Vulnerabilidades

Contacts app for Nextcloud easily syncs contacts from various devices with your Nextcloud and allows editing. The unsanitized SVG is converted to a JavaScript blob (in memory data) that the Avatar can't render. Due to this constellation the missing sanitization does not seem to be exploitable. It is recommended that…

Nextcloud Mail is a mail app in Nextcloud. A blind SSRF attack allowed to send GET requests to services running in the same web server. It is recommended that the Mail app is update to version 3.02, 2.2.5 or 1.15.3.

Nextcloud server is an open source personal cloud implementation. Missing brute-force protection on the WebDAV endpoints via the basic auth header allowed to brute-force user credentials when the provided user name was not an email address. Users from version 24.0.0 onward are affected. This issue has been addressed…

NextCloud Cookbook is a recipe library app. Prior to commit a46d9855 on the `master` branch and commit 489bb744 on the `main-0.9.x` branch, the `pull-checks.yml` workflow is vulnerable to command injection attacks because of using an untrusted `github.head_ref` field. The `github.head_ref` value is an…

Nextcloud server provides a home for data. A regression in the session handling between Nextcloud Server and the Nextcloud Text app prevented a correct destruction of the session on logout if cookies were not cleared manually. After successfully authenticating with any other account the previous session would be…

user_oidc app is an OpenID Connect user backend for Nextcloud. Authentication can be broken/bypassed in user_oidc app. It is recommended that the Nextcloud user_oidc app is upgraded to 1.3.2

Un atacante remoto autenticado puede usar una vulnerabilidad de restricción inadecuada de operaciones dentro de los límites de un búfer de memoria en múltiples versiones de múltiples productos CODESYS para forzar una situación de denegación de servicio.

Un atacante remoto autenticado puede usar una vulnerabilidad de validación de entrada incorrecta en los componentes CmpApp/CmpAppBP/CmpAppForce de múltiples productos CODESYS en múltiples versiones para leer desde una dirección no válida, lo que puede conducir a una condición de denegación de servicio.

En varios productos CODESYS en múltiples versiones, un atacante remoto no autorizado puede usar una vulnerabilidad de validación de entrada incorrecta para leer direcciones no válidas, lo que provoca una denegación de servicio.

Un atacante remoto autenticado puede usar una vulnerabilidad de escritura fuera de los límites basada en la pila en el componente CmpTraceMgr de múltiples productos CODESYS en múltiples versiones para escribir datos en la pila, lo que puede provocar una condición de denegación de servicio, sobrescritura de memoria o…

Un atacante remoto autenticado puede usar una vulnerabilidad de escritura fuera de los límites basada en la pila en el componente CmpTraceMgr de múltiples productos CODESYS en múltiples versiones para escribir datos en la pila, lo que puede provocar una condición de denegación de servicio, sobrescritura de memoria o…

Un atacante remoto autenticado puede usar una vulnerabilidad de escritura fuera de los límites basada en la pila en el componente CmpTraceMgr de múltiples productos CODESYS en múltiples versiones para escribir datos en la pila, lo que puede provocar una condición de denegación de servicio, sobrescritura de memoria o…

Un atacante remoto autenticado puede usar una vulnerabilidad de escritura fuera de los límites basada en pila en el componente CmpTraceMgr de múltiples productos CODESYS en múltiples versiones para escribir datos en la pila, lo que puede provocar una condición de denegación de servicio, sobrescritura de memoria o…

Un atacante remoto autenticado puede usar una vulnerabilidad de escritura fuera de los límites basada en la pila en el componente CmpTraceMgr de múltiples productos CODESYS en múltiples versiones para escribir datos en la pila, lo que puede provocar una condición de denegación de servicio, sobrescritura de memoria o…

An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpAppForce Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution.

An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution.

An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution.

An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution.

An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution.

An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution.

An authenticated, remote attacker may use a out-of-bounds write vulnerability in multiple CODESYS products in multiple versions to write data into memory which can lead to a denial-of-service condition, memory overwriting, or remote code execution.

Multiple CODESYS products in multiple versions are prone to a improper input validation vulnerability. An authenticated remote attacker may craft specific requests that use the vulnerability leading to a denial-of-service condition.

Improper Input Validation vulnerability in multiple CODESYS V3 products allows an authenticated remote attacker to block consecutive logins of a specific type.

Authentication bypass vulnerability in NEXT ENGINE Integration Plugin (for EC-CUBE 2.0 series) all versions allows a remote unauthenticated attacker to alter the information stored in the system.

A vulnerability was found in NEXTU NEXT-7004N 3.0.1. It has been classified as problematic. Affected is an unknown function of the file /boafrm/formFilter of the component POST Request Handler. The manipulation of the argument url with the input <svg onload=alert(1337)> leads to cross site scripting. It is possible to…