Server at a glance
- Last 12 months
- 7
- Critical · all time
- 0
- Exploited · all time
- 0
- Public exploit · all time
- 0
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 0 | 0 |
| Oct 2026 | 3 | 0 |
| Sep 2026 | 4 | 0 |
| Aug 2026 | 0 | 0 |
| Jul 2026 | 0 | 0 |
| Jun 2026 | 0 | 0 |
| May 2026 | 0 | 0 |
| Apr 2026 | 0 | 0 |
| Mar 2026 | 0 | 0 |
| Feb 2026 | 0 | 0 |
| Jan 2026 | 0 | 0 |
| Dec 2025 | 0 | 0 |
| Nov 2025 | 0 | 0 |
| Oct 2025 | 0 | 0 |
| Sep 2025 | 0 | 0 |
| Aug 2025 | 0 | 0 |
| Jul 2025 | 0 | 0 |
| Jun 2025 | 0 | 0 |
| May 2025 | 0 | 0 |
| Apr 2025 | 0 | 0 |
| Mar 2025 | 0 | 0 |
| Feb 2025 | 0 | 0 |
| Jan 2025 | 0 | 0 |
| Dec 2024 | 0 | 0 |
7 results · Feed
-
Medium 5.3
App passwords were allowed to bypass password confirmation on sensitive endpoints.
-
High 7.5
Abusing the federated share endpoint, an attacker can write arbitrary rows into the oc_share_external database table. T…
-
Medium 4.3
When a team was configured as "visible to everyone", the web UI correctly blocked non-members from viewing the team ("Y…
-
Medium 6.5
File owners were unable to unlock TYPE_TOKEN locks placed by other users, leaving files permanently locked with no reco…
-
Medium 6.2
Circles' remote-instance signature verification fetches the attacker-supplied keyId URL before trust in the remote inst…
-
Low 3.1
After guessing a 62^15 complex unique identifier, a malicious logged in user was able to retrieve a list of memberships…
-
Medium 6.5
The Photos app's filter-based "smart albums" build their file listing using the search configuration (photosSourceFolde…