Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownMissing URL validation allowed RCE for the server on the Desktop clientOpen the advisoryFeb 24, 2021
- UnknownReflected XSS when renaming malicious fileOpen the advisoryJan 25, 2021
- UnknownExternal storage credentials stored for wrong userOpen the advisoryJan 25, 2021
- UnknownStored XSS in markdown file with Nextcloud Talk using Internet ExplorerOpen the advisoryNov 18, 2020
- UnknownPotential DDoS when posting long data into workflow validation rulesOpen the advisoryNov 18, 2020
- UnknownXSS through image upload of contacts using svg fileOpen the advisoryOct 20, 2020
- UnknownXSS through image upload on contacts using svg file with png extensionOpen the advisoryOct 20, 2020
- UnknownSocial App does not validate server certificates for outgoing connectionsOpen the advisoryOct 15, 2020
- UnknownImproper access control to messages of Social appOpen the advisoryOct 15, 2020
- UnknownDenial of Service by requesting to reset a passwordOpen the advisoryOct 3, 2020
- UnknownImproper integrity protection of server-side encryption keysOpen the advisoryOct 3, 2020
- UnknownImproper confidentiality protection of server-side encryption keysOpen the advisoryOct 3, 2020
- UnknownExternal storage app saves password for all users in the databaseOpen the advisoryOct 3, 2020
- UnknownDowngrade encryption scheme and break integrity through known-plaintext attackOpen the advisoryAug 26, 2020
- UnknownMessage Authentication Codes calculated by the Default Encryption Module allow an attacker to silently overwrite blocks in a fileOpen the advisoryAug 26, 2020
- UnknownPIN for passwordless WebAuthn is asked for but not verifiedOpen the advisoryAug 25, 2020
- UnknownMissing rate limit on signup pageOpen the advisoryAug 3, 2020
- UnknownRe-Sharing allows increase of privilegesOpen the advisoryJul 16, 2020
- UnknownAccess control missing while viewing the attachments in the 'All boards'Open the advisoryJul 15, 2020
- UnknownMissing memory corruption protection on Windows release builtOpen the advisoryJul 10, 2020
- UnknownMemory Leak in OCUtil.dll library in Desktop client can lead to DoSOpen the advisoryJul 10, 2020
- UnknownLinux client is vulnerable to directory traversal when downloading filesOpen the advisoryJul 10, 2020
- UnknownClear text storage of proxy parameters and passwordsOpen the advisoryJul 10, 2020
- UnknownArbitrary code execution in desktop client via OpenSSL configOpen the advisoryJul 10, 2020
- UnknownXSS in desktop client via invalid server address on login formOpen the advisoryJul 10, 2020
Sort