https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 01:35:33 +0000 https://cve.radiocsirt.org/vuln/certfr-2021-avi-821 certfr-2021-avi-821 https://cve.radiocsirt.org/vuln/certfr-2021-avi-821 https://cve.radiocsirt.org/vuln/cnvd-2021-102880 cnvd-2021-102880 https://cve.radiocsirt.org/vuln/cnvd-2021-102880 https://cve.radiocsirt.org/vuln/euvd-2026-31544 EUVD-2026-31544 https://cve.radiocsirt.org/vuln/euvd-2026-31544 https://cve.radiocsirt.org/vuln/fkie_cve-2021-41178 <p>Nextcloud is an open-source, self-hosted productivity platform. Prior to versions 20.0.13, 21.0.5, and 22.2.0, a file traversal vulnerability makes an attacker able to download arbitrary SVG images from the host system, including user provided files. This could also be leveraged into a XSS/phishing attack, an attacker could upload a malicious SVG file that mimics the Nextcloud login form and send a specially crafted link to victims. The XSS risk here is mitigated due to the fact that Nextcloud employs a strict Content-Security-Policy disallowing execution of arbitrary JavaScript. It is recommended that the Nextcloud Server be upgraded to 20.0.13, 21.0.5 or 22.2.0. There are no known workarounds aside from upgrading.</p> <p>Nextcloud is an open-source, self-hosted productivity platform. Prior to versions 20.0.13, 21.0.5, and 22.2.0, a file traversal vulnerability makes an attacker able to download arbitrary SVG images from the host system, including user provided files. This could also be leveraged into a XSS/phishing attack, an attacker could upload a malicious SVG file that mimics the Nextcloud login form and send a specially crafted link to victims. The XSS risk here is mitigated due to the fact that Nextcloud employs a strict Content-Security-Policy disallowing execution of arbitrary JavaScript. It is recommended that the Nextcloud Server be upgraded to 20.0.13, 21.0.5 or 22.2.0. There are no known workarounds aside from upgrading.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-41178 https://cve.radiocsirt.org/vuln/gsd-2021-41178 gsd-2021-41178 https://cve.radiocsirt.org/vuln/gsd-2021-41178 https://cve.radiocsirt.org/vuln/opensuse-su-2021:1602-1 <p>Security update for nextcloud</p> <p>Security update for nextcloud</p> https://cve.radiocsirt.org/vuln/opensuse-su-2021:1602-1