Lucene search
+L

6215 matches found

CNVD
CNVD
•added 2022/01/28 12:00 a.m.•80 views

Nextcloud Android app information disclosure vulnerability (CNVD-2022-18414)

Nextcloud Android app is an Android-based mobile application for accessing Nextcloud servers from the German company Nextcloud. information disclosure in versions of Nextcloud Android app prior to 3.17.1, the vulnerability stems from a network system or product that has a configuration and other...

5.3CVSS3.1AI score0.00948EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/01/27 12:00 a.m.•62 views

Nextcloud Android app SQL injection vulnerability (CNVD-2022-18415)

Nextcloud Android app is an Android-based mobile application from Nextcloud Germany for accessing Nextcloud servers. nextcloud Android app is vulnerable to SQL injection, a vulnerability that stems from the lack of validation of externally entered SQL statements in database-based applications. An...

7.5CVSS3.7AI score0.01874EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2022/01/26 11:15 p.m.•26 views

CVE-2021-41166

The Nextcloud Android app is the Android client for Nextcloud, a self-hosted productivity platform. An issue in versions prior to 3.17.1 may lead to sensitive information disclosure. An unauthorized app that does not have the otherwise required MANAGEDOCUMENTS permission may view image thumbnails...

5.3CVSS6.4AI score
SaveExploits0References4
NVD
NVD
•added 2022/01/26 11:15 p.m.•43 views

CVE-2021-41166

The Nextcloud Android app is the Android client for Nextcloud, a self-hosted productivity platform. An issue in versions prior to 3.17.1 may lead to sensitive information disclosure. An unauthorized app that does not have the otherwise required MANAGEDOCUMENTS permission may view image thumbnails...

5.3CVSS0.00948EPSS
SaveExploits0References4
Prion
Prion
•added 2022/01/26 11:15 p.m.•34 views

Information disclosure

The Nextcloud Android app is the Android client for Nextcloud, a self-hosted productivity platform. An issue in versions prior to 3.17.1 may lead to sensitive information disclosure. An unauthorized app that does not have the otherwise required MANAGEDOCUMENTS permission may view image thumbnails...

5CVSS4.9AI score0.00948EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2022/01/26 10:35 p.m.•45 views

CVE-2021-41166 Permission bypass in Nextcloud Android App

The Nextcloud Android app is the Android client for Nextcloud, a self-hosted productivity platform. An issue in versions prior to 3.17.1 may lead to sensitive information disclosure. An unauthorized app that does not have the otherwise required MANAGEDOCUMENTS permission may view image thumbnails...

4.3CVSS5.1AI score0.00948EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2022/01/26 10:35 p.m.•8 views

CVE-2021-41166 Permission bypass in Nextcloud Android App

The Nextcloud Android app is the Android client for Nextcloud, a self-hosted productivity platform. An issue in versions prior to 3.17.1 may lead to sensitive information disclosure. An unauthorized app that does not have the otherwise required MANAGEDOCUMENTS permission may view image thumbnails...

4.3CVSS6.5AI score0.00948EPSS
SaveExploits0References4
CVE
CVE
•added 2022/01/26 10:35 p.m.•105 views

CVE-2021-41166

CVE-2021-41166 affects the Nextcloud Android app. An unauthorized app lacking the MANAGE_DOCUMENTS permission may view image thumbnails for images it should not access. The issue is fixed in version 3.17.1; there are no known workarounds. Users and administrators should upgrade to 3.17.1 or later...

5.3CVSS4.4AI score0.00948EPSS
SaveExploits0References4Affected Software1
Nextcloud
Nextcloud
•added 2022/01/26 7:21 p.m.•73 views

Permission bypass in DiskLruImageCacheFileProvider (GHSL-2021-1008)

None...

5.3CVSS5.6AI score0.00948EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2022/01/26 12:00 a.m.•21 views

Nextcloud Android app 信息泄露漏洞

Nextcloud Android app is an Android-based mobile application for accessing Nextcloud servers from the German company Nextcloud. information disclosure in versions of Nextcloud Android app prior to 3.17.1, the vulnerability stems from a network system or product that has a configuration and other...

5.3CVSS5.6AI score0.00948EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/26 12:00 a.m.•7 views

CVE-2021-41166: Incorrect Default Permissions

The Nextcloud Android app is the Android client for Nextcloud, a self-hosted productivity platform. An issue in versions prior to 3.17.1 may lead to sensitive information disclosure. An unauthorized app that does not have the otherwise required MANAGEDOCUMENTS permission may view image thumbnails...

5.3CVSS5.7AI score0.00948EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/01/26 12:00 a.m.•27 views

PT-2022-11370

Name of the Vulnerable Software and Affected Versions Nextcloud Android app versions prior to 3.17.1 Description The issue may lead to sensitive information disclosure, allowing an unauthorized app without the required MANAGE DOCUMENTS permission to view image thumbnails for images it does not ha...

5.3CVSS6.2AI score0.00948EPSS
SaveExploits0References10
NVD
NVD
•added 2022/01/25 4:15 p.m.•37 views

CVE-2021-43863

The Nextcloud Android app is the Android client for Nextcloud, a self-hosted productivity platform. The Nextcloud Android app uses content providers to manage its data. Prior to version 3.18.1, the providers FileContentProvider and DiskLruImageCacheFileProvider have security issues an SQL...

7.5CVSS0.01874EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2022/01/25 4:15 p.m.•33 views

CVE-2021-43863

The Nextcloud Android app is the Android client for Nextcloud, a self-hosted productivity platform. The Nextcloud Android app uses content providers to manage its data. Prior to version 3.18.1, the providers FileContentProvider and DiskLruImageCacheFileProvider have security issues an SQL...

7.5CVSS7.8AI score
SaveExploits0References3
Prion
Prion
•added 2022/01/25 4:15 p.m.•38 views

Sql injection

The Nextcloud Android app is the Android client for Nextcloud, a self-hosted productivity platform. The Nextcloud Android app uses content providers to manage its data. Prior to version 3.18.1, the providers FileContentProvider and DiskLruImageCacheFileProvider have security issues an SQL...

5CVSS7.7AI score0.01874EPSS
SaveExploits0References3Affected Software1
Mend
Mend
•added 2022/01/25 3:25 p.m.•4 views

CVE-2021-43863

The Nextcloud Android app is the Android client for Nextcloud, a self-hosted productivity platform. The Nextcloud Android app uses content providers to manage its data. Prior to version 3.18.1, the providers "FileContentProvider" and "DiskLruImageCacheFileProvider" have security issues an SQL...

8.7CVSS0.01874EPSS
SaveExploits0References3
CVE
CVE
•added 2022/01/25 3:25 p.m.•91 views

CVE-2021-43863

CVE-2021-43863 affects the Nextcloud Android app (pre-3.18.1). The vulnerability involves the FileContentProvider (SQL injection) and DiskLruImageCacheFileProvider (insufficient permission control), enabling malicious apps on the same device to access Nextcloud data by bypassing the app’s permiss...

7.5CVSS7.8AI score0.01874EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2022/01/25 3:25 p.m.•42 views

CVE-2021-43863 SQL Injection in FileContentProvider (GHSL-2021-1007)

The Nextcloud Android app is the Android client for Nextcloud, a self-hosted productivity platform. The Nextcloud Android app uses content providers to manage its data. Prior to version 3.18.1, the providers FileContentProvider and DiskLruImageCacheFileProvider have security issues an SQL...

7.5CVSS8AI score0.01874EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2022/01/25 3:25 p.m.•9 views

CVE-2021-43863 SQL Injection in FileContentProvider (GHSL-2021-1007)

The Nextcloud Android app is the Android client for Nextcloud, a self-hosted productivity platform. The Nextcloud Android app uses content providers to manage its data. Prior to version 3.18.1, the providers FileContentProvider and DiskLruImageCacheFileProvider have security issues an SQL...

7.5CVSS7.8AI score0.01874EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/01/25 12:00 a.m.•25 views

PT-2022-11922

Name of the Vulnerable Software and Affected Versions Nextcloud Android app versions prior to 3.18.1 Description The Nextcloud Android app has security issues in its content providers, FileContentProvider and DiskLruImageCacheFileProvider, which include an SQL injection and insufficient permissio...

7.5CVSS7AI score0.01874EPSS
SaveExploits0References7
Rows per page
Query Builder