Tracking information on product : Nextcloud

Subscribe to notifications (Beta)


Details


History

Date Extract
2020-11-19 00:02:17 Update
2020-10-24 12:03:32 Update
2020-10-08 12:02:05 Update
2020-10-03 12:02:27 Update
2020-09-10 00:01:58 Update
2020-08-27 00:04:29 Update
2020-07-17 14:37:22 Update
2020-05-11 21:36:55 Update
2020-05-11 18:02:16 Update
2020-05-11 12:03:07 Update
2020-05-11 06:02:20 Update
2020-05-11 00:02:50 Update
2020-05-10 18:07:03 Update
2020-05-10 12:02:25 Update
2020-05-10 06:05:10 Update
2020-05-10 00:02:20 Update
2020-05-09 18:04:16 Update
2020-05-09 12:02:41 Update
2020-05-09 06:04:53 Update
2020-05-09 00:02:55 Update
2020-05-08 18:02:20 Update
2020-05-08 12:02:24 Update
2020-05-08 06:03:00 Update
2020-05-07 18:02:25 Update
2020-05-07 12:03:23 Update
2020-05-07 06:03:27 Update
2020-05-07 00:04:17 Update
2020-05-06 18:02:31 Update
2020-05-06 12:02:48 Update
2020-05-06 06:02:18 Update
2020-05-06 00:07:04 Update
2020-05-05 18:02:41 Update
2020-05-05 12:02:34 Update
2020-05-05 00:03:00 Update
2020-05-04 18:05:38 Update
2020-05-04 12:02:37 Update
2020-05-03 18:06:52 Update
2020-05-03 12:07:08 Update
2020-04-22 22:02:31 Update
2020-03-23 12:02:41 Update
2020-03-11 18:02:26 Update
2020-02-21 21:20:49 Update
2020-01-30 00:02:41 Update
2020-01-18 00:03:33 Update
2019-12-19 18:03:14 Update
2019-11-08 00:02:29 Update
2019-09-26 12:03:01 Update
2019-09-26 00:03:21 Update
2019-08-15 00:02:23 Update
2019-07-10 00:02:47 Update
2019-07-08 12:03:13 Update
2019-07-04 18:04:15 Update
2019-05-17 18:02:55 Update
2019-05-16 18:02:50 Update
2019-04-25 00:02:42 Update
2019-04-10 12:04:31 Update
2019-04-07 00:40:38 Update
2019-02-28 12:36:02 Update
2019-02-07 12:35:44 Update
2019-02-07 06:26:52 Update
2019-01-26 06:27:13 Update
2019-01-26 06:26:16 Update
2019-01-26 06:26:16 Update
2019-01-26 06:26:16 Update
2019-01-25 06:27:09 Update
2019-01-25 00:31:05 Update
2019-01-24 18:26:14 Update
2019-01-24 12:02:53 Update
2019-01-24 06:27:12 Update
2019-01-24 00:40:43 Update
2019-01-23 18:40:42 Update
2019-01-23 12:26:11 Update
2019-01-23 06:25:57 Update
2019-01-23 00:40:48 Update
2019-01-22 18:40:46 Update
2019-01-22 12:05:42 Update
2019-01-22 06:27:12 Update
2019-01-22 00:30:47 Update
2019-01-21 18:30:55 Update
2019-01-21 12:26:09 Update
2019-01-21 06:02:34 Update
2019-01-21 00:04:34 Update
2019-01-20 18:16:26 Update
2019-01-20 12:02:46 Update
2019-01-20 06:26:28 Update
2019-01-18 18:02:35 Update
2019-01-18 12:02:38 Update
2019-01-18 06:27:17 Update
2019-01-18 00:35:51 Update
2019-01-17 18:35:49 Update
2019-01-17 12:26:10 Update
2019-01-17 06:21:26 Update
2019-01-17 00:02:46 Update
2019-01-16 18:02:35 Update
2019-01-16 12:02:47 Update
2019-01-16 06:27:16 Update
2019-01-16 00:40:45 Update
2019-01-15 18:40:53 Update
2019-01-15 12:26:17 Update
2019-01-15 06:02:55 Update
2019-01-15 00:02:54 Update
2019-01-14 18:35:47 Update
2019-01-14 12:31:09 Update
2019-01-14 06:02:32 Update
2019-01-14 00:02:28 Update
2019-01-13 18:02:21 Update
2019-01-13 12:02:23 Update
2019-01-13 06:02:28 Update
2019-01-13 00:02:23 Update
2019-01-11 18:02:42 Update
2019-01-10 18:02:30 Update
2018-12-13 18:02:54 Update
2018-11-22 18:35:42 Update
2018-10-12 12:02:29 Update
2018-10-11 12:02:32 Update
2018-09-25 12:02:36 Update
2018-09-06 12:36:50 Update
2018-08-30 18:02:55 Update
2018-07-23 18:02:47 Update
2018-06-11 12:02:48 Update
2018-06-07 18:03:02 Update
2018-04-26 12:03:31 Update
2018-03-15 12:07:08 Update
2018-02-06 12:06:50 Update
2018-01-24 12:02:46 Update
2017-12-04 12:03:13 Update
2017-09-20 18:03:22 Update
2017-08-14 18:02:24 Update
2017-08-07 12:02:57 Update
2017-05-22 12:04:44 Update
2017-04-24 12:07:16 Update
2017-02-27 12:02:25 Update
2017-01-15 18:02:37 Update
2016-12-13 00:02:31 Update
2016-12-09 12:07:28 Update
2016-09-30 12:10:37 Update
2016-09-29 00:04:22 Update
2016-08-25 12:12:14 Update
2016-07-28 18:04:51 Update
2016-07-28 12:03:54 Update

Vulnerabilities

Date titre site
2020-11-17 00:02:30 Insufficient protection of the server-side encryption keys in Nextcloud Server 19.0.1 allowed an attacker to replace the encryption keys.
2020-11-17 00:02:30 Insufficient protection of the server-side encryption keys in Nextcloud Server 19.0.1 allowed an attacker to replace the public key to decrypt them later on.
2020-11-10 06:02:15 A cryptographic issue in Nextcloud Server 19.0.1 allowed an attacker to downgrade the encryption scheme and break the integrity of encrypted files.
2020-11-10 06:02:15 A wrong generation of the passphrase for the encrypted block in Nextcloud Server 19.0.1 allowed an attacker to overwrite blocks in a file.
2020-11-03 06:02:05 A wrong configuration in Nextcloud Server 19.0.1 incorrectly made the user feel the passwordless WebAuthn is also a two factor verification by asking for the PIN of the passwordless WebAuthn but not verifying it.
2020-11-03 06:02:05 A logic error in Nextcloud Server 19.0.0 caused a plaintext storage of the share password when it was given on the initial create API call.
2020-11-03 06:02:05 A too small set of random characters being used for encryption in Nextcloud Server 18.0.4 allowed decryption in shorter time than intended.
2020-10-11 18:01:10 [security-announce] openSUSE-SU-2020:1652-1: moderate: Security update for nextcloud
2020-10-11 18:01:10 [security-announce] openSUSE-SU-2020:1652-1: moderate: Security update for nextcloud
2020-09-19 18:01:57 Nextcloud -- Password share by mail not hashed
2020-08-22 06:01:51 Missing sanitization of a server response in Nextcloud Desktop Client 2.6.4 for Linux allowed a malicious Nextcloud Server to store files outside of the dedicated sync directory.
2020-08-22 06:01:51 A cross-site scripting error in Nextcloud Desktop client 2.6.4 allowed to present any html (including local links) when responding with invalid data on the login attempt.
2020-07-20 09:59:47 [security-announce] openSUSE-SU-2020:0667-1: moderate: Security update for nextcloud
2020-07-20 09:59:47 [security-announce] openSUSE-SU-2020:0668-1: moderate: Security update for nextcloud
2020-07-20 09:59:47 [security-announce] openSUSE-SU-2020:0670-1: moderate: Security update for nextcloud
2020-04-23 16:02:18 Nextcloud -- multiple vulnerabilities
2019-11-10 00:00:30 Nextcloud 17 Cross-Site Request Forgery
2019-11-08 18:00:46 Nextcloud 17 Cross Site Request Forgery
2018-08-27 12:01:30 NextCloud : Cross Site Scripting via Autocomplete Field
2018-08-14 12:00:25 Nextcloud Talk Autocomplete Stored cross site scripting