Skip to content
OpenAdvisories

Archive

12 July 2021

Vulnerabilities first published on this day (UTC), newest first.

← June 2021 2021 / July /12 August 2021 →
  1. 157
  2. 263
  3. 3 
  4. 4 
  5. 56
  6. 626
  7. 7108
  8. 866
  9. 961
  10. 102
  11. 115
  12. 1288
  13. 13139
  14. 14172
  15. 1583
  16. 1657
  17. 175
  18. 181
  19. 1961
  20. 20174
  21. 2185
  22. 2290
  23. 2320
  24. 241
  25. 2534
  26. 2662
  27. 2740
  28. 2828
  29. 2928
  30. 3016
  31. 316
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Low 3.1
    CVE-2021-32734

    File path disclosure of shared files in Nextcloud Text application

    Nextcloud Server is a Nextcloud package that handles data storage. In versions prior to 19.0.13, 20.011, and 21.0.3, the Nextcloud Text application shipped with Nextcloud Server returned verbatim exception messages to the user. This could result in a full pat…

    Nextcloud security-advisories
  • Low 3.5
    CVE-2021-32725

    Default share permissions not respected for federated reshares

    Nextcloud Server is a Nextcloud package that handles data storage. In versions prior to 19.0.13, 20.011, and 21.0.3, default share permissions were not being respected for federated reshares of files and folders. The issue was fixed in versions 19.0.13, 20.0.…

    Nextcloud security-advisories
  • Low 3.3
    CVE-2021-32680

    Audit log is not properly logging unsetting of share expiration date

    Nextcloud Server is a Nextcloud package that handles data storage. In versions priot to 19.0.13, 20.0.11, and 21.0.3, Nextcloud Server audit logging functionality wasn't properly logging events for the unsetting of a share expiration date. This event is suppo…

    Nextcloud security-advisories
  • Low 2.6
    CVE-2021-36382

    Devolutions Server before 2021.1.18, and LTS before 2020.3.20, allows attackers to intercept private keys via a man-in-…

  • Low 3.5
    CVE-2021-32679

    Filenames not escaped by default in controllers using DownloadResponse

    Nextcloud Server is a Nextcloud package that handles data storage. In versions prior to 19.0.13, 20.0.11, and 21.0.3, filenames where not escaped by default in controllers using `DownloadResponse`. When a user-supplied filename was passed unsanitized into a `…

    Nextcloud security-advisories
  • Low 3.7
    CVE-2021-32678

    Ratelimit not applied on OCS API responses

    Nextcloud Server is a Nextcloud package that handles data storage. In versions prior to 19.0.13, 20.0.11, and 21.0.3, ratelimits are not applied to OCS API responses. This affects any OCS API controller (`OCSController`) using the `@BruteForceProtection` anno…

    Nextcloud security-advisories