Nextcloud Nextcloud Server vulnerabilities

CVEs per yearBy the year they were published

1. 20182
2. 201813

Newest CVEs

• CVE-2018-3762

  Nextcloud Server before 12.0.8 and 13.0.3 suffers from improper checks of dropped permissions for incoming shares allowing a user to still request previews for…

  Nextcloud · Nextcloud Server

  Medium4.3
• CVE-2018-3761

  Nextcloud Server before 12.0.8 and 13.0.3 suffer from improper authentication on the OAuth2 token endpoint. Missing checks potentially allowed handing out new…

  Nextcloud · Nextcloud Server

  High8.1
• CVE-2017-0936

  Nextcloud Server before 11.0.7 and 12.0.5 suffers from an Authorization Bypass Through User-Controlled Key vulnerability. A missing ownership check allowed…

  Nextcloud · Nextcloud Server

  Medium5.7
• CVE-2017-0895

  Nextcloud Server before 10.0.4 and 11.0.2 are vulnerable to disclosure of calendar and addressbook names to other logged-in users. Note that no actual content…

  Nextcloud · Nextcloud Server

  Low3.5
• CVE-2017-0894

  Nextcloud Server before 11.0.3 is vulnerable to disclosure of valid share tokens for public calendars due to a logical error. Thus granting an attacker…

  Nextcloud · Nextcloud Server

  Medium4.3
• CVE-2017-0893

  Nextcloud Server before 9.0.58 and 10.0.5 and 11.0.3 are shipping a vulnerable JavaScript library for sanitizing untrusted user-input which suffered from a XSS…

  Nextcloud · Nextcloud Server

  Medium5.4
• CVE-2017-0892

  Nextcloud Server before 11.0.3 is vulnerable to an improper session handling allowed an application specific password without permission to the files access to…

  Nextcloud · Nextcloud Server

  Low3.5
• CVE-2017-0891

  Nextcloud Server before 9.0.58 and 10.0.5 and 11.0.3 are vulnerable to an inadequate escaping of error messages leading to XSS vulnerabilities in multiple…

  Nextcloud · Nextcloud Server

  Medium5.4
• CVE-2017-0890

  Nextcloud Server before 11.0.3 is vulnerable to an inadequate escaping leading to a XSS vulnerability in the search module. To be exploitable a user has to…

  Nextcloud · Nextcloud Server

  Medium5.4
• CVE-2017-0888

  Nextcloud Server before 9.0.55 and 10.0.2 suffers from a Content-Spoofing vulnerability in the "files" app. The top navigation bar displayed in the files list…

  Nextcloud · Nextcloud Server

  Medium4.3