DE
Product
Desktop
27
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 8Medium 17Low 1
Watch
Add Desktop to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-46958 | 9.1 | Sep 16 | In Nextcloud Desktop Client 3.13.1 through 3.13.3 on Linux, synchronized files (between the server and client) may become world writable or world readable Affected: 3.13.1 before 3.13.4 |
| CVE-2023-22472 | 8.8 | Jan 9 | Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud Affected: 3.6.1 |
| CVE-2021-22879 | 8.8 | Apr 14 | Nextcloud Desktop Client prior to 3.1.3 is vulnerable to resource injection by way of missing validation of URLs, allowing a malicious server to execute remote commands Affected: before 3.1.3 |
| CVE-2024-37885 | 7.8 | Jun 14 | The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer Affected: before 3.12.0 |
| CVE-2022-41882 | 7.8 | Nov 11 | The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer Affected: 3.6.0 |
| CVE-2020-8224 | 7.8 | Aug 10 | A code injection in Nextcloud Desktop Client 2.6.4 allowed to load arbitrary code when placing a malicious OpenSSL config into a fixed directory Affected: before 2.6.5 |
| CVE-2024-52510 | 7.5 | Nov 15 | The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer Affected: 3.0.0 before 3.14.2 |
| CVE-2020-8225 | 7.5 | Sep 18 | A cleartext storage of sensitive information in Nextcloud Desktop Client 2.6.4 gave away information about used proxies and their authentication credentials Affected: before 2.6.5 |
| CVE-2021-37617 | 7.3 | Aug 18 | The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with a computer Affected: 3.0.3 before 3.3.0 |
| CVE-2020-8227 | 6.8 | Aug 21 | Missing sanitization of a server response in Nextcloud Desktop Client 2.6.4 for Linux allowed a malicious Nextcloud Server to store files outside of the dedicated sync directory Affected: before 2.6.5 |
| CVE-2020-8140 | 6.7 | Mar 20 | A code injection in Nextcloud Desktop Client 2.6.2 for macOS allowed to load arbitrary code when starting the client with DYLD_INSERT_LIBRARIES set in the environment Affected: before 2.6.3 |
| CVE-2023-29000 | 6.5 | Apr 4 | The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server Affected: 3.0.0 before 3.7.0 |
| CVE-2023-28997 | 6.5 | Apr 4 | The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server Affected: 3.0.0 before 3.6.5 |
| CVE-2021-32728 | 6.5 | Aug 18 | The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with a computer Affected: before 3.3.0 |
| CVE-2023-28999 | 6.4 | Apr 4 | Nextcloud is an open-source productivity platform Affected: 3.0.0 before 3.8.0 |
| CVE-2025-47792 | 6.1 | May 16 | Nextcloud Desktop is the desktop sync client for Nextcloud Affected: before 3.15.0 |
| CVE-2023-28998 | 6.1 | Apr 4 | The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server Affected: 3.0.0 before 3.6.5 |
| CVE-2023-23942 | 6.1 | Feb 6 | The Nextcloud Desktop Client is a tool to synchronize files from a Nextcloud Server with your computer Affected: before 3.6.3 |
| CVE-2022-39333 | 6.1 | Nov 25 | Nexcloud desktop is the Desktop sync client for Nextcloud Affected: before 3.6.1 |
| CVE-2021-22895 | 5.9 | Jun 11 | Nextcloud Desktop Client before 3.3.1 is vulnerable to improper certificate validation due to lack of SSL certificate verification when using the "Register with a Provider" flow Affected: before 3.1.3 |
| CVE-2020-8230 | 5.5 | Aug 17 | A memory corruption vulnerability exists in NextCloud Desktop Client v2.6.4 where missing ASLR and DEP protections in for windows allowed to corrupt memory Affected: before 2.6.5 |
| CVE-2020-8229 | 5.5 | Aug 10 | A memory leak in the OCUtil.dll library used by Nextcloud Desktop Client 2.6.4 can lead to a DoS against the host system Affected: before 2.6.5 |
| CVE-2022-39332 | 5.4 | Nov 25 | Nexcloud desktop is the Desktop sync client for Nextcloud Affected: before 3.6.1 |
| CVE-2022-39331 | 5.4 | Nov 25 | Nexcloud desktop is the Desktop sync client for Nextcloud Affected: before 3.6.1 |
| CVE-2020-8189 | 5.4 | Aug 21 | A cross-site scripting error in Nextcloud Desktop client 2.6.4 allowed to present any html (including local links) when responding with invalid data on the login attempt Affected: before 2.6.5 |
| CVE-2022-39334 | 4.7 | Nov 25 | Nextcloud also ships a CLI utility called nextcloudcmd which is sometimes used for automated scripting and headless servers Affected: before 3.6.1 |
| CVE-2025-66549 | 2.7 | Dec 5 | Nextcloud Desktop is the desktop sync client for Nextcloud Affected: 3.0.0 before 3.16.5 |
Showing 27