Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 27

Export CSV
CVE-2020-8230

A memory corruption vulnerability exists in NextCloud Desktop Client v2.6.4 where missing ASLR and DEP protections in for windows allowed to corrupt memory.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Nextcloud
Products
Desktop
CVE-2020-8229

A memory leak in the OCUtil.dll library used by Nextcloud Desktop Client 2.6.4 can lead to a DoS against the host system.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Nextcloud
Products
Desktop
CVE-2020-8227

Missing sanitization of a server response in Nextcloud Desktop Client 2.6.4 for Linux allowed a malicious Nextcloud Server to store files outside of the dedicated sync directory.

CVSS 3.1 · 6.8 Medium EPSS 25.8% KEV · Not listed
Vendors
Linux Nextcloud
Products
Linux Kernel Desktop
CVE-2020-8225

A cleartext storage of sensitive information in Nextcloud Desktop Client 2.6.4 gave away information about used proxies and their authentication credentials.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Nextcloud
Products
Desktop
CVE-2020-8224

A code injection in Nextcloud Desktop Client 2.6.4 allowed to load arbitrary code when placing a malicious OpenSSL config into a fixed directory.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Nextcloud
Products
Desktop
CVE-2020-8189

A cross-site scripting error in Nextcloud Desktop client 2.6.4 allowed to present any html (including local links) when responding with invalid data on the login attempt.

CVSS 3.1 · 5.4 Medium EPSS 1.4% KEV · Not listed
Vendors
Nextcloud
Products
Desktop
CVE-2020-8140

A code injection in Nextcloud Desktop Client 2.6.2 for macOS allowed to load arbitrary code when starting the client with DYLD_INSERT_LIBRARIES set in the environment.

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed
Vendors
Apple Nextcloud
Products
Macos Desktop