which ships with the nextcloud server. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
5.3
EPSS
1.3%
CVE-2021-37631 Sep 07, 20:15 MEDIUM PATCH This Month

Deck is an open source kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Authentication Bypass Deck Nextcloud
NVD GitHub
CVSS 3.1
6.5
EPSS
1.3%
CVE-2021-37630 Sep 07, 20:15 MEDIUM PATCH This Month

Nextcloud Circles is an open source social network built for the nextcloud ecosystem. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Authentication Bypass Nextcloud Circles
NVD GitHub
CVSS 3.1
6.5
EPSS
1.2%
CVE-2021-32782 Sep 07, 20:15 MEDIUM PATCH This Month

Nextcloud Circles is an open source social network built for the nextcloud ecosystem. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Nextcloud Circles
NVD GitHub
CVSS 3.1
5.4
EPSS
0.8%
CVE-2021-37617 Aug 18, 18:15 HIGH PATCH This Week

The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with a computer. Rated high severity (CVSS 7.3), this vulnerability is low attack complexity.

Information Disclosure Desktop Nextcloud
NVD GitHub
CVSS 3.1
7.3
EPSS
0.5%
CVE-2021-32728 Aug 18, 16:15 MEDIUM POC PATCH This Month

The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with a computer. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

Information Disclosure Debian Debian Linux Desktop Nextcloud
NVD GitHub
CVSS 3.1
6.5
EPSS
0.9%
CVE-2021-32748 Jul 27, 21:15 MEDIUM This Month

Nextcloud Richdocuments in an open source self hosted online office. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Microsoft Nextcloud Richdocuments
NVD GitHub
CVSS 3.1
4.3
EPSS
1.0%
CVE-2021-32741 Jul 12, 22:15 MEDIUM PATCH This Month

Nextcloud Server is a Nextcloud package that handles data storage. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
5.3
EPSS
1.3%
CVE-2021-32734 Jul 12, 22:15 MEDIUM PATCH This Month

Nextcloud Server is a Nextcloud package that handles data storage. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
5.3
EPSS
1.4%
CVE-2021-32733 Jul 12, 21:15 MEDIUM PATCH This Month

Nextcloud Text is a collaborative document editing application that uses Markdown. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
6.1
EPSS
1.1%
CVE-2021-32727 Jul 12, 21:15 HIGH This Week

Nextcloud Android Client is the Android client for Nextcloud. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Google Nextcloud
NVD GitHub
CVSS 3.1
7.5
EPSS
0.7%
CVE-2021-32726 Jul 12, 20:15 CRITICAL Act Now

Nextcloud Server is a Nextcloud package that handles data storage. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
9.8
EPSS
1.8%
CVE-2021-32725 Jul 12, 20:15 MEDIUM PATCH This Month

Nextcloud Server is a Nextcloud package that handles data storage. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
CVSS 3.1
5.3
EPSS
1.2%
CVE-2021-32707 Jul 12, 19:15 MEDIUM POC PATCH This Month

Nextcloud Mail is a mail app for Nextcloud. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

Information Disclosure Nextcloud Mail
NVD GitHub
CVSS 3.1
4.3
EPSS
1.1%
CVE-2021-32689 Jul 12, 19:15 MEDIUM PATCH This Month

Nextcloud Talk is a fully on-premises audio/video and chat communication service. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Nextcloud Talk
NVD GitHub
CVSS 3.1
6.5
EPSS
1.0%
CVE-2021-32705 Jul 12, 16:15 HIGH PATCH This Week

Nextcloud Server is a Nextcloud package that handles data storage. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Fedora Nextcloud Server Nextcloud Fedoraproject
NVD GitHub
CVSS 3.1
7.5
EPSS
1.7%
CVE-2021-32703 Jul 12, 16:15 MEDIUM PATCH This Month

Nextcloud Server is a Nextcloud package that handles data storage. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Fedora Nextcloud Server Nextcloud Fedoraproject
NVD GitHub
CVSS 3.1
5.3
EPSS
1.5%
EPSS 1% CVSS 6.5
MEDIUM POC PATCH This Month

Nextcloud is an Open Source private cloud software. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

Denial Of Service Nextcloud Server Nextcloud
NVD GitHub
EPSS 1% CVSS 7.5
HIGH PATCH This Week

Nextcloud server is a self hosted home cloud product. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Path Traversal vulnerability could allow attackers to access files and directories outside the intended path.

Path Traversal Nextcloud Server Nextcloud
NVD GitHub
EPSS 1% CVSS 5.3
MEDIUM POC This Month

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

SSRF Nextcloud Server Nextcloud
NVD GitHub
EPSS 1% CVSS 5.3
MEDIUM PATCH This Month

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Nextcloud Server Nextcloud
NVD GitHub
EPSS 0% CVSS 5.3
MEDIUM PATCH This Month

Nextcloud Mail is an email app for the Nextcloud home server platform. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Nextcloud Mail
NVD GitHub
EPSS 0% CVSS 5.3
MEDIUM This Month

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform, and Nextcloud Office is a document collaboration app for the same platform. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Microsoft Nextcloud Server +2
NVD GitHub
EPSS 1% CVSS 5.7
MEDIUM PATCH This Month

Nextcloud office/richdocuments is an office suit for the nextcloud server platform. Rated medium severity (CVSS 5.7), this vulnerability is remotely exploitable, low attack complexity.

Authentication Bypass Microsoft Nextcloud +1
NVD GitHub
EPSS 1% CVSS 4.3
MEDIUM POC PATCH This Month

Nextcloud mail is an email app for the nextcloud home server platform. Rated medium severity (CVSS 4.3), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

SSRF Nextcloud Mail
NVD GitHub
EPSS 1% CVSS 6.1
MEDIUM PATCH This Month

The Nextcloud Desktop Client is a tool to synchronize files from a Nextcloud Server with your computer. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Desktop Nextcloud
NVD GitHub
EPSS 0% CVSS 6.5
MEDIUM PATCH This Month

Nextcloud mail is an email app for the nextcloud home server platform. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Nextcloud Mail
NVD GitHub
EPSS 1% CVSS 4.3
MEDIUM PATCH This Month

Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity.

Authentication Bypass Deck Nextcloud
NVD GitHub
EPSS 1% CVSS 6.5
MEDIUM PATCH This Month

Nextcloud Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. This Uncontrolled Resource Consumption vulnerability could allow attackers to cause denial of service by exhausting system resources.

Denial Of Service Deck Nextcloud
NVD GitHub
EPSS 1% CVSS 3.5
LOW POC PATCH Monitor

Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

Authentication Bypass Deck Nextcloud
NVD GitHub
EPSS 1% CVSS 2.1
LOW POC PATCH Monitor

Talk-Android enables users to have video & audio calls through Nextcloud on Android. Rated low severity (CVSS 2.1), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

Authentication Bypass Google Nextcloud +1
NVD GitHub
EPSS 0% CVSS 8.8
HIGH PATCH This Week

Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Request Forgery (CSRF) vulnerability could allow attackers to trick authenticated users into performing unintended actions.

CSRF Microsoft Desktop +1
NVD GitHub
EPSS 1% CVSS 6.5
MEDIUM This Month

Nextcould Talk android is a video and audio conferencing app for Nextcloud. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Google Nextcloud +1
NVD GitHub
EPSS 1% CVSS 5.3
MEDIUM PATCH This Month

Nextcloud Server is an open source personal cloud server. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Nextcloud Server Nextcloud
NVD GitHub
EPSS 1% CVSS 2.7
LOW PATCH Monitor

Nextcloud Server is an open source personal cloud server. Rated low severity (CVSS 2.7), this vulnerability is remotely exploitable, low attack complexity. This Uncontrolled Resource Consumption vulnerability could allow attackers to cause denial of service by exhausting system resources.

Denial Of Service Nextcloud Server Nextcloud
NVD GitHub
EPSS 1% CVSS 5.3
MEDIUM PATCH This Month

Nextcloud Server is an open source personal cloud server. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Uncontrolled Resource Consumption vulnerability could allow attackers to cause denial of service by exhausting system resources.

Denial Of Service Nextcloud Server Nextcloud
NVD GitHub
EPSS 1% CVSS 6.1
MEDIUM POC PATCH This Month

Nexcloud desktop is the Desktop sync client for Nextcloud. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

XSS Desktop Nextcloud
NVD GitHub
EPSS 1% CVSS 5.4
MEDIUM POC PATCH This Month

Nexcloud desktop is the Desktop sync client for Nextcloud. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

XSS Desktop Nextcloud
NVD GitHub
EPSS 0% CVSS 5.5
MEDIUM PATCH This Month

Nextcould talk android is the android OS implementation of the nextcloud talk chat system. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Google Nextcloud +1
NVD GitHub VulDB
EPSS 1% CVSS 6.5
MEDIUM PATCH This Month

Nextcloud server is an open source personal cloud server. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Denial Of Service Fedora Nextcloud Server +3
NVD GitHub
EPSS 0% CVSS 4.3
MEDIUM PATCH This Month

user_oidc is an OpenID Connect user backend for Nextcloud. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Nextcloud Openid Connect User Backend
NVD GitHub
EPSS 1% CVSS 5.4
MEDIUM PATCH This Month

user_oidc is an OpenID Connect user backend for Nextcloud. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity.

XSS Apple Nextcloud +1
NVD GitHub
EPSS 0% CVSS 4.7
MEDIUM POC PATCH This Month

Nextcloud also ships a CLI utility called nextcloudcmd which is sometimes used for automated scripting and headless servers. Rated medium severity (CVSS 4.7). Public exploit code available.

Information Disclosure Desktop Nextcloud
NVD GitHub
EPSS 1% CVSS 5.4
MEDIUM POC PATCH This Month

Nexcloud desktop is the Desktop sync client for Nextcloud. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

XSS Desktop Nextcloud
NVD GitHub
EPSS 0% CVSS 7.8
HIGH PATCH This Week

The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. This Code Injection vulnerability could allow attackers to inject and execute arbitrary code within the application.

RCE Microsoft Code Injection +2
NVD GitHub VulDB
EPSS 0% CVSS 6.5
MEDIUM POC PATCH This Month

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

Information Disclosure Microsoft Nextcloud Server +2
NVD GitHub
EPSS 1% CVSS 4.3
MEDIUM PATCH This Month

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. This Uncontrolled Resource Consumption vulnerability could allow attackers to cause denial of service by exhausting system resources.

Denial Of Service Nextcloud Server Nextcloud +1
NVD GitHub
EPSS 1% CVSS 5.3
MEDIUM PATCH This Month

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Nextcloud Server Nextcloud +1
NVD GitHub
EPSS 1% CVSS 5.3
MEDIUM PATCH This Month

Nextcloud Talk is an open source chat, video & audio calls client for the Nextcloud platform. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Nextcloud Talk
NVD GitHub
EPSS 0% CVSS 5.5
MEDIUM PATCH This Month

Nextcloud android is the official Android client for the Nextcloud home server platform. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. This Path Traversal vulnerability could allow attackers to access files and directories outside the intended path.

Path Traversal Google Nextcloud
NVD GitHub
EPSS 1% CVSS 5.3
MEDIUM PATCH This Month

Nextcloud server is an open source personal cloud platform. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Server-Side Request Forgery (SSRF) vulnerability could allow attackers to make the server perform requests to unintended internal or external resources.

SSRF Nextcloud Server Nextcloud +1
NVD GitHub
EPSS 0% CVSS 4.3
MEDIUM PATCH This Month

Nextcloud files access control is a nextcloud app to manage access control for files. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Nextcloud Files Access Control
NVD GitHub
EPSS 1% CVSS 7.5
HIGH PATCH This Week

Nextcloud server is an open source personal cloud product. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Nextcloud Server Nextcloud +1
NVD GitHub
EPSS 0% CVSS 2.7
LOW PATCH Monitor

Nextcloud Password Policy is an app that enables a Nextcloud server admin to define certain rules for passwords. Rated low severity (CVSS 2.7), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Nextcloud Password Policy
NVD GitHub
EPSS 1% CVSS 5.3
MEDIUM PATCH This Month

Nextcloud Talk is a video and audio conferencing app for Nextcloud. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Nextcloud Talk
NVD GitHub
EPSS 1% CVSS 4.9
MEDIUM PATCH This Month

Nextcloud Mail is an email application for the nextcloud personal cloud product. Rated medium severity (CVSS 4.9), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Nextcloud Mail
NVD GitHub
EPSS 1% CVSS 9.8
CRITICAL Act Now

Nextcloud Mail is an email application for the nextcloud personal cloud product. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP SSRF Nextcloud +1
NVD GitHub
EPSS 1% CVSS 2.7
LOW PATCH Monitor

Nextcloud server is an open source personal cloud solution. Rated low severity (CVSS 2.7), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
EPSS 1% CVSS 5.3
MEDIUM PATCH This Month

Nextcloud server is an open source personal cloud solution. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Allocation of Resources Without Limits vulnerability could allow attackers to exhaust system resources through uncontrolled allocation.

PHP Denial Of Service Nextcloud Server +1
NVD GitHub
EPSS 1% CVSS 4.3
MEDIUM POC PATCH This Month

Nextcloud mail is a Mail app for the Nextcloud home server product. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

Authentication Bypass Nextcloud Nextcloud Mail
NVD GitHub
EPSS 2% CVSS 3.5
LOW POC PATCH Monitor

Nextcloud server is an open source personal cloud server. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

Command Injection Nextcloud Server Nextcloud
NVD GitHub
EPSS 1% CVSS 6.5
MEDIUM PATCH This Month

richdocuments is the repository for NextCloud Collabra, the app for Nextcloud Office collaboration. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Microsoft Nextcloud +1
NVD GitHub
EPSS 1% CVSS 4.3
MEDIUM PATCH This Month

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
EPSS 1% CVSS 4.3
MEDIUM PATCH This Month

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
EPSS 0% CVSS 3.3
LOW POC PATCH Monitor

Nextcloud Android is the Android client for Nextcloud, a self-hosted productivity platform. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity. Public exploit code available.

Authentication Bypass Google Nextcloud
NVD GitHub
EPSS 1% CVSS 4.3
MEDIUM POC PATCH This Month

Nextcloud Deck is a Kanban-style project & personal management tool for Nextcloud. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

Authentication Bypass Deck Nextcloud
NVD GitHub
EPSS 1% CVSS 4.3
MEDIUM POC PATCH This Month

Nextcloud Deck is a Kanban-style project & personal management tool for Nextcloud, similar to Trello. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

Information Disclosure Deck Nextcloud
NVD GitHub
EPSS 1% CVSS 4.3
MEDIUM POC PATCH This Month

Nextcloud Talk is a video and audio conferencing app for Nextcloud. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

Information Disclosure Nextcloud Talk
NVD GitHub
EPSS 1% CVSS 4.3
MEDIUM POC This Month

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
EPSS 1% CVSS 4.3
MEDIUM PATCH This Month

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity.

Code Injection Nextcloud Server Nextcloud
NVD GitHub
EPSS 1% CVSS 6.1
MEDIUM POC PATCH This Month

Nextcloud Talk is a video and audio conferencing app for Nextcloud, a self-hosted productivity platform. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Open Redirect Nextcloud Talk
NVD GitHub
EPSS 0% CVSS 3.8
LOW Monitor

Nextcloud Android app is the Android client for Nextcloud, a self-hosted productivity platform. Rated low severity (CVSS 3.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Google Nextcloud
NVD GitHub
EPSS 0% CVSS 2.4
LOW POC PATCH Monitor

Nextcloud Android app is the Android client for Nextcloud, a self-hosted productivity platform. Rated low severity (CVSS 2.4), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

Authentication Bypass Google Nextcloud
NVD GitHub
EPSS 32% CVSS 9.8
CRITICAL PATCH Act Now

Nextcloud Calendar is a calendar application for the nextcloud framework. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Command Injection Calendar Nextcloud
NVD GitHub
EPSS 2% CVSS 6.5
MEDIUM POC PATCH This Month

Nextcloud server is an open source, self hosted cloud style services platform. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Denial Of Service Nextcloud Server Nextcloud
NVD GitHub
EPSS 1% CVSS 7.1
HIGH POC PATCH This Week

nextcloud news-android is an Android client for the Nextcloud news/feed reader app. Rated high severity (CVSS 7.1), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

Information Disclosure Google Nextcloud +1
NVD GitHub
EPSS 1% CVSS 6.1
MEDIUM This Month

Nextcloud is an open-source, self-hosted productivity platform. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Nextcloud Talk
NVD GitHub
EPSS 1% CVSS 6.5
MEDIUM PATCH This Month

Nextcloud is an open-source, self-hosted productivity platform. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Server Nextcloud
NVD GitHub
EPSS 2% CVSS 6.5
MEDIUM PATCH This Month

Nextcloud is an open-source, self-hosted productivity platform. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

XSS Server Nextcloud
NVD GitHub
EPSS 2% CVSS 8.1
HIGH PATCH This Week

Nextcloud is an open-source, self-hosted productivity platform. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, low attack complexity.

PHP Information Disclosure Nextcloud Server +1
NVD GitHub
EPSS 1% CVSS 8.1
HIGH PATCH This Week

Nextcloud is an open-source, self-hosted productivity platform. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, low attack complexity.

Authentication Bypass Deck Nextcloud
NVD GitHub
EPSS 1% CVSS 5.3
MEDIUM PATCH This Month

Nextcloud is an open-source, self-hosted productivity platform. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Nextcloud Officeonline
NVD GitHub
EPSS 1% CVSS 5.3
MEDIUM PATCH This Month

Nextcloud is an open-source, self-hosted productivity platform. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Nextcloud Richdocuments
NVD GitHub
EPSS 1% CVSS 5.4
MEDIUM This Month

Nextcloud is an open-source, self-hosted productivity platform. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Nextcloud Contacts
NVD GitHub
EPSS 1% CVSS 3.5
LOW PATCH Monitor

Nextcloud is an open-source, self-hosted productivity platform The Nextcloud Mail application prior to versions 1.10.4 and 1.11.0 does by default not render images in emails to not leak the read. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Nextcloud Mail
NVD GitHub
EPSS 3% CVSS 9.8
CRITICAL Act Now

Nextcloud server is an open source, self hosted personal cloud. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP Information Disclosure Nextcloud Server +1
NVD GitHub
EPSS 0% CVSS 5.5
MEDIUM This Month

Nextcloud server is an open source, self hosted personal cloud. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
EPSS 2% CVSS 8.1
HIGH PATCH This Week

Nextcloud server is an open source, self hosted personal cloud. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, low attack complexity. This Missing Authentication for Critical Function vulnerability could allow attackers to access critical functionality without authentication.

Authentication Bypass Nextcloud Server Nextcloud
NVD GitHub
EPSS 1% CVSS 5.3
MEDIUM This Month

Nextcloud Richdocuments is an open source collaborative office suite. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Microsoft Nextcloud +1
NVD GitHub
EPSS 2% CVSS 7.5
HIGH PATCH This Week

Nextcloud Richdocuments is an open source collaborative office suite. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Microsoft Nextcloud +1
NVD GitHub
EPSS 1% CVSS 5.3
MEDIUM PATCH This Month

Nextcloud Text is an open source plaintext editing application which ships with the nextcloud server. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
EPSS 1% CVSS 6.5
MEDIUM PATCH This Month

Deck is an open source kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Authentication Bypass Deck Nextcloud
NVD GitHub
EPSS 1% CVSS 6.5
MEDIUM PATCH This Month

Nextcloud Circles is an open source social network built for the nextcloud ecosystem. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Authentication Bypass Nextcloud Circles
NVD GitHub
EPSS 1% CVSS 5.4
MEDIUM PATCH This Month

Nextcloud Circles is an open source social network built for the nextcloud ecosystem. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Nextcloud Circles
NVD GitHub
EPSS 0% CVSS 7.3
HIGH PATCH This Week

The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with a computer. Rated high severity (CVSS 7.3), this vulnerability is low attack complexity.

Information Disclosure Desktop Nextcloud
NVD GitHub
EPSS 1% CVSS 6.5
MEDIUM POC PATCH This Month

The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with a computer. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

Information Disclosure Debian Debian Linux +2
NVD GitHub
EPSS 1% CVSS 4.3
MEDIUM This Month

Nextcloud Richdocuments in an open source self hosted online office. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Microsoft Nextcloud +1
NVD GitHub
EPSS 1% CVSS 5.3
MEDIUM PATCH This Month

Nextcloud Server is a Nextcloud package that handles data storage. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
EPSS 1% CVSS 5.3
MEDIUM PATCH This Month

Nextcloud Server is a Nextcloud package that handles data storage. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
EPSS 1% CVSS 6.1
MEDIUM PATCH This Month

Nextcloud Text is a collaborative document editing application that uses Markdown. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Nextcloud Server Nextcloud
NVD GitHub
EPSS 1% CVSS 7.5
HIGH This Week

Nextcloud Android Client is the Android client for Nextcloud. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Google Nextcloud
NVD GitHub
EPSS 2% CVSS 9.8
CRITICAL Act Now

Nextcloud Server is a Nextcloud package that handles data storage. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
EPSS 1% CVSS 5.3
MEDIUM PATCH This Month

Nextcloud Server is a Nextcloud package that handles data storage. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Nextcloud Server Nextcloud
NVD GitHub
EPSS 1% CVSS 4.3
MEDIUM POC PATCH This Month

Nextcloud Mail is a mail app for Nextcloud. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

Information Disclosure Nextcloud Mail
NVD GitHub
EPSS 1% CVSS 6.5
MEDIUM PATCH This Month

Nextcloud Talk is a fully on-premises audio/video and chat communication service. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Nextcloud Talk
NVD GitHub
EPSS 2% CVSS 7.5
HIGH PATCH This Week

Nextcloud Server is a Nextcloud package that handles data storage. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Fedora Nextcloud Server +2
NVD GitHub
EPSS 2% CVSS 5.3
MEDIUM PATCH This Month

Nextcloud Server is a Nextcloud package that handles data storage. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Fedora Nextcloud Server +2
NVD GitHub
Prev Page 3 of 5 Next

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy