https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 23:54:46 +0000 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0096 certfr-2023-avi-0096 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0096 https://cve.radiocsirt.org/vuln/euvd-2026-221609 EUVD-2026-221609 https://cve.radiocsirt.org/vuln/euvd-2026-221609 https://cve.radiocsirt.org/vuln/fkie_cve-2023-23942 <p>The Nextcloud Desktop Client is a tool to synchronize files from a Nextcloud Server with your computer. Versions prior to 3.6.3 are missing sanitisation on qml labels which are used for basic HTML elements such as `strong`, `em` and `head` lines in the UI of the desktop client. The lack of sanitisation may allow for javascript injection. It is recommended that the Nextcloud Desktop Client is upgraded to 3.6.3. There are no known workarounds for this issue.</p> <p>The Nextcloud Desktop Client is a tool to synchronize files from a Nextcloud Server with your computer. Versions prior to 3.6.3 are missing sanitisation on qml labels which are used for basic HTML elements such as `strong`, `em` and `head` lines in the UI of the desktop client. The lack of sanitisation may allow for javascript injection. It is recommended that the Nextcloud Desktop Client is upgraded to 3.6.3. There are no known workarounds for this issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-23942 https://cve.radiocsirt.org/vuln/gsd-2023-23942 gsd-2023-23942 https://cve.radiocsirt.org/vuln/gsd-2023-23942 https://cve.radiocsirt.org/vuln/opensuse-su-2023:0090-1 <p>Security update for nextcloud-desktop</p> <p>Security update for nextcloud-desktop</p> https://cve.radiocsirt.org/vuln/opensuse-su-2023:0090-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-23942 <p><strong>Affected:</strong> Ubuntu:20.04:LTS: nextcloud-desktop, Ubuntu:22.04:LTS: nextcloud-desktop</p> <p>The Nextcloud Desktop Client is a tool to synchronize files from a Nextcloud Server with your computer. Versions prior to 3.6.3 are missing sanitisation on qml labels which are used for basic HTML elements such as `strong`, `em` and `head` lines in the UI of the desktop client. The lack of sanitisation may allow for javascript injection. It is recommended that the Nextcloud Desktop Client is upgraded to 3.6.3. There are no known workarounds for this issue.</p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: nextcloud-desktop, Ubuntu:22.04:LTS: nextcloud-desktop</p> <p>The Nextcloud Desktop Client is a tool to synchronize files from a Nextcloud Server with your computer. Versions prior to 3.6.3 are missing sanitisation on qml labels which are used for basic HTML elements such as `strong`, `em` and `head` lines in the UI of the desktop client. The lack of sanitisation may allow for javascript injection. It is recommended that the Nextcloud Desktop Client is upgraded to 3.6.3. There are no known workarounds for this issue.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-23942 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0290 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Nextcloud bezüglich des Desktop-Clients und der Mail-Komponente ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen oder Informationen offenzulegen.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Nextcloud bezüglich des Desktop-Clients und der Mail-Komponente ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen oder Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0290