Lucene search
K

8 matches found

CNVD
CNVD
added 2021/09/09 12:0 a.m.15 views

Nextcloud Circles Licensing Issues Vulnerability Vulnerability

Nextcloud Circles, an open source social network built by Nextcloud Germany for the Nextcloud ecosystem, is vulnerable to an authorization issue in versions prior to 0.19.15, 0.20.11, and 0.21.4, which stems from a vulnerability in the Nextcloud Circles The application allows any user to join any...

6.5CVSS2.1AI score0.00327EPSS
Exploits0References1
OSV
OSV
added 2021/09/07 8:15 p.m.11 views

CVE-2021-37630

Nextcloud Circles is an open source social network built for the nextcloud ecosystem. In affected versions the Nextcloud Circles application allowed any user to join any "Secret Circle" without approval by the Circle owner leaking private information. It is recommended that Nextcloud Circles is...

6.5CVSS6.7AI score
Exploits0References3
Cvelist
Cvelist
added 2021/09/07 8:0 p.m.15 views

CVE-2021-37630 Secret Circle can be joined without approval in Nextcloud Circles

Nextcloud Circles is an open source social network built for the nextcloud ecosystem. In affected versions the Nextcloud Circles application allowed any user to join any "Secret Circle" without approval by the Circle owner leaking private information. It is recommended that Nextcloud Circles is...

6.5CVSS6.6AI score0.00327EPSS
Exploits0References3
CNNVD
CNNVD
added 2021/09/07 12:0 a.m.4 views

Nextcloud 安全漏洞

Nextcloud Circles, an open source social network built by Nextcloud Germany for the Nextcloud ecosystem, is vulnerable to an authorization issue in versions prior to 0.19.15, 0.20.11, and 0.21.4, which stems from a vulnerability in the Nextcloud Circles The application allows any user to join any...

6.5CVSS5.6AI score0.00327EPSS
Exploits0References5
NVD
NVD
added 2014/09/17 10:55 a.m.8 views

CVE-2014-5918

The Secret Circle - talk freely aka com.easyxapp.secret application 2.2.00.26 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS5.9AI score0.00134EPSS
Exploits0References3
Prion
Prion
added 2014/09/17 10:55 a.m.11 views

Code injection

The Secret Circle - talk freely aka com.easyxapp.secret application 2.2.00.26 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS6.4AI score0.00134EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2014/09/17 10:0 a.m.15 views

CVE-2014-5918

The Secret Circle - talk freely aka com.easyxapp.secret application 2.2.00.26 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.9AI score0.00134EPSS
Exploits0References3
CVE
CVE
added 2014/09/17 10:0 a.m.34 views

CVE-2014-5918

The CVE-2014-5918 entry refers to The Secret Circle - talk freely (com.easyxapp.secret) Android app version 2.2.00.26 that does not verify X.509 certificates from SSL servers, enabling MITM attackers to spoof servers and obtain sensitive information via crafted certificates. Other connected docum...

5.4CVSS6AI score0.00134EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder