Team IT Security (TSEC) Nachrichtenportal Logo


🕵️ CVE-2024-37887 | Nextcloud Server up to 27.1.9/28.0.5/29.0.0 Calendar Event access control (GHSA-h4xv-cjpm-j595)


Nachrichtenbereich: 🕵️ Sicherheitslücken
🔗 Quelle: vuldb.com

A vulnerability has been found in Nextcloud Server up to 27.1.9/28.0.5/29.0.0 and classified as critical. This vulnerability affects unknown code of the component Calendar Event Handler. The manipulation leads to improper access controls. This vulnerability was named CVE-2024-37887. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component. ...

Sharing is caring on Social Media

Reddit
Telegram
LinkedIn
Xing
Twitter
Whatsapp
Facebook
Flipboard

🕵️ CVE-2023-48303 | Nextcloud Server/Enterprise Server up to 25.0.11/27.1.0 on Nextcloud External Storage access control (GHSA-2448-44rp-c7hh)


📈 51.03 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-48304 | Nextcloud Server/Enterprise Server up to 27.1.0 Birthday Calendar authorization (GHSA-8jwv-c8c8-9fr3)


📈 40.07 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-25159 | Nextcloud Server/Enterprise Server/Office Preview access control (GHSA-92g2-h5jv-jjmg)


📈 39.17 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-48239 | Nextcloud Server/Enterprise Server up to 27.1.3 External Storage access control (GHSA-f962-hw26-g267)


📈 39.17 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-32062 | oroinc crm up to 4.2.6/5.0.6/5.1.0 System Calendar Event access control (GHSA-x2xm-p6vq-482g)


📈 38.12 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-41968 | Nextcloud Server up to 23.0.9/24.0.4 Calendar Name resource consumption (GHSA-m92j-xxc8-hq3v)


📈 36.73 Punkte
🕵️ Sicherheitslücken

🕵️ Medium CVE-2017-17616: Event calendar category script project Event calendar category script


📈 36.13 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-28844 | Nextcloud Server 24.0.10/25.0.4 access control (GHSA-w47p-f66h-h2vj)


📈 35.83 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-39801 | SAP GRC Access control Emergency Access Management Firefighter Session access control (GHSA-jjjv-grgr-v8h3)


📈 35.46 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-36075 | Nextcloud Files Access Control prior 1.12.2/1.13.1/1.14.1 Filename information disclosure (GHSA-4m73-g7v7-v62w)


📈 32.48 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-25150 | Nextcloud Office Richdocuments Collabora access control (GHSA-64xc-r58v-53gj)


📈 32.48 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-25821 | Nextcloud up to 24.0.6/25.0.0 Secure View access control (GHSA-7w6h-5qgw-4j94)


📈 32.48 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-28645 | Nextcloud Richdocuments up to 6.3.1/7.0.1 Internal API Endpoint access control (GHSA-95j6-p5cj-5hh5)


📈 32.48 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-48306 | Nextcloud Server/Enterprise Server prior 27.1.0 DNS Pin Middleware server-side request forgery (GHSA-8f69-f9jg-4x3v)


📈 32.43 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-41918 | OpenSearch up to 1.3.6/2.3.x Access Control Rules access control (GHSA-wmx7-x4jp-9jgg)


📈 30.71 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2020-8118 | Nextcloud Server 16.0.1 Calendar Application server-side request forgery


📈 30.66 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-39211 | Nextcloud Server prior 22.2.10.4/23.0.8/24.0.4 Webservice server-side request forgery (GHSA-rmf9-w497-8cq8)


📈 29.08 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-39330 | Nextcloud Server/Enterprise Server resource consumption (GHSA-wxx7-w5p4-7x4c)


📈 29.08 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-39329 | Nextcloud Server/Enterprise Server improper authorization (GHSA-8f3p-rcm5-mrg3)


📈 29.08 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-39364 | Nextcloud Server/Enterprise Server cleartext storage (GHSA-qpf5-jj85-36h5)


📈 29.08 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-25161 | Nextcloud Server/Enterprise Server up to 23.0.11/24.0.7/25.0.0 Password Reset denial of service (GHSA-492h-596q-xr2f)


📈 29.08 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-39960 | Nextcloud Server/Enterprise Server WebDAV API excessive authentication (GHSA-2hrc-5fgp-c9c9)


📈 29.08 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-48301 | Nextcloud Server/Enterprise Server up to 25.0.13/26.0.8/27.1.3 Search UI cross site scripting (GHSA-wgpw-qqq2-gwv6)


📈 29.08 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-48302 | Nextcloud Server/Enterprise Server up to 25.0.13/26.0.8/27.1.3 HTML Code cross site scripting (GHSA-p7g9-x25m-4h87)


📈 29.08 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-49792 | Nextcloud Server/Enterprise Server excessive authentication (GHSA-5j2p-q736-hw98)


📈 29.08 Punkte
🕵️ Sicherheitslücken

🕵️ Nextcloud: [nextcloud.com] Control character allowed in Submit Question


📈 29.05 Punkte
🕵️ Sicherheitslücken

🕵️ Codewalkers PHP Event Calendar calendar.php id sql injection


📈 28.48 Punkte
🕵️ Sicherheitslücken

🕵️ Low CVE-2020-8117: Nextcloud Nextcloud server


📈 28.2 Punkte
🕵️ Sicherheitslücken

🕵️ Medium CVE-2019-15623: Nextcloud Nextcloud server


📈 28.2 Punkte
🕵️ Sicherheitslücken

🕵️ Low CVE-2019-15618: Nextcloud Nextcloud server


📈 28.2 Punkte
🕵️ Sicherheitslücken

🕵️ Low CVE-2020-8119: Nextcloud Nextcloud server


📈 28.2 Punkte
🕵️ Sicherheitslücken

🕵️ Low CVE-2020-8139: Nextcloud Nextcloud server


📈 28.2 Punkte
🕵️ Sicherheitslücken

🕵️ Medium CVE-2020-8154: Nextcloud Nextcloud server


📈 28.2 Punkte
🕵️ Sicherheitslücken

🕵️ Low CVE-2020-8155: Nextcloud Nextcloud server


📈 28.2 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-43658 | dicourse-calendar Event Title cross site scripting (GHSA-3fwj-f6ww-7hr6)


📈 28.04 Punkte
🕵️ Sicherheitslücken

matomo
•