CVE-2023-28835 Insecure randomness for default password in nextcloud

Nextcloud server is an open source home cloud implementation. In affected versions the generated fallback password when creating a share was using a weak complexity random number generator, so when the sharer did not change it the password could be guessable to an attacker willing to brute force...

Insecure randomness for default password in file sharing when password policy app is disabled

None...

Nextcloud 安全特征问题漏洞

Nextcloud is a suite of open source, self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. Nextcloud suffers from a security signature issue vulnerability that stems from the weak complexity of the backup password generated when creating a share,...

PT-2012-4623 · Poul Henning Kamp · Md5Crypt

Name of the Vulnerable Software and Affected Versions: Poul-Henning Kamp md5crypt affected versions not specified Description: The issue concerns the md5crypt algorithm having insufficient complexity and a short runtime, making it easier for attackers to discover cleartext passwords via brute-for...