← 返回地图破甲

浏览报告

仅含 CVE

613 份报告 · 本页赏金 $1,520 · 清除筛选

Persistent SMTP header injection via identity `organization` / `name`内存破坏Nextcloud低危—2026-09-18 SMTP header injection via C-escape `\r` in the recipient display name内存破坏Nextcloud低危—2026-10-18 TaskProcessing callback authorization bypass allows ex-members to post as Assistant Talk Bot不安全的直接对象引用Nextcloud低危—2026-08-14 Code injection allows unprivileged local attacker to execute arbitrary code in Nextcloud's OAuth/web renderer process代码执行Nextcloud低危—2026-10-24 files_lock: a write-share collaborator can place a TYPE_TOKEN lock that permanently denies the file owner, survives share revocation and account delet访问控制Nextcloud低危—2026-09-18 Path Traversal in Nextcloud Talk Android Exposes User Credentials and Private Data via FileProvider路径遍历Nextcloud低危—2026-08-24 Files Confidential tagging can be bypassed with # in filename访问控制Nextcloud低危—2026-10-27 Unauthenticated Persistent Denial-of-Service via Federated Share Injection拒绝服务Nextcloud中危—2026-10-27 Critical broken access control: API-only delegated admin can enumerate all Team Folders and grant access to arbitrary groups访问控制Nextcloud低危—2026-09-17 Tables application does not respect sharing limitations set by admin访问控制Nextcloud低危—2026-10-27 Cross-room signaling injection enabling unauthorized force-mute身份认证Nextcloud低危—2026-10-21 Unauthorised access with hidden public link creation when sharing to a Team External Member访问控制Nextcloud低危$1002026-10-27 PIN bypass in PassCodeActivity via back button身份认证Nextcloud低危$1502026-06-07 SSRF via User-Controlled Push proxyServer in Notifications Push Registration服务端请求伪造Nextcloud低危—2026-09-30 Public shares remain accessible via alternate endpoints after owner account is disabled访问控制Nextcloud低危$2702026-10-27 Mail contact autocomplete bypasses administrator-configured user enumeration restrictions and expose member information outside the intended scope信息泄露Nextcloud低危$2502026-09-04 Approval app's file-freshness check can be bypassed by omitting the etag parameter, allowing approval of unreviewed file changes业务逻辑Nextcloud低危$1502026-09-17 Improper input validation in emoji field leads to sidebar UI denial of service业务逻辑Nextcloud低危—2026-09-20 Arbitrary Board Preference Injection via Deck Config API访问控制Nextcloud低危$2002026-09-17 Stored XSS in attachment-display exploitable through SameSite跨站脚本Nextcloud低危—2026-04-19 position: fixed !important bypasses CSS sanitizer's fixed-position mitigation, enabling full-viewport phishing overlays.注入与走私Nextcloud低危—2026-04-20 Unquoted body background attribute enables CSS injection that bypasses remote image blocking注入与走私Nextcloud低危—2026-04-20 SMIL values and by attributes bypass remote image blocking via unvalidated resource-loading animations, enabling email tracking without consent代码执行Nextcloud低危—2026-04-20 SSRF on Nextcloud Whiteboard Application via Recordings to Unauthorised Access to Whiteboards服务端请求伪造Nextcloud低危$2502026-10-27 Group restriction bypass via bearer token in user_oidc (SETTING_RESTRICT_LOGIN_TO_GROUPS not enforced in Backend::getCurrentUserId)访问控制Nextcloud低危$1502026-05-21