EUVD-2023-43658

Malicious code in bioql PyPI...

Fedora 43 : nextcloud (2025-8af4de0f83)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-8af4de0f83 advisory. 31.0.9 release RHBZ2388493 RHBZ2389830 RHBZ2389831 RHBZ2389842 RHBZ2389843 RHBZ2389814 RHBZ2389815 Tenable has extracted the preceding description...

Fedora 42 : nextcloud (2025-a0af412743)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-a0af412743 advisory. 31.0.9 release RHBZ2388493 RHBZ2389830 RHBZ2389831 RHBZ2389842 RHBZ2389843 RHBZ2389814 RHBZ2389815 Tenable has extracted the preceding description...

Fedora 41 : nextcloud (2025-e750be1b9c)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-e750be1b9c advisory. 31.0.9 release RHBZ2388493 RHBZ2389830 RHBZ2389831 RHBZ2389842 RHBZ2389843 RHBZ2389814 RHBZ2389815 Tenable has extracted the preceding description...

Fedora: Security Advisory (FEDORA-2025-e750be1b9c)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2025-a0af412743)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Nextcloud: WebAuthn app was updated based on public key

Vulnerability description not provided...

Nextcloud: Stored XSS Vulnerability via SVG File

A stored XSS vulnerability was discovered in Nextcloud related to the handling of SVG files. The vulnerability allowed the execution of arbitrary JavaScript code...

Nextcloud: Mail stored HTML injection in subject text

A vulnerability was discovered in the mail stored HTML injection in subject text. The vulnerability allowed for arbitrary HTML code to be injected into the subject line of emails stored in the system...

SUSE CVE-2023-35928

Nextcloud Server is a space for data storage on Nextcloud, a self-hosted productivity playform. In NextCloud Server versions 25.0.0 until 25.0.7 and 26.0.0 until 26.0.2 and Nextcloud Enterprise Server versions 19.0.0 until 19.0.13.9, 20.0.0 until 20.0.14.14, 21.0.0 until 21.0.9.12, 22.0.0 until...

Fedora 44 : nextcloud (2025-b4b3303299)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-b4b3303299 advisory. Automatic update for nextcloud-31.0.9-1.fc44. Changelog Sat Sep 20 2025 Andrew Bauer - 31.0.9-1 - 31.0.9 release RHBZ2388493 RHBZ2389830 RHBZ2389831...

[SECURITY] [DLA 4303-1] nextcloud-desktop security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4303-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA September 18, 2025 https://wiki.debian.org/LTS -...

DLA-4303-1 nextcloud-desktop - security update

Bulletin has no description...

Debian dla-4303 : caja-nextcloud - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4303 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4303-1 [email protected]...

Debian: Security Advisory (DLA-4303-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Nextcloud: Approval app allows users to request approval for other users file

A security vulnerability was discovered in the Approval app that allowed users to request approval for other users' files. The vulnerability was addressed in a security advisory...

Nextcloud: Nextcloud Tables v1 Share Enumeration Without Authorization (Regression of CVE-2024-52507)

A vulnerability was discovered in Nextcloud Tables v1 that allowed unauthorized users to enumerate shares. The vulnerability was a regression of a previously addressed issue, CVE-2024-52507...

PT-2025-49115

Name of the Vulnerable Software and Affected Versions Nextcloud versions prior to 22.2.10.33 Nextcloud versions prior to 23.0.12.29 Nextcloud versions prior to 24.0.12.28 Nextcloud versions prior to 25.0.13.23 Nextcloud versions prior to 26.0.13.20 Nextcloud versions prior to 27.1.11.20 Nextcloud...

Linux Distros Unpatched Vulnerability : CVE-2024-46958

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Nextcloud Desktop Client 3.13.1 through 3.13.3 on Linux, synchronized files between the server and client may become world writable or world readable. This i...

Linux Distros Unpatched Vulnerability : CVE-2020-8189

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A cross-site scripting error in Nextcloud Desktop client 2.6.4 allowed to present any html including local links when responding with invalid data on the login...