5340 matches found
GHSA-FX2H-PF6J-XCFF vulnerabilities
Vulnerabilities for packages: nextcloud-server...
CVE-2026-53571 vulnerabilities
Vulnerabilities for packages: nextcloud-server...
CVE-2026-53632 vulnerabilities
Vulnerabilities for packages: nextcloud-server...
CVE-2026-52782
OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, there is an IDOR through /projects//settings/projectstorages/ via PATCH parameter "storagesprojectstorageprojectfolderid" leads to Access to Unauthorized Resources. A project-admin in one project can...
CVE-2026-52782
OpenProject versions prior to 17.3.3 and 17.4.1 are affected by an IDOR in /projects//settings/project_storages/ via PATCH parameter storages_project_storage[project_folder_id], allowing a project-admin to hijack another project’s managed Nextcloud/OneDrive folder on the same storage. The vulnera...
CVE-2026-52782: Authorization Bypass Through User-Controlled Key
OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, there is an IDOR through /projects/ /settings/projectstorages/ via PATCH parameter "storagesprojectstorageprojectfolderid" leads to Access to Unauthorized Resources. A project-admin in one project can...
PT-2026-52913
Name of the Vulnerable Software and Affected Versions OpenProject versions prior to 17.3.3 OpenProject versions prior to 17.4.1 Description An Insecure Direct Object Reference IDOR exists in the project storage settings. A project administrator can gain unauthorized access to the managed Nextclou...
The vulnerability of the authentication module in cloud software for creating and using Nextcloud data storage allows a hacker to escalate their privileges.
The vulnerability of the authentication module in cloud software for creating and using Nextcloud data storage involves flaws in the authentication process. Exploiting this vulnerability can allow attackers to increase their privileges remotely...
CVE-2026-48736 vulnerabilities
Vulnerabilities for packages: nextcloud-server...
GHSA-38CX-CQ6F-5755 vulnerabilities
Vulnerabilities for packages: nextcloud-server...
GHSA-38CX-CQ6F-5755 vulnerabilities
Vulnerabilities for packages: nextcloud-server...
CVE-2026-48736 vulnerabilities
Vulnerabilities for packages: nextcloud-server...
Exploit for CVE-2026-45156
CVE-2026-45156: Nextcloud useroidc ID4me JWT Signature Bypass...
GHSA-CWXW-98QJ-8QJX vulnerabilities
Vulnerabilities for packages: drupal, nextcloud-server, privatebin...
CVE-2026-55767 vulnerabilities
Vulnerabilities for packages: drupal, nextcloud-server, privatebin...
GHSA-WPWQ-4J6V-78M3 vulnerabilities
Vulnerabilities for packages: drupal, nextcloud-server, privatebin...
GHSA-VM85-HXW5-5432 vulnerabilities
Vulnerabilities for packages: drupal, nextcloud-server, privatebin...
CVE-2026-55568 vulnerabilities
Vulnerabilities for packages: drupal, nextcloud-server, privatebin...