5155 matches found
[SECURITY] Fedora 39 Update: nextcloud-28.0.5-2.fc39
NextCloud gives you universal access to your files through a web interface or WebDAV. It also provides a platform to easily view & sync your contacts, calendars and bookmarks across all your devices and enables basic editing rig ht on the web. NextCloud is extendable via a simple but powerful API...
[SECURITY] Fedora 40 Update: nextcloud-28.0.5-2.fc40
NextCloud gives you universal access to your files through a web interface or WebDAV. It also provides a platform to easily view & sync your contacts, calendars and bookmarks across all your devices and enables basic editing rig ht on the web. NextCloud is extendable via a simple but powerful API...
Fedora: Security Advisory for nextcloud (FEDORA-2024-d67f9827b2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 40 : nextcloud (2024-456a389028)
The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-456a389028 advisory. Update nextcloud to 28.0.5 and PR 11 PR 11 Many issues fixed by aviram: - Better HTTPS handling in Apache configs - Better cron job compatibility with APC -...
Fedora 39 : nextcloud (2024-80aa2e0e55)
The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-80aa2e0e55 advisory. Update nextcloud to 28.0.5 and PR 11 PR 11 Many issues fixed by aviram: - Better HTTPS handling in Apache configs - Better cron job compatibility with APC -...
Nextcloud: Invisible Salamanders Attack against end_to_end_encryption in Nextcloud
Vulnerability description not provided...
[SECURITY] Fedora 38 Update: nextcloud-28.0.4-2.fc38
NextCloud gives you universal access to your files through a web interface or WebDAV. It also provides a platform to easily view & sync your contacts, calendars and bookmarks across all your devices and enables basic editing rig ht on the web. NextCloud is extendable via a simple but powerful API...
Fedora 38 : nextcloud (2024-d67f9827b2)
The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-d67f9827b2 advisory. Fix typo and 2 RPM build warnings ---- - update to 28.0.3 - fix CVE-2024-22403 Tenable has extracted the preceding description block directly from the Fedora...
Nextcloud: Incomplete sanitization in SVG preview provider
The SVG preview provider in Nextcloud suffered from incomplete sanitization, allowing potential exploitation...
Nextcloud: Events information leaked with shared calendars on recurrence exceptions
Events information leaked with shared calendars on recurrence exceptions...
Nextcloud: Event create can create attachments that link to other websites
The vulnerability allowed the creation of attachments that could link to other websites during the event creation process...
Nextcloud: User can copy locked folders and gain access to the contents
A vulnerability in Nextcloud allowed users to copy locked folders and access their contents...
Nextcloud: Weak ssh algorithms and CVE-2023-48795 Discovered on various subdomains of nextcloud.com
Security researchers discovered a vulnerability in the Secure Shell SSH cryptographic network protocol, known as Terrapin CVE-2023-48795. This vulnerability could have allowed an attacker to downgrade the security of the secure channel. Weak SSH algorithms were also identified on various subdomai...
The vulnerability of cloud software for creating and using Nextcloud Server’s data storage solution is related to improper access control, allowing attackers to circumvent existing access restrictions policies.
The vulnerability of cloud-based software for creating and using Nextcloud Server storage involves changes made by administrators to the authentication settings of external storage configured by users. Exploiting this vulnerability allows a malicious actor to circumvent existing access control...
The vulnerability of cloud software for creating and using Nextcloud Server’s data storage solution is related to improper access control, allowing attackers to circumvent existing access restrictions.
The vulnerability of cloud-based software for creating and using Nextcloud Server lies in the ability to update any personal or global external storage, making it inaccessible to everyone else. Exploiting this vulnerability could allow a malicious actor to circumvent existing access control...
The vulnerability of cloud software for creating and using Nextcloud Server’s data storage system, related to bypassing authentication, allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of cloud-based software for creating and using Nextcloud Server storage involves the ability to include or exclude birthdays of any user on the same server in the calendar. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected...
The vulnerability of cloud-based software for creating and using Nextcloud Server’s data storage system lies in improper input validation during the creation of web pages. This allows attackers to execute cross-site scripting (XSS) attacks.
The vulnerability of cloud-based software for creating and using Nextcloud Server storage involves improper input validation during the creation of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...
The vulnerability of cloud-based software for creating and using Nextcloud Server’s data storage system lies in improper input validation during the creation of web pages. This allows attackers to execute cross-site scripting (XSS) attacks.
The vulnerability of cloud-based software for creating and using Nextcloud Server storage solutions is related to the ability to copy HTML code without formatting Ctrl+Shift+V. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks XSS...
ROS-20240402-12
A vulnerability in Nextcloud cloud storage creation and utilization software Server is related to the ability to update any personal or global external storage, making it inaccessible to everyone else. Exploitation of the vulnerability could allow an attacker, acting remotely, to bypass existing...