CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 02/11/2020 |
| CVE-2020-8235 | 보통4.3 | Missing access control in Nextcloud Deck 1.0.4 caused an insecure direct object reference allowing an attacker to view all attachments. | 05/10/2020 |
| CVE-2020-8228 | 보통5.3 | A missing rate limit in the Preferred Providers app 1.7.0 allowed an attacker to set the password an uncontrolled amount of times. | 05/10/2020 |
| CVE-2020-8223 | 보통6.5 | A logic error in Nextcloud Server 19.0.0 caused a privilege escalation allowing malicious users to reshare with higher permissions than they got assigned themselves. | 05/10/2020 |
| CVE-2020-8182 | 높음8.0 | Improper access control in Nextcloud Deck 0.8.0 allowed an attacker to reshare boards shared with them with more permissions than they had themselves. | 05/10/2020 |
| CVE-2020-8225 | 높음7.5 | A cleartext storage of sensitive information in Nextcloud Desktop Client 2.6.4 gave away information about used proxies and their authentication credentials. | 18/09/2020 |
| CVE-2020-8227 | 보통6.8 | Missing sanitization of a server response in Nextcloud Desktop Client 2.6.4 for Linux allowed a malicious Nextcloud Server to store files outside of the dedicated sync directory. | 21/08/2020 |
| CVE-2020-8189 | 보통5.4 | A cross-site scripting error in Nextcloud Desktop client 2.6.4 allowed to present any html (including local links) when responding with invalid data on the login attempt. | 21/08/2020 |
| CVE-2020-8230 | 보통5.5 | A memory corruption vulnerability exists in NextCloud Desktop Client v2.6.4 where missing ASLR and DEP protections in for windows allowed to corrupt memory. | 17/08/2020 |
| CVE-2020-8229 | 보통5.5 | A memory leak in the OCUtil.dll library used by Nextcloud Desktop Client 2.6.4 can lead to a DoS against the host system. | 10/08/2020 |
| CVE-2020-8224 | 높음7.8 | A code injection in Nextcloud Desktop Client 2.6.4 allowed to load arbitrary code when placing a malicious OpenSSL config into a fixed directory. | 10/08/2020 |
| CVE-2020-8202 | 보통5.3 | Improper check of inputs in Nextcloud Preferred Providers app v1.6.0 allowed to perform a denial of service attack when using a very long password. | 30/07/2020 |
| CVE-2020-8181 | 보통4.3 | A missing file type check in Nextcloud Contacts 3.2.0 allowed a malicious user to upload any file as avatars. | 10/07/2020 |
| CVE-2020-8179 | 보통4.1 | Improper access control in Nextcloud Deck 1.0.0 allowed an attacker to inject tasks into other users decks. | 02/07/2020 |
| CVE-2020-8180 | 심각9.9 | A too lax check in Nextcloud Talk 6.0.4, 7.0.2 and 8.0.7 allowed a code injection when a not correctly sanitized talk command was added by an administrator. | 08/06/2020 |
| CVE-2020-8156 | 높음7.0 | A missing verification of the TLS host in Nextcloud Mail 1.1.3 allowed a man in the middle attack. | 12/05/2020 |
| CVE-2020-8155 | 보통5.4 | An outdated 3rd party library in the Files PDF viewer for Nextcloud Server 18.0.2 caused a Cross-site scripting vulnerability when opening a malicious PDF. | 12/05/2020 |