DE
Product
Desktop
27
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 8Medium 17Low 1
Watch
Add Desktop to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-8227 | 6.8 | Aug 21 | Missing sanitization of a server response in Nextcloud Desktop Client 2.6.4 for Linux allowed a malicious Nextcloud Server to store files outside of the dedicated sync directory Affected: before 2.6.5 |
| CVE-2020-8140 | 6.7 | Mar 20 | A code injection in Nextcloud Desktop Client 2.6.2 for macOS allowed to load arbitrary code when starting the client with DYLD_INSERT_LIBRARIES set in the environment Affected: before 2.6.3 |
| CVE-2023-29000 | 6.5 | Apr 4 | The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server Affected: 3.0.0 before 3.7.0 |
| CVE-2023-28997 | 6.5 | Apr 4 | The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server Affected: 3.0.0 before 3.6.5 |
| CVE-2021-32728 | 6.5 | Aug 18 | The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with a computer Affected: before 3.3.0 |
| CVE-2023-28999 | 6.4 | Apr 4 | Nextcloud is an open-source productivity platform Affected: 3.0.0 before 3.8.0 |
| CVE-2025-47792 | 6.1 | May 16 | Nextcloud Desktop is the desktop sync client for Nextcloud Affected: before 3.15.0 |
| CVE-2023-28998 | 6.1 | Apr 4 | The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server Affected: 3.0.0 before 3.6.5 |
| CVE-2023-23942 | 6.1 | Feb 6 | The Nextcloud Desktop Client is a tool to synchronize files from a Nextcloud Server with your computer Affected: before 3.6.3 |
| CVE-2022-39333 | 6.1 | Nov 25 | Nexcloud desktop is the Desktop sync client for Nextcloud Affected: before 3.6.1 |
| CVE-2021-22895 | 5.9 | Jun 11 | Nextcloud Desktop Client before 3.3.1 is vulnerable to improper certificate validation due to lack of SSL certificate verification when using the "Register with a Provider" flow Affected: before 3.1.3 |
| CVE-2020-8230 | 5.5 | Aug 17 | A memory corruption vulnerability exists in NextCloud Desktop Client v2.6.4 where missing ASLR and DEP protections in for windows allowed to corrupt memory Affected: before 2.6.5 |
| CVE-2020-8229 | 5.5 | Aug 10 | A memory leak in the OCUtil.dll library used by Nextcloud Desktop Client 2.6.4 can lead to a DoS against the host system Affected: before 2.6.5 |
| CVE-2022-39332 | 5.4 | Nov 25 | Nexcloud desktop is the Desktop sync client for Nextcloud Affected: before 3.6.1 |
| CVE-2022-39331 | 5.4 | Nov 25 | Nexcloud desktop is the Desktop sync client for Nextcloud Affected: before 3.6.1 |
| CVE-2020-8189 | 5.4 | Aug 21 | A cross-site scripting error in Nextcloud Desktop client 2.6.4 allowed to present any html (including local links) when responding with invalid data on the login attempt Affected: before 2.6.5 |
| CVE-2022-39334 | 4.7 | Nov 25 | Nextcloud also ships a CLI utility called nextcloudcmd which is sometimes used for automated scripting and headless servers Affected: before 3.6.1 |
Showing 17