Filtered by vendor Nextcloud Subscriptions
Filtered by product Desktop Subscriptions
Total 24 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2020-8224 1 Nextcloud 1 Desktop 2024-11-21 7.8 High
A code injection in Nextcloud Desktop Client 2.6.4 allowed to load arbitrary code when placing a malicious OpenSSL config into a fixed directory.
CVE-2020-8189 1 Nextcloud 1 Desktop 2024-11-21 5.4 Medium
A cross-site scripting error in Nextcloud Desktop client 2.6.4 allowed to present any html (including local links) when responding with invalid data on the login attempt.
CVE-2020-8140 2 Apple, Nextcloud 2 Macos, Desktop 2024-11-21 6.7 Medium
A code injection in Nextcloud Desktop Client 2.6.2 for macOS allowed to load arbitrary code when starting the client with DYLD_INSERT_LIBRARIES set in the environment.
CVE-2024-46958 2 Linux, Nextcloud 2 Linux Kernel, Desktop 2024-09-21 9.1 Critical
In Nextcloud Desktop Client 3.13.1 through 3.13.3 on Linux, synchronized files (between the server and client) may become world writable or world readable. This is fixed in 3.13.4.