Vulnerabilities > Nextcloud > Medium

DATE CVE VULNERABILITY TITLE RISK
2021-09-07 CVE-2021-37630 Authorization Bypass Through User-Controlled Key vulnerability in Nextcloud Circles
Nextcloud Circles is an open source social network built for the nextcloud ecosystem.
network
low complexity
nextcloud CWE-639
4.0
2021-09-07 CVE-2021-37631 Authorization Bypass Through User-Controlled Key vulnerability in Nextcloud Deck
Deck is an open source kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud.
network
low complexity
nextcloud CWE-639
4.0
2021-08-18 CVE-2021-32728 Improper Certificate Validation vulnerability in multiple products
The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with a computer.
network
low complexity
nextcloud debian CWE-295
6.5
2021-07-27 CVE-2021-32748 Missing Authorization vulnerability in Nextcloud Richdocuments
Nextcloud Richdocuments in an open source self hosted online office.
network
low complexity
nextcloud CWE-862
4.0
2021-07-12 CVE-2021-32734 Information Exposure Through an Error Message vulnerability in Nextcloud Server
Nextcloud Server is a Nextcloud package that handles data storage.
network
low complexity
nextcloud CWE-209
5.3
2021-07-12 CVE-2021-32741 Unspecified vulnerability in Nextcloud Server
Nextcloud Server is a Nextcloud package that handles data storage.
network
low complexity
nextcloud
5.0
2021-07-12 CVE-2021-32727 Improper Certificate Validation vulnerability in Nextcloud
Nextcloud Android Client is the Android client for Nextcloud.
network
low complexity
nextcloud CWE-295
5.0
2021-07-12 CVE-2021-32733 Cross-site Scripting vulnerability in Nextcloud Server
Nextcloud Text is a collaborative document editing application that uses Markdown.
network
nextcloud CWE-79
4.3
2021-07-12 CVE-2021-32725 Insecure Inherited Permissions vulnerability in Nextcloud Server
Nextcloud Server is a Nextcloud package that handles data storage.
network
low complexity
nextcloud CWE-277
5.3
2021-07-12 CVE-2021-32689 Unspecified vulnerability in Nextcloud Talk
Nextcloud Talk is a fully on-premises audio/video and chat communication service.
network
low complexity
nextcloud
4.0