Desktop Security Vulnerabilities and Issues — Desktop CVE List

Lucene search

NextcloudDesktop

6 matches found

CVE•added 2022/11/11 7:15 p.m.•103 views

CVE-2022-41882

The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer. In version 3.6.0, if a user received a malicious file share and has it synced locally or the virtual filesystem enabled and clicked a nc://open/ link it will open the default editor for the file ty...

7.8CVSS6.8AI score0.00082EPSS

CVE•added 2020/08/21 9:15 p.m.•67 views

CVE-2020-8227

Missing sanitization of a server response in Nextcloud Desktop Client 2.6.4 for Linux allowed a malicious Nextcloud Server to store files outside of the dedicated sync directory.

7.1CVSS6.4AI score0.20057EPSS

CVE•added 2021/08/18 6:15 p.m.•53 views

CVE-2021-37617

The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with a computer. The Nextcloud Desktop Client invokes its uninstaller script when being installed to make sure there are no remnants of previous installations. In versions 3.0.3 through 3.2.4, the Client searches the ...

7.3CVSS6.9AI score0.00299EPSS

CVE•added 2024/06/14 4:15 p.m.•50 views

CVE-2024-37885

The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer. A code injection in Nextcloud Desktop Client for macOS allowed to load arbitrary code when starting the client with DYLD_INSERT_LIBRARIES set in the enviroment. It is recommended that the Nextcloud...

7.8CVSS4.8AI score0.00041EPSS

CVE•added 2020/08/10 2:15 p.m.•45 views

CVE-2020-8224

A code injection in Nextcloud Desktop Client 2.6.4 allowed to load arbitrary code when placing a malicious OpenSSL config into a fixed directory.

7.8CVSS7.6AI score0.00346EPSS

CVE•added 2020/09/18 9:15 p.m.•41 views

CVE-2020-8225

A cleartext storage of sensitive information in Nextcloud Desktop Client 2.6.4 gave away information about used proxies and their authentication credentials.

7.5CVSS7.4AI score0.01303EPSS