Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 12:03:47 +0000 certfr-2023-avi-0096 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Nextcloud</span>. Elles permettent à un attaqua… https://cve.radiocsirt.org/vuln/certfr-2023-avi-0096 certfr-2023-avi-0096 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0096 cnvd-2023-07969 https://cve.radiocsirt.org/vuln/cnvd-2023-07969 cnvd-2023-07969 https://cve.radiocsirt.org/vuln/cnvd-2023-07969 EUVD-2026-221611 https://cve.radiocsirt.org/vuln/euvd-2026-221611 EUVD-2026-221611 https://cve.radiocsirt.org/vuln/euvd-2026-221611 fkie_cve-2023-23944 https://cve.radiocsirt.org/vuln/fkie_cve-2023-23944 <p>Nextcloud mail is an email app for the nextcloud home server platform. In versions prior to 2.2.2 user&#39;s passwords were stored in cleartext in the database during the duration of OAuth2 setup procedure. Any attacker or malicious user with access to the database would have access to these user passwords until the OAuth setup has been completed. It is recommended that the Nextcloud Mail app is upgraded to 2.2.2. There are no known workarounds for this issue.</p> <p>Nextcloud mail is an email app for the nextcloud home server platform. In versions prior to 2.2.2 user&#39;s passwords were stored in cleartext in the database during the duration of OAuth2 setup procedure. Any attacker or malicious user with access to the database would have access to these user passwords until the OAuth setup has been completed. It is recommended that the Nextcloud Mail app is upgraded to 2.2.2. There are no known workarounds for this issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-23944 gsd-2023-23944 https://cve.radiocsirt.org/vuln/gsd-2023-23944 gsd-2023-23944 https://cve.radiocsirt.org/vuln/gsd-2023-23944 WID-SEC-W-2023-0290 — Nextcloud: Mehrere Schwachstellen https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0290 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Nextcloud bezüglich des Desktop-Clients und der Mail-Komponente ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen oder Informationen offenzulegen.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Nextcloud bezüglich des Desktop-Clients und der Mail-Komponente ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen oder Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0290