NE
Product
nextcloud/server
189
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 42Medium 125Low 15
Watch
Add nextcloud/server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-39961 | 4.3 | Aug 10 | Nextcloud Server provides data storage for Nextcloud, an open source cloud platform Affected: 25.0.0 before 25.0.9; 25.0.0 before 25.0.9; 26.0.0 before 26.0.4; 26.0.0 before 26.0.4; 27.0.0; 27.0.0 |
| CVE-2023-28834 | 4.3 | Apr 3 | Nextcloud Server is an open source personal cloud server Affected: 23.0.0 before 23.0.14; 24.0.0 before 24.0.10; 24.0.0 before 24.0.10; 25.0.0 before 25.0.4; 25.0.0 before 25.0.4 |
| CVE-2022-39330 | 4.3 | Oct 27 | Database resource exhaustion for logged-in users via sharee recommendations with circles Affected: before 23.0.10; 24.0.0 before 24.0.6 |
| CVE-2022-29243 | 4.3 | May 31 | Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform Affected: before 22.2.7; after 23.0.0 before 23.0.4 |
| CVE-2022-29163 | 4.3 | May 20 | Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform Affected: before 22.2.6; 23.0.0 before 23.0.3 |
| CVE-2022-24889 | 4.3 | Apr 27 | Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform Affected: before 21.0.8; 22.0.0 before 22.2.4; 23.0.0 before 23.0.1 |
| CVE-2022-24888 | 4.3 | Apr 27 | Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform Affected: before 20.0.14.4; 21.0.0 before 21.0.8; 22.0.0 before 22.2.4; 23.0.0 before 23.0.1 |
| CVE-2021-41241 | 4.3 | Mar 8 | Nextcloud server is a self hosted system designed to provide cloud style services Affected: before 20.0.14; 21.0.0 before 21.0.6; 22.2.0 |
| CVE-2021-32657 | 4.3 | Jun 1 | Nextcloud Server is a Nextcloud package that handles data storage Affected: before 19.0.11; 20.0.0 before 20.0.10; 21.0.0 before 21.0.2 |
| CVE-2020-8122 | 4.3 | Feb 4 | A missing check in Nextcloud Server 14.0.3 could give recipient the possibility to extend the expiration date of a share they received Affected: before 12.0.13; 13.0.0 before 13.0.8; 14.0.0 before 14.0.4; 14.0.5 before 15.0.0 |
| CVE-2020-8119 | 4.3 | Feb 4 | Improper authorization in Nextcloud server 17.0.0 causes leaking of previews and files when a file-drop share link is opened via the gallery app Affected: before 15.0.13; 16.0.0 before 16.0.6; 17.0.0 before 17.0.1 |
| CVE-2020-8117 | 4.3 | Feb 4 | Improper preservation of permissions in Nextcloud Server 14.0.3 causes the event details to be leaked when sharing a non-public event Affected: before 12.0.13; 13.0.0 before 13.0.8; 14.0.0 before 14.0.4 |
| CVE-2019-15616 | 4.3 | Feb 4 | Dangling remote share attempts in Nextcloud 16 allow a DNS pollution when running long Affected: before 17.0.0 |
| CVE-2019-5449 | 4.3 | Jul 30 | A missing check in the Nextcloud Server prior to version 15.0.1 causes leaking of calendar event names when adding or modifying confidential or private events Affected: before 15.0.1 |
| CVE-2018-3762 | 4.3 | Jul 5 | Nextcloud Server before 12.0.8 and 13.0.3 suffers from improper checks of dropped permissions for incoming shares allowing a user to still request previews for files it should not… Affected: before 12.0.8; 13.0.0 before 13.0.3 |
| CVE-2017-0894 | 4.3 | May 8 | Nextcloud Server before 11.0.3 is vulnerable to disclosure of valid share tokens for public calendars due to a logical error Affected: before 11.0.3 |
| CVE-2017-0888 | 4.3 | Apr 5 | Nextcloud Server before 9.0.55 and 10.0.2 suffers from a Content-Spoofing vulnerability in the "files" app Affected: 10.0.2 |
| CVE-2017-0887 | 4.3 | Apr 5 | Nextcloud Server before 9.0.55 and 10.0.2 suffers from a bypass in the quota limitation Affected: before 9.0.55; 10.0.0 before 10.0.2 |
| CVE-2017-0885 | 4.3 | Apr 5 | Nextcloud Server before 9.0.55 and 10.0.2 suffers from a error message disclosing existence of file in write-only share Affected: before 9.0.55; 10.0.0 before 10.0.2 |
| CVE-2017-0884 | 4.3 | Apr 5 | Nextcloud Server before 9.0.55 and 10.0.2 suffers from a creation of folders in read-only folders despite lacking permissions issue Affected: before 9.0.55; 10.0.0 before 10.0.2 |
| CVE-2016-9464 | 4.3 | Mar 28 | Nextcloud Server before 9.0.54 and 10.0.0 suffers from an improper authorization check on removing shares Affected: before 9.0.54; 10.0 |
| CVE-2016-9462 | 4.3 | Mar 28 | Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are not properly verifying restore privileges when restoring a file Affected: before 9.0.52 |
| CVE-2016-9461 | 4.3 | Mar 28 | Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are not properly verifying edit check permissions on WebDAV copy actions Affected: before 9.0.52 |
| CVE-2020-8150 | 4.1 | Nov 9 | A cryptographic issue in Nextcloud Server 19.0.1 allowed an attacker to downgrade the encryption scheme and break the integrity of encrypted files Affected: before 19.0.2 |
| CVE-2024-22403 | 3.7 | Jan 18 | Nextcloud server is a self hosted personal cloud system Affected: before 28.0.0 |
| CVE-2024-52514 | 3.5 | Nov 15 | Nextcloud Server is a self hosted personal cloud system Affected: 21.0.0 before 21.0.9.18; 22.0.0 before 22.2.10.23; 23.0.0 before 23.0.12.18; 24.0.0 before 24.0.12.14; 25.0.0 before 25.0.13.9; 26.0.0 before 26.0.13.3; +4 more |
| CVE-2024-37887 | 3.5 | Jun 14 | Nextcloud Server is a self hosted personal cloud system Affected: 27.0.0 before 27.1.10; 27.0.0 before 27.1.10; 28.0.0 through 28.0.6; 28.0.0 before 28.0.6; 29.0.0; 29.0.0 |
| CVE-2024-37314 | 3.5 | Jun 14 | Nextcloud Photos is a photo management app Affected: 25.0.0 before 25.0.7; 26.0.0 before 26.0.2 |
| CVE-2022-31014 | 3.5 | Jul 5 | Nextcloud server is an open source personal cloud server Affected: before 19.0.13.7; before 22.2.8; 20.0.0 before 20.0.14.6; 21.0.0 before 21.0.9.5; 23.0.0 before 23.0.5; 24.0.0; +6 more |
| CVE-2021-32655 | 3.5 | Jun 1 | Nextcloud Server is a Nextcloud package that handles data storage Affected: before 19.0.11; 20.0.0 before 20.0.10; 21.0.0 before 21.0.2 |
| CVE-2017-0895 | 3.5 | May 8 | Nextcloud Server before 10.0.4 and 11.0.2 are vulnerable to disclosure of calendar and addressbook names to other logged-in users Affected: 10.0.0 before 10.0.4; 11.0.0 before 11.0.2 |
| CVE-2017-0892 | 3.5 | May 8 | Nextcloud Server before 11.0.3 is vulnerable to an improper session handling allowed an application specific password without permission to the files access to the users file Affected: before 11.0.3 |
| CVE-2021-32680 | 3.3 | Jul 12 | Nextcloud Server is a Nextcloud package that handles data storage Affected: before 19.0.13; 20.0.0 before 20.0.11; 21.0.0 before 21.0.3 |
| CVE-2018-16463 | 3.1 | Oct 30 | A bug causing session fixation in Nextcloud Server prior to 14.0.0, 13.0.3 and 12.0.8 could potentially allow an attacker to obtain access to password protected shares Affected: before 12.0.8; 13.0.0 before 13.0.3; 14.0.0; 14.0.0; 14.0.0; 14.0.0; +2 more |
| CVE-2023-48303 | 2.7 | Nov 21 | Nextcloud Server provides data storage for Nextcloud, an open source cloud platform Affected: 25.0.0 before 25.0.11; 25.0.0 before 25.0.11; 26.0.0 before 26.0.6; 26.0.0 before 26.0.6; 27.0.0 before 27.1.0; 27.0.0 before 27.1.0 |
| CVE-2022-41969 | 2.7 | Dec 1 | Nextcloud Server is an open source personal cloud server Affected: 23.0.0 before 23.0.11; 23.0.0 before 23.0.11; 24.0.0 before 24.0.7; 24.0.0 before 24.0.7 |
| CVE-2022-31120 | 2.7 | Aug 4 | Federated share accepting/declining is not logged in audit log in Nextcloud Server Affected: before 22.2.7; 23.0.0 before 23.0.4 |
| CVE-2021-32653 | 2.7 | Jun 1 | Nextcloud Server is a Nextcloud package that handles data storage Affected: before 19.0.11; 20.0.0 before 20.0.10; 21.0.0 before 21.0.2 |
| CVE-2020-8173 | 2.2 | Nov 2 | A too small set of random characters being used for encryption in Nextcloud Server 18.0.4 allowed decryption in shorter time than intended Affected: before 17.0.7; 18.0.0 before 18.0.5 |