Known vulnerabilities in Nextcloud iOS App

Vendor: Nextcloud
Software CPE: cpe:2.3:a:nextcloud:ios:*:*:*:*:*:*:*:*
Total vulnerabilities: 58
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Nextcloud iOS App Nextcloud iOS App is affected by 58 known vulnerabilities: 4 high, 47 medium, 7 low Critical High Medium Low

Vulnerabilities (58)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU74348 - Improper Authentication
CVE-2023-28647
CWE-287 Low
No
No
4.7.0 04.04.2023 SB2023040410
#VU53818 - Exposure of sensitive information to an unauthorized actor
CVE-2021-22912
CWE-200 Medium
No
No
3.4.2 04.06.2021 SB2021060410
#VU35471 - Buffer overflow
CVE-2019-12655
CWE-120 Medium
No
No
- 25.09.2019 SB2019092526
#VU35472 - Improper input validation
CVE-2019-12656
CWE-20 Medium
No
No
- 25.09.2019 SB2019092527
#VU35473 - Improper Link Resolution Before File Access ('Link Following')
CVE-2019-12672
CWE-59 Medium
No
No
- 25.09.2019 SB2019092528
#VU35474 - Improper Verification of Cryptographic Signature
CVE-2019-12649
CWE-347 Low
No
No
- 25.09.2019 SB2019092528
#VU35475 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2019-12650
CWE-78 High
No
No
- 25.09.2019 SB2019092529
#VU35476 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2019-12651
CWE-78 High
No
No
- 25.09.2019 SB2019092529
#VU40707 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2015-4199
CWE-362 Medium
No
No
- 27.06.2015 SB2015062701
#VU41288 - Memory corruption
CVE-2014-3361
CWE-119 Medium
No
No
- 25.09.2014 SB2014032702
#VU41770 - Improper input validation
CVE-2012-3062
CWE-20 Medium
No
No
- 23.04.2014 SB2013110803
#VU41771 - Improper input validation
CVE-2012-4638
CWE-20 Medium
No
No
- 23.04.2014 SB2013110803
#VU41773 - Missing release of memory after effective lifetime
CVE-2012-0360
CWE-401 Medium
No
No
- 23.04.2014 SB2013110803
#VU41774 - Memory corruption
CVE-2012-1317
CWE-119 Medium
No
No
- 23.04.2014 SB2013110803
#VU41883 - Improper input validation
CVE-2014-2109
CWE-20 Medium
No
No
- 27.03.2014 SB2014032702
#VU41884 - Improper input validation
CVE-2014-2111
CWE-20 Medium
No
No
- 27.03.2014 SB2014032702
#VU41885 - Improper input validation
CVE-2014-2112
CWE-20 Medium
No
No
- 27.03.2014 SB2014032702
#VU42387 - Resource Management Errors
CVE-2013-5553
CWE-399 Medium
No
No
- 08.11.2013 SB2013110803
#VU42526 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2013-5474
CWE-362 Medium
No
No
- 27.09.2013 SB2013092701
#VU42527 - Improper input validation
CVE-2013-5476
CWE-20 Medium
No
No
- 27.09.2013 SB2013092702


Showing elements 1 - 20 out of 58