Skip to content
OpenAdvisories

Vendor

Nextcloud

306 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 4.2
    CVE-2024-52510 Public exploit

    Nextcloud Desktop client behaves incorrectly if the initial end-to-end-encryption signature is empty

    The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer. The Desktop client did not stop with an error but allowed by-passing the signature validation, if a manipulated server sends an empty initial signature. It i…

  • Medium 5.3
    CVE-2023-49792 Public exploit

    Bruteforce protection can be bypassed with misconfigured proxy

    Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. In Nextcloud Server prior to versions 26.0.9 and 27.1.4; as well as Nextcloud Enterprise Server prior to versions 23.0.12.13, 24.0.12.9, 25.0.13.4, 26.0.9, and 27.1.4; when a…