Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 05:49:44 +0000 certfr-2022-avi-1057 — De multiples vulnérabilités ont été découvertes dans les produits Nextcloud. Elles permettent à un attaquant de provoqu… https://cve.radiocsirt.org/vuln/certfr-2022-avi-1057 certfr-2022-avi-1057 https://cve.radiocsirt.org/vuln/certfr-2022-avi-1057 EUVD-2026-233390 https://cve.radiocsirt.org/vuln/euvd-2026-233390 EUVD-2026-233390 https://cve.radiocsirt.org/vuln/euvd-2026-233390 fkie_cve-2022-39339 https://cve.radiocsirt.org/vuln/fkie_cve-2022-39339 <p>user_oidc is an OpenID Connect user backend for Nextcloud. In versions prior to 1.2.1 sensitive information such as the OIDC client credentials and tokens are sent in plain text of HTTP without TLS. Any malicious actor with access to monitor user traffic may have been able to compromise account security. This issue has been addressed in in user_oidc v1.2.1. Users are advised to upgrade. Users unable to upgrade may use https to access Nextcloud. Set an HTTPS discovery URL in the provider settings (in Nextcloud OIDC admin settings).</p> <p>user_oidc is an OpenID Connect user backend for Nextcloud. In versions prior to 1.2.1 sensitive information such as the OIDC client credentials and tokens are sent in plain text of HTTP without TLS. Any malicious actor with access to monitor user traffic may have been able to compromise account security. This issue has been addressed in in user_oidc v1.2.1. Users are advised to upgrade. Users unable to upgrade may use https to access Nextcloud. Set an HTTPS discovery URL in the provider settings (in Nextcloud OIDC admin settings).</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-39339 gsd-2022-39339 https://cve.radiocsirt.org/vuln/gsd-2022-39339 gsd-2022-39339 https://cve.radiocsirt.org/vuln/gsd-2022-39339 WID-SEC-W-2022-2183 — Nextcloud: Mehrere Schwachstellen https://cve.radiocsirt.org/vuln/wid-sec-w-2022-2183 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Nextcloud ausnutzen, um einen Denial of Service Angriff durchzuführen, Informationen offenzulegen, einen Cross-Site-Scripting-Angriff durchzuführen oder Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Nextcloud ausnutzen, um einen Denial of Service Angriff durchzuführen, Informationen offenzulegen, einen Cross-Site-Scripting-Angriff durchzuführen oder Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-2183