Skip to content
OpenAdvisories

Archive

10 August 2023

Vulnerabilities first published on this day (UTC), newest first.

7 results · Clear filters · Feed

  • Low —

    Moq v4.20.0-rc to 4.20.1 share hashed user data

    Moq v4.20.0-rc to 4.20.1 include support for [SponsorLink](https://github.com/devlooped/SponsorLink), which runs an obfuscated DLL at build time that scans local `git config` data and shares the user's hashed email address with SponsorLink's remote servers. T…

  • Low 3.5

    Text does not respect "Allow download" permissions

    Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 24.0.4 and prior to versions 25.0.9, 26.0.4, and 27.0.1, when a folder with images or an image was shared without download permissions, the user could add…

  • Low 3.5

    Existence of calendars and address books can be checked by unauthenticated users

    Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.9, 26.0.4, and 27.0.1, unauthenticated users could send a DAV request which reveals whether a calendar or an address boo…

  • Low 3.5

    Notes attachment render HTML in preview mode

    Notes is a note-taking app for Nextcloud, an open-source cloud platform. Starting in version 4.4.0 and prior to version 4.8.0, when creating a note file with HTML, the content is rendered in the preview instead of the file being offered to download. Nextcloud…

  • Low 3.8

    user_oidc app stores client secret unencrypted in database

    user_oidc provides the OIDC connect user backend for Nextcloud, an open-source cloud platform. Starting in version 1.0.0 and prior to version 1.3.3, an attacker that obtained at least read access to a snapshot of the database can impersonate the Nextcloud ser…

  • Low 3.8

    Improper Authorization vulnerability in Samsung Internet prior to version 22.0.0.35 allows physical attacker access dow…

  • Low 3.3

    Improper URL validation vulnerability in Samsung Members prior to version 14.0.07.1 allows attackers to access sensitiv…