5077 matches found
GHSA-G446-98W2-8P5W vulnerabilities
Vulnerabilities for packages: nextcloud-server...
GHSA-G446-98W2-8P5W vulnerabilities
Vulnerabilities for packages: nextcloud-server...
CVE-2026-59883 vulnerabilities
Vulnerabilities for packages: nextcloud-server...
Hackers Exploit Windmill Flaw to Read Arbitrary Server Files Without Authentication
A high-severity security flaw impacting open-source developer platform Windmill has come under active exploitation in the wild, per VulnCheck. The vulnerability in question is CVE-2026-29059 CVSS score: 7.5, a case of unauthenticated path traversal impacting Windmill's "getlogfile" endpoint...
CVE-2026-55599 vulnerabilities
Vulnerabilities for packages: nextcloud-server...
CVE-2026-55599 vulnerabilities
Vulnerabilities for packages: nextcloud-server...
GHSA-RF66-HMQF-Q3FC vulnerabilities
Vulnerabilities for packages: nextcloud-server...
CVE-2016-10744 vulnerabilities
Vulnerabilities for packages: nextcloud-server...
CVE-2016-10744 vulnerabilities
Vulnerabilities for packages: nextcloud-server...
GHSA-RF66-HMQF-Q3FC vulnerabilities
Vulnerabilities for packages: nextcloud-server...
[SECURITY] Fedora 43 Update: nextcloud-33.0.6-1.fc43
NextCloud gives you universal access to your files through a web interface or WebDAV. It also provides a platform to easily view & sync your contacts, calendars and bookmarks across all your devices and enables basic editing rig ht on the web. NextCloud is extendable via a simple but powerful API...
GHSA-V6WH-96G9-6WX3 vulnerabilities
Vulnerabilities for packages: nextcloud-server...
GHSA-FX2H-PF6J-XCFF vulnerabilities
Vulnerabilities for packages: nextcloud-server...
CVE-2026-53632 vulnerabilities
Vulnerabilities for packages: nextcloud-server...
CVE-2026-53571 vulnerabilities
Vulnerabilities for packages: nextcloud-server...
CVE-2026-52782
OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, there is an IDOR through /projects//settings/projectstorages/ via PATCH parameter "storagesprojectstorageprojectfolderid" leads to Access to Unauthorized Resources. A project-admin in one project can...
CVE-2026-52782
OpenProject versions prior to 17.3.3 and 17.4.1 are affected by an IDOR in /projects//settings/project_storages/ via PATCH parameter storages_project_storage[project_folder_id], allowing a project-admin to hijack another project’s managed Nextcloud/OneDrive folder on the same storage. The vulnera...
PT-2026-52913
Name of the Vulnerable Software and Affected Versions OpenProject versions prior to 17.3.3 OpenProject versions prior to 17.4.1 Description An Insecure Direct Object Reference IDOR exists in the project storage settings. A project administrator can gain unauthorized access to the managed Nextclou...