Lucene search
K

14 matches found

RedhatCVE
RedhatCVE
added 2026/06/05 7:47 p.m.6 views

CVE-2026-45154

Nextcloud is an open source content collaboration platform. From version 2.6.0 to before version 4.3.0, when a previous collective pages was deleted and the collective was shared view-only, guests with access to the collective were able to access the deleted pages directly from the trashbin. This...

2.6CVSS5.3AI score0.00189EPSS
Exploits0References1
NVD
NVD
added 2026/06/01 5:17 p.m.10 views

CVE-2026-45154

Nextcloud is an open source content collaboration platform. From version 2.6.0 to before version 4.3.0, when a previous collective pages was deleted and the collective was shared view-only, guests with access to the collective were able to access the deleted pages directly from the trashbin. This...

2.6CVSS0.00189EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/06/01 4:37 p.m.26 views

CVE-2026-45154 Nextcloud: Improper Access Control in Collectives

Nextcloud is an open source content collaboration platform. From version 2.6.0 to before version 4.3.0, when a previous collective pages was deleted and the collective was shared view-only, guests with access to the collective were able to access the deleted pages directly from the trashbin. This...

2.6CVSS0.00189EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/06/01 4:37 p.m.10 views

CVE-2026-45154 Nextcloud: Improper Access Control in Collectives

Nextcloud is an open source content collaboration platform. From version 2.6.0 to before version 4.3.0, when a previous collective pages was deleted and the collective was shared view-only, guests with access to the collective were able to access the deleted pages directly from the trashbin. This...

2.6CVSS5.7AI score0.00189EPSS
Exploits0References3
CVE
CVE
added 2026/06/01 4:37 p.m.25 views

CVE-2026-45154

Nextcloud Collectives vulnerability: from version 2.6.0 through before 4.3.0, if a collective page was deleted and the collective was shared view‑only, guests with access could directly retrieve the deleted pages from the trashbin. Root cause: improper access control. A fix is available in versio...

2.6CVSS5.7AI score0.00189EPSS
Exploits0References3
EUVD
EUVD
added 2026/06/01 4:37 p.m.9 views

EUVD-2026-33673

Nextcloud is an open source content collaboration platform. From version 2.6.0 to before version 4.3.0, when a previous collective pages was deleted and the collective was shared view-only, guests with access to the collective were able to access the deleted pages directly from the trashbin. This...

2.6CVSS5.7AI score0.00189EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/06/01 12:0 a.m.7 views

Nextcloud Collectives 访问控制错误漏洞

NextCloud Collectives is an open-source collaboration and knowledge management tool developed by NextCloud. In versions 2.6.0 to 4.3.0 of NextCloud Collectives, there was a security vulnerability related to access control. This vulnerability stemmed from a lack of permission checks, which could...

2.6CVSS5.3AI score0.00189EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/06/01 12:0 a.m.11 views

PT-2026-45470

Nextcloud is an open source content collaboration platform. From version 2.6.0 to before version 4.3.0, when a previous collective pages was deleted and the collective was shared view-only, guests with access to the collective were able to access the deleted pages directly from the trashbin. This...

2.6CVSS5.7AI score0.00189EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2018-12803

Malware in sbrugna...

6.5CVSS6.5AI score0.01737EPSS
Exploits0References4
CNVD
CNVD
added 2018/05/02 12:0 a.m.4 views

Mediawiki Unauthorized Operation Vulnerability (CNVD-2018-10135)

MediaWiki is a free and free web-based Wiki engine developed and maintained by the Wikimedia Foundation and MediaWiki volunteers, which can be used to deploy in-house knowledge management and content management systems. A security vulnerability exists in Mediawiki versions prior to 1.28.1, prior ...

6.5CVSS6.8AI score0.01207EPSS
Exploits0References1
OSV
OSV
added 2014/05/12 2:55 p.m.3 views

DEBIAN-CVE-2013-6472

MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to obtain information about deleted page via the 1 log API, 2 enhanced RecentChanges, and 3 user watchlists...

5CVSS6.8AI score0.01267EPSS
Exploits0References1
Prion
Prion
added 2014/05/12 2:55 p.m.22 views

Information disclosure

MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to obtain information about deleted page via the 1 log API, 2 enhanced RecentChanges, and 3 user watchlists...

5CVSS6.6AI score0.01267EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2014/05/12 2:55 p.m.4 views

UBUNTU-CVE-2013-6472

MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to obtain information about deleted page via the 1 log API, 2 enhanced RecentChanges, and 3 user watchlists...

5CVSS7.3AI score0.01267EPSS
Exploits0References3
Debian CVE
Debian CVE
added 2014/05/12 2:0 p.m.30 views

CVE-2013-6472

MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to obtain information about deleted page via the 1 log API, 2 enhanced RecentChanges, and 3 user watchlists...

5CVSS6.6AI score0.01267EPSS
Exploits0
Rows per page
Query Builder