Lucene search
+L

7 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•28 views

EUVD-2022-41809

Malicious code in bioql PyPI...

5.4CVSS5.7AI score0.00944EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
•added 2023/04/13 12:00 a.m.•56 views

openSUSE 15 Security Update : nextcloud-desktop (openSUSE-SU-2023:0090-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2023:0090-1 advisory. - Nexcloud desktop is the Desktop sync client for Nextcloud. An attacker can inject arbitrary HyperText Markup Language into the Desktop Client...

6.1CVSS5.5AI score0.00958EPSS
SaveExploits4References17
NVD
NVD
•added 2022/11/25 8:15 p.m.•27 views

CVE-2022-39332

Nexcloud desktop is the Desktop sync client for Nextcloud. An attacker can inject arbitrary HyperText Markup Language into the Desktop Client application via user status and information. It is recommended that the Nextcloud Desktop client is upgraded to 3.6.1. There are no known workarounds for...

5.4CVSS0.00944EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
•added 2022/11/25 8:15 p.m.•39 views

CVE-2022-39332

Nexcloud desktop is the Desktop sync client for Nextcloud. An attacker can inject arbitrary HyperText Markup Language into the Desktop Client application via user status and information. It is recommended that the Nextcloud Desktop client is upgraded to 3.6.1. There are no known workarounds for...

5.4CVSS6.1AI score0.00944EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/25 12:00 a.m.•2 views

CVE-2022-39333: Improper Neutralization of Input During Web Page Generation

Nexcloud desktop is the Desktop sync client for Nextcloud. An attacker can inject arbitrary HyperText Markup Language into the Desktop Client application. It is recommended that the Nextcloud Desktop client is upgraded to 3.6.1. There are no known workarounds for this issue...

6.1CVSS5.8AI score0.00941EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/25 12:00 a.m.•2 views

CVE-2022-39332: Improper Neutralization of Input During Web Page Generation

Nexcloud desktop is the Desktop sync client for Nextcloud. An attacker can inject arbitrary HyperText Markup Language into the Desktop Client application via user status and information. It is recommended that the Nextcloud Desktop client is upgraded to 3.6.1. There are no known workarounds for...

5.4CVSS5.8AI score0.00944EPSS
SaveExploits1References2
CVE
CVE
•added 2022/11/25 12:00 a.m.•136 views

CVE-2022-39332

Summary (CVE-2022-39332) : The Nextcloud Desktop client (nextcloud-desktop) is affected. An attacker can inject arbitrary HTML into the Desktop Client via user status and information, enabling a desktop UI HTML injection (XSS) vulnerability. The issue is remedied by upgrading the Nextcloud Deskto...

5.4CVSS5AI score0.00944EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder