Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 16:55:45 +0000 certfr-2024-avi-0053 — De multiples vulnérabilités ont été découvertes dans les produits Nextcloud. Elles permettent à un attaquant de provoqu… https://cve.radiocsirt.org/vuln/certfr-2024-avi-0053 certfr-2024-avi-0053 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0053 EUVD-2026-243551 https://cve.radiocsirt.org/vuln/euvd-2026-243551 EUVD-2026-243551 https://cve.radiocsirt.org/vuln/euvd-2026-243551 fkie_cve-2024-22402 https://cve.radiocsirt.org/vuln/fkie_cve-2024-22402 <p>Nextcloud guests app is a utility to create guest users which can only see files shared with them. In affected versions users were able to load the first page of apps they were actually not allowed to access. Depending on the selection of apps installed this may present a permissions bypass. It is recommended that the Guests app is upgraded to 2.4.1, 2.5.1 or 3.0.1. There are no known workarounds for this vulnerability.</p> <p>Nextcloud guests app is a utility to create guest users which can only see files shared with them. In affected versions users were able to load the first page of apps they were actually not allowed to access. Depending on the selection of apps installed this may present a permissions bypass. It is recommended that the Guests app is upgraded to 2.4.1, 2.5.1 or 3.0.1. There are no known workarounds for this vulnerability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-22402 gsd-2024-22402 https://cve.radiocsirt.org/vuln/gsd-2024-22402 gsd-2024-22402 https://cve.radiocsirt.org/vuln/gsd-2024-22402 WID-SEC-W-2024-0155 — Nextcloud: Mehrere Schwachstellen https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0155 <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Nextcloud Server und verschiedenen Apps ausnutzen, um Benutzerrechte zu erlangen, um den Benutzer zu täuschen und um Sicherheitsmechanismen zu umgehen.</p> <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Nextcloud Server und verschiedenen Apps ausnutzen, um Benutzerrechte zu erlangen, um den Benutzer zu täuschen und um Sicherheitsmechanismen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0155