Vulnerabilities > Nextcloud > High

DATE CVE VULNERABILITY TITLE RISK
2023-03-27 CVE-2023-25817 Incorrect Permission Assignment for Critical Resource vulnerability in Nextcloud Server
Nextcloud server is an open source, personal cloud implementation.
network
low complexity
nextcloud CWE-732
8.1
2023-03-27 CVE-2023-25818 Improper Restriction of Excessive Authentication Attempts vulnerability in Nextcloud Server
Nextcloud server is an open source, personal cloud implementation.
network
low complexity
nextcloud CWE-307
7.1
2023-03-22 CVE-2023-25820 Unspecified vulnerability in Nextcloud Server
Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform, and Nextcloud Enterprise Server is the enterprise version of the file server software.
local
low complexity
nextcloud
7.8
2023-02-25 CVE-2023-25821 Unspecified vulnerability in Nextcloud Server
Nextcloud is an Open Source private cloud software.
network
low complexity
nextcloud
7.5
2023-02-22 CVE-2023-25579 Path Traversal vulnerability in Nextcloud Server
Nextcloud server is a self hosted home cloud product.
network
low complexity
nextcloud CWE-22
7.5
2023-01-09 CVE-2023-22472 Cross-Site Request Forgery (CSRF) vulnerability in Nextcloud Desktop 3.6.1
Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud.
network
low complexity
nextcloud CWE-352
8.8
2022-11-11 CVE-2022-41882 Code Injection vulnerability in Nextcloud Desktop 3.6.0
The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer.
local
low complexity
nextcloud CWE-94
7.8
2022-09-15 CVE-2022-36074 Incorrect Authorization vulnerability in Nextcloud Enterprise Server and Nextcloud Server
Nextcloud server is an open source personal cloud product.
network
low complexity
nextcloud CWE-863
7.5
2022-01-25 CVE-2021-43863 SQL Injection vulnerability in Nextcloud
The Nextcloud Android app is the Android client for Nextcloud, a self-hosted productivity platform.
network
low complexity
nextcloud CWE-89
7.5
2021-11-30 CVE-2021-41256 Unspecified vulnerability in Nextcloud News
nextcloud news-android is an Android client for the Nextcloud news/feed reader app.
local
low complexity
nextcloud
7.1