Known vulnerabilities in nextcloud - page 2

Software: nextcloud
Software CPE: cpe:2.3:o:fedoraproject:nextcloud:*:*:*:*:*:fedora:*:*
Total vulnerabilities: 36
Public exploits: 2
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting nextcloud nextcloud is affected by 36 known vulnerabilities: 8 high, 18 medium, 10 low Critical High Medium Low

Vulnerabilities (36)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU128268 - Origin Validation Error
CVE-2026-30964
CWE-346 Medium
No
No
33.0.1-1.el10_1, 33.0.1-1.fc42 28.04.2026 SB2026042823
SB2026042824
SB2026042825
#VU125779 - Information Exposure Through Timing Discrepancy
CVE-2026-32935
CWE-208 Medium
No
No
33.0.1-1.el10_1, 33.0.1-1.fc42 10.04.2026 SB2026041032
SB2026041043
SB2026041044
and 3 more
#VU124845 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-33916
CWE-79 Medium
No
No
33.0.1-1.el10_1, 33.0.1-1.fc42, 33.0.3-1.el10_2, 33.0.3-1.el10_3, 33.0.3-1.fc42, 33.0.3-1.fc43, 33.0.3-1.fc44 02.04.2026 SB2026040261
SB2026042720
SB2026042824
and 8 more
#VU124842 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-33937
CWE-94 High
Available
No
33.0.3-1.el10_2, 33.0.3-1.el10_3, 33.0.3-1.fc42, 33.0.3-1.fc43, 33.0.3-1.fc44 02.04.2026 SB2026042720
SB2026061912
SB2026061913
and 6 more
#VU124841 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-33938
CWE-94 High
No
No
33.0.3-1.el10_2, 33.0.3-1.el10_3, 33.0.3-1.fc42, 33.0.3-1.fc43, 33.0.3-1.fc44 02.04.2026 SB2026040261
SB2026042720
SB2026061912
and 6 more
#VU123997 - Improper input validation
CVE-2026-2391
CWE-20 Medium
No
No
33.0.1-1.el10_1, 33.0.1-1.fc42 13.03.2026 SB2026031335
SB2026031336
SB2026032417
and 16 more
#VU122452 - Improper Check for Unusual or Exceptional Conditions
CVE-2026-25639
CWE-754 Medium
Available
No
32.0.6-1.el10_1, 32.0.6-1.el10_2, 32.0.6-1.fc42, 32.0.6-1.fc43, 32.0.6-1.fc44 09.02.2026 SB2026020914
SB2026022201
SB2026022202
and 25 more
#VU121928 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2025-13465
CWE-1321 Medium
No
No
32.0.6-1.el10_1, 32.0.6-1.el10_2, 32.0.6-1.fc42, 32.0.6-1.fc43, 32.0.6-1.fc44 22.01.2026 SB2026012209
SB2026012701
SB2026012744
and 71 more
#VU116013 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-54880
CWE-79 Low
No
No
31.0.9-1.el10_1, 31.0.9-1.el10_2, 31.0.9-1.fc41, 31.0.9-1.fc42, 31.0.9-1.fc43, 31.0.9-1.fc44 23.09.2025 SB2025092311
SB2025092318
SB2025092319
and 12 more
#VU116012 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-54881
CWE-79 Low
No
No
31.0.9-1.el10_1, 31.0.9-1.el10_2, 31.0.9-1.fc41, 31.0.9-1.fc42, 31.0.9-1.fc43, 31.0.9-1.fc44 23.09.2025 SB2025092311
SB2025092318
SB2025092319
and 11 more
#VU114312 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-48050
CWE-22 High
No
No
31.0.5-1.fc41, 31.0.5-1.fc42, 31.0.5-1.fc43 20.08.2025 SB20250820123
SB20250820124
SB20250820125
and 15 more
#VU105783 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-26791
CWE-79 Low
No
No
29.0.16-1.el9, 31.0.2-1.fc41, 31.0.2-1.fc42, 31.0.2-1.fc43, 31.0.2-2.fc40 17.03.2025 SB2025031740
SB2025031741
SB2025031771
and 35 more
#VU99965 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2024-50345
CWE-601 Low
No
No
29.0.12-2.el9, 31.0.0-1.fc42, 31.0.0-1.fc43 06.11.2024 SB2024110649
SB2024111157
SB2025021846
and 4 more
#VU96799 - Improper restriction of software interfaces to hardware features
CVE-2024-1545
CWE-1256 Low
No
No
29.0.5-3.el9, 29.0.5-3.fc41, 29.0.5-4.fc39, 29.0.5-4.fc40 04.09.2024 SB2024070499
SB2024090458
SB2024090459
and 7 more
#VU96050 - Server-Side Request Forgery (SSRF)
CVE-2024-39338
CWE-918 Medium
No
No
29.0.5-3.el9, 29.0.5-3.fc41, 29.0.5-3.fc42, 29.0.5-4.fc39, 29.0.5-4.fc40, 29.0.6-1.el9, 29.0.6-1.fc41, 29.0.6-2.fc39, 29.0.6-2.fc40 15.08.2024 SB2024081543
SB2024090326
SB2024090446
and 63 more
#VU84842 - Cryptographic Issues
CVE-2024-1543
CWE-310 Low
No
No
29.0.5-3.el9, 29.0.5-3.fc41, 29.0.5-4.fc39, 29.0.5-4.fc40 28.12.2023 SB2023122813
SB2024090458
SB2024090459
and 7 more


Showing elements 21 - 40 out of 36