128 matches found
Nextcloud Android Information Disclosure Vulnerability
Nextcloud is a set of open source self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. Nextcloud Android suffers from an information disclosure vulnerability that stems from the fact that due to a timeout issue, the Android client may fail to...
Nextcloud Android 信息泄露漏洞
Nextcloud is a set of open source self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. Nextcloud Android suffers from an information disclosure vulnerability that stems from the fact that due to a timeout issue, the Android client may fail to...
PT-2021-19836
Name of the Vulnerable Software and Affected Versions Nextcloud Android versions prior to 3.16.1 Description The Nextcloud Android client has a timeout issue that may prevent it from properly cleaning sensitive data when an account is removed. This could include sensitive key material, such as...
CVE-2021-32658: Exposure of Sensitive Information to an Unauthorized Actor
Nextcloud Android is the Android client for the Nextcloud open source home cloud system. Due to a timeout issue the Android client may not properly clean all sensitive data on account removal. This could include sensitive key material such as the End-to-End encryption keys. It is recommended that...
Nextcloud Android Access Control Error Vulnerability
Nextcloud is a set of open source self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. An access control error vulnerability exists in Nextcloud Android. The vulnerability arises from a network system or product not properly restricting access t...
Nextcloud Android SQL Injection Vulnerability
Nextcloud is a suite of client-server software for creating network drives.Nextcloud Android is the Nextcloud Android client. A security vulnerability exists in Nextcloud Android. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based applications...
Security feature bypass
Not strictly enough sanitization in the Nextcloud Android app 3.6.0 allowed an attacker to get content information from protected tables when using custom queries...
CVE-2019-15622: Improper Neutralization of Special Elements used in an SQL Command
Not strictly enough sanitization in the Nextcloud Android app 3.6.0 allowed an attacker to get content information from protected tables when using custom queries...
Nextcloud Android app input validation error vulnerability
Nextcloud Android app is an Android-based mobile application from Nextcloud Germany for accessing Nextcloud servers. An input validation error vulnerability exists in the Nextcloud Android app. An attacker can exploit the vulnerability to obtain sensitive information...
Nextcloud Android app input validation error vulnerability (CNVD-2019-41896)
Nextcloud Android app is an Android-based mobile application from Nextcloud Germany for accessing Nextcloud servers. An input validation error vulnerability exists in the Nextcloud Android app. An attacker could exploit the vulnerability to repeatedly open and close target files...
Nextcloud Android app SQL injection vulnerability
Nextcloud Android app is an Android-based mobile application from Nextcloud Germany for accessing Nextcloud servers. A SQL injection vulnerability exists in the Nextcloud Android app versions prior to 3.0.0. The vulnerability stems from a lack of validation of externally entered SQL statements in...
Nextcloud Android Authorization Issues Vulnerability
Nextcloud Android is an Android-based mobile application from Nextcloud Germany for accessing Nextcloud servers. Nextcloud Android is vulnerable to an authorization issue. The vulnerability stems from a lack of authentication measures or insufficient authentication strength in a networked system ...
Nextcloud Android app information disclosure vulnerability
Nextcloud Android app is an Android-based mobile application from Nextcloud Germany for accessing Nextcloud servers. An information disclosure vulnerability exists in the Nextcloud Android app versions prior to 3.3.0. The vulnerability stems from errors such as configuration during operation of t...
Nextcloud Android app code injection vulnerability
Nextcloud Android app is an Android-based mobile application from Nextcloud Germany for accessing Nextcloud servers. A code injection vulnerability exists in versions of the Nextcloud Android app prior to 3.7.0, which arises from the failure of a network system or product to properly filter...
CVE-2019-5451
Bypass lock protection in the Nextcloud Android app prior to version 3.6.1 allows accessing the files when repeatedly opening and closing the app in a very short time...
CVE-2019-5450
Improper sanitization of HTML in directory names in the Nextcloud Android app prior to version 3.7.0 allowed to style the directory name in the header bar when using basic HTML...
Hardcoded credentials
Improper sanitization of HTML in directory names in the Nextcloud Android app prior to version 3.7.0 allowed to style the directory name in the header bar when using basic HTML...
Code injection
Bypassing lock protection exists in Nextcloud Android app 3.6.0 when creating a multi-account and aborting the process...
