Known vulnerabilities in nextcloud - page 2
Vendor:
Fedoraproject
Software:
nextcloud
Software CPE:
cpe:2.3:o:fedoraproject:nextcloud:*:*:*:*:*:fedora:*:*
Website:
https://getfedora.org/
Total vulnerabilities:
36
Public exploits:
2
Known exploited (KEV):
0
Breakdown by Severity Chart
34.0.4-1.el10_2
34.0.4-1.el10_4
34.0.4-1.fc43
34.0.4-1.fc44
34.0.4-1.fc45
34.0.3-1.el10_2
34.0.3-1.fc44
34.0.3-1.el10_3
34.0.2-1.fc43
34.0.2-1.el10_2
34.0.2-1.el10_3
34.0.2-1.fc44
33.0.6-1.el10_2
33.0.6-1.el10_3
33.0.6-1.fc43
33.0.6-1.fc44
33.0.5-1.el10_2
33.0.5-1.el10_3
33.0.5-1.fc43
33.0.5-1.fc44
33.0.4-1.el10_2
33.0.4-1.fc43
33.0.4-1.el10_3
33.0.4-1.fc44
33.0.3-1.fc42
33.0.3-1.el10_1
33.0.3-1.el10_2
33.0.3-1.el10_3
33.0.3-1.fc43
33.0.3-1.fc44
33.0.1-1.fc42
33.0.1-1.el10_1
32.0.6-1.el10_2
32.0.6-1.fc42
32.0.6-1.el10_1
32.0.6-1.fc44
32.0.6-1.fc43
31.0.9-1.el10_1
31.0.9-1.el10_2
31.0.9-1.fc41
31.0.9-1.fc42
31.0.9-1.fc43
31.0.9-1.fc44
31.0.5-1.fc41
31.0.5-1.fc42
31.0.5-1.fc43
19.0.3-1.fc33
18.0.9-1.fc32
29.0.16-1.el9
31.0.2-2.fc40
31.0.2-1.fc41
31.0.2-1.fc42
31.0.2-1.fc43
29.0.12-2.el9
31.0.0-1.fc42
31.0.0-1.fc43
25.0.1-1.fc35
25.0.1-1.fc36
25.0.1-1.fc37
nextcloud_stable-3420210712183013.058368ca
nextcloud_21-3420210712182939.058368ca
nextcloud_stable-3320210712183013.601d93de
nextcloud_21-3320210712182939.601d93de
nextcloud_stable-820210712183013.9edba152
nextcloud_21-820210712182939.9edba152
nextcloud_20-3320210712182853.601d93de
nextcloud_20-3420210712182853.058368ca
nextcloud_20-820210712182853.9edba152
nextcloud_19-3420210712182738.058368ca
nextcloud_19-3320210712182738.601d93de
nextcloud_19-820210712182738.9edba152
20.0.11-1.fc34
19.0.13-1.fc33
nextcloud_stable-820210630133028.9edba152
nextcloud_21-820210630133336.9edba152
nextcloud_stable-3420210630133028.058368ca
nextcloud_21-3420210630133336.058368ca
nextcloud_stable-3320210630133028.601d93de
nextcloud_21-3320210630133336.601d93de
nextcloud_20-820210630133442.9edba152
20.0.10-1.fc34
nextcloud_20-3320210630133442.601d93de
nextcloud_20-3420210630133442.058368ca
nextcloud_19-820210630133545.9edba152
nextcloud_19-3420210630133545.058368ca
nextcloud_19-3320210630133545.601d93de
19.0.12-1.fc33
29.0.6-2.fc40
29.0.6-1.fc41
29.0.6-1.el9
29.0.6-2.fc39
29.0.5-3.el9
29.0.5-4.fc39
29.0.5-4.fc40
29.0.5-3.fc41
29.0.5-3.fc42
28.0.5-2.fc39
28.0.5-2.fc40
Vulnerabilities (36)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU128268 - Origin Validation Error CVE-2026-30964 |
CWE-346 | Medium | 33.0.1-1.el10_1, 33.0.1-1.fc42 | 28.04.2026 |
SB2026042823 SB2026042824 SB2026042825 |
||
| #VU125779 - Information Exposure Through Timing Discrepancy CVE-2026-32935 |
CWE-208 | Medium | 33.0.1-1.el10_1, 33.0.1-1.fc42 | 10.04.2026 |
SB2026041032 SB2026041043 SB2026041044 and 3 more |
||
| #VU124845 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-33916 |
CWE-79 | Medium | 33.0.1-1.el10_1, 33.0.1-1.fc42, 33.0.3-1.el10_2, 33.0.3-1.el10_3, 33.0.3-1.fc42, 33.0.3-1.fc43, 33.0.3-1.fc44 | 02.04.2026 |
SB2026040261 SB2026042720 SB2026042824 and 8 more |
||
| #VU124842 - Improper Control of Generation of Code ('Code Injection') CVE-2026-33937 |
CWE-94 | High | 33.0.3-1.el10_2, 33.0.3-1.el10_3, 33.0.3-1.fc42, 33.0.3-1.fc43, 33.0.3-1.fc44 | 02.04.2026 |
SB2026042720 SB2026061912 SB2026061913 and 6 more |
||
| #VU124841 - Improper Control of Generation of Code ('Code Injection') CVE-2026-33938 |
CWE-94 | High | 33.0.3-1.el10_2, 33.0.3-1.el10_3, 33.0.3-1.fc42, 33.0.3-1.fc43, 33.0.3-1.fc44 | 02.04.2026 |
SB2026040261 SB2026042720 SB2026061912 and 6 more |
||
| #VU123997 - Improper input validation CVE-2026-2391 |
CWE-20 | Medium | 33.0.1-1.el10_1, 33.0.1-1.fc42 | 13.03.2026 |
SB2026031335 SB2026031336 SB2026032417 and 16 more |
||
| #VU122452 - Improper Check for Unusual or Exceptional Conditions CVE-2026-25639 |
CWE-754 | Medium | 32.0.6-1.el10_1, 32.0.6-1.el10_2, 32.0.6-1.fc42, 32.0.6-1.fc43, 32.0.6-1.fc44 | 09.02.2026 |
SB2026020914 SB2026022201 SB2026022202 and 25 more |
||
| #VU121928 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\') CVE-2025-13465 |
CWE-1321 | Medium | 32.0.6-1.el10_1, 32.0.6-1.el10_2, 32.0.6-1.fc42, 32.0.6-1.fc43, 32.0.6-1.fc44 | 22.01.2026 |
SB2026012209 SB2026012701 SB2026012744 and 71 more |
||
| #VU116013 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-54880 |
CWE-79 | Low | 31.0.9-1.el10_1, 31.0.9-1.el10_2, 31.0.9-1.fc41, 31.0.9-1.fc42, 31.0.9-1.fc43, 31.0.9-1.fc44 | 23.09.2025 |
SB2025092311 SB2025092318 SB2025092319 and 12 more |
||
| #VU116012 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-54881 |
CWE-79 | Low | 31.0.9-1.el10_1, 31.0.9-1.el10_2, 31.0.9-1.fc41, 31.0.9-1.fc42, 31.0.9-1.fc43, 31.0.9-1.fc44 | 23.09.2025 |
SB2025092311 SB2025092318 SB2025092319 and 11 more |
||
| #VU114312 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2025-48050 |
CWE-22 | High | 31.0.5-1.fc41, 31.0.5-1.fc42, 31.0.5-1.fc43 | 20.08.2025 |
SB20250820123 SB20250820124 SB20250820125 and 15 more |
||
| #VU105783 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-26791 |
CWE-79 | Low | 29.0.16-1.el9, 31.0.2-1.fc41, 31.0.2-1.fc42, 31.0.2-1.fc43, 31.0.2-2.fc40 | 17.03.2025 |
SB2025031740 SB2025031741 SB2025031771 and 35 more |
||
| #VU99965 - URL Redirection to Untrusted Site ('Open Redirect') CVE-2024-50345 |
CWE-601 | Low | 29.0.12-2.el9, 31.0.0-1.fc42, 31.0.0-1.fc43 | 06.11.2024 |
SB2024110649 SB2024111157 SB2025021846 and 4 more |
||
| #VU96799 - Improper restriction of software interfaces to hardware features CVE-2024-1545 |
CWE-1256 | Low | 29.0.5-3.el9, 29.0.5-3.fc41, 29.0.5-4.fc39, 29.0.5-4.fc40 | 04.09.2024 |
SB2024070499 SB2024090458 SB2024090459 and 7 more |
||
| #VU96050 - Server-Side Request Forgery (SSRF) CVE-2024-39338 |
CWE-918 | Medium | 29.0.5-3.el9, 29.0.5-3.fc41, 29.0.5-3.fc42, 29.0.5-4.fc39, 29.0.5-4.fc40, 29.0.6-1.el9, 29.0.6-1.fc41, 29.0.6-2.fc39, 29.0.6-2.fc40 | 15.08.2024 |
SB2024081543 SB2024090326 SB2024090446 and 63 more |
||
| #VU84842 - Cryptographic Issues CVE-2024-1543 |
CWE-310 | Low | 29.0.5-3.el9, 29.0.5-3.fc41, 29.0.5-4.fc39, 29.0.5-4.fc40 | 28.12.2023 |
SB2023122813 SB2024090458 SB2024090459 and 7 more |
Showing elements 21 - 40 out of 36