Lucene search

ROS-20240627-06

🗓️ 27 Jun 2024 00:00:00Reported by RedosType

Vulnerabilities in Nextcloud Serve

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 68
OpenVAS	Nextcloud Server Multiple Vulnerabilities (GHSA-3f8p-6qww-2prr, GHSA-5j2p-q736-hw98)	20 Dec 202300:00	–	openvas
OpenVAS	Nextcloud Server < 25.0.13.7, 26.x < 26.0.13, 27.x < 27.1.8, 28.x < 28.0.4 Improper Access Control Vulnerability (GHSA-xwgx-f37p-xh8c)	19 Jun 202400:00	–	openvas
OpenVAS	Nextcloud Server < 23.0.12.17, 24.x < 24.0.12.13, 25.x < 25.0.13.8, 26.x < 26.0.13, 27.x < 27.1.8, 28.x < 28.0.4 Improper Access control Vulnerability (GHSA-jjm3-j9xh-5xmq)	19 Jun 202400:00	–	openvas
OpenVAS	Nextcloud Server < 21.0.9.17, 22.x < 22.2.10.22, 23.x < 23.0.12.17, 24.x < 24.0.12.14, 25.x < 25.0.13.8, 26.x < 26.0.13, 27.x < 27.1.8, 28.x < 28.0.4 Improper Authentication Vulnerability (GHSA-9v72-9xv5-3p7c)	18 Jun 202400:00	–	openvas
OpenVAS	Nextcloud Server < 23.0.12.16, 24.x < 24.0.12.12, 25.x < 25.0.13.16, 26.x < 26.0.12, 27.x < 27.1.7, 28.x < 28.0.3 Improper Access Control Vulnerability (GHSA-5mq8-738w-5942)	18 Jun 202400:00	–	openvas
OpenVAS	Nextcloud Server < 27.1.10, 28.x < 28.0.6, 29.x < 29.0.1 Information Disclosure Vulnerability (GHSA-h4xv-cjpm-j595)	18 Jun 202400:00	–	openvas
OpenVAS	Fedora: Security Advisory for nextcloud (FEDORA-2024-d67f9827b2)	27 May 202400:00	–	openvas
OpenVAS	Nextcloud Server < 28.0.0 Improper Authorization Vulnerability (GHSA-wppc-f5g8-vx36)	18 Jan 202400:00	–	openvas
Vulnrichment	CVE-2024-37882 Nextcloud Server can reshare read&share only folder with more permissions	14 Jun 202415:28	–	vulnrichment
Vulnrichment	CVE-2023-49791 Workflows do not require password confirmation on API level	22 Dec 202316:26	–	vulnrichment

OS	OS Version	Architecture	Package	Package Version	Filename
redos	7.3	x86_64	nextcloud	27.1.10-1	UNKNOWN

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

27 Jun 2024 00:00Current

7.5High risk

Vulners AI Score7.5

CVSS38.1 - 9.8

EPSS0.00354

SSVC