Vulnerabilities > Nextcloud > Desktop

DATE CVE VULNERABILITY TITLE RISK
2020-08-10 CVE-2020-8224 Code Injection vulnerability in Nextcloud Desktop
A code injection in Nextcloud Desktop Client 2.6.4 allowed to load arbitrary code when placing a malicious OpenSSL config into a fixed directory.
local
low complexity
nextcloud CWE-94
7.8
7.8
2020-03-20 CVE-2020-8140 Code Injection vulnerability in Nextcloud Desktop
A code injection in Nextcloud Desktop Client 2.6.2 for macOS allowed to load arbitrary code when starting the client with DYLD_INSERT_LIBRARIES set in the environment.
local
low complexity
nextcloud CWE-94
6.7
6.7