Server Security Vulnerabilities and Issues — Server CVE List

Lucene search

NextcloudServer

3 matches found

CVE•added 2021/01/26 6:16 p.m.•136 views

CVE-2020-8295

A wrong check in Nextcloud Server 19 and prior allowed to perform a denial of service attack when resetting the password for a user.

7.5CVSS7.3AI score0.00508EPSS

CVE•added 2020/05/12 1:15 p.m.•131 views

CVE-2020-8154

An Insecure direct object reference vulnerability in Nextcloud Server 18.0.2 allowed an attacker to remote wipe devices of other users when sending a malicious request directly to the endpoint.

7.7CVSS7.4AI score0.00964EPSS

CVE•added 2020/11/02 9:15 p.m.•126 views

CVE-2020-8183

A logic error in Nextcloud Server 19.0.0 caused a plaintext storage of the share password when it was given on the initial create API call.

7.5CVSS7.5AI score0.00952EPSS