Input Validation and Logic

Every one of the 27 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Nextcloud Server before 9.0.54 and 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 suffer from content spoofing in the files app. The location bar in the files app was not verifyi…CVE-2016-9467Nextcloud · 3.0% likely

   CWE-4511 bounty report

2. Nextcloud Server before 9.0.54 and 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 suffer from content spoofing in the dav app. The exception message displayed on the DAV endpoint…CVE-2016-9468Nextcloud · 2.1% likely

   CWE-4511 bounty report

3. A missing rate limit in the Preferred Providers app 1.7.0 allowed an attacker to set the password an uncontrolled amount of times.CVE-2020-8228Nextcloud · 1.9% likely

   CWE-8401 bounty report

4. Webauthn tokens not removed after user has been deletedCVE-2021-32726nextcloud · CVSS 7.1 · 1.8% likely

   CWE-7081 bounty report

5. Lack of ratelimit on public DAV endpointCVE-2021-32705nextcloud · CVSS 5.3 · 1.7% likely

   CWE-7991 bounty report

6. Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are vulnerable to a content-spoofing attack in the files app. The location bar in the files app was not verifying the…CVE-2016-9460Nextcloud · 1.7% likely

   CWE-4511 bounty report

7. Rate-limits not working on instances without configured memory cache backendCVE-2021-41177nextcloud · CVSS 8.1 · 1.6% likely

   CWE-799

8. Nextcloud Server before 9.0.55 and 10.0.2 suffers from a Content-Spoofing vulnerability in the "files" app. The top navigation bar displayed in the files list contained partially…CVE-2017-0888Nextcloud · 1.5% likely

   CWE-4511 bounty report

9. Lack of ratelimit on shareinfo endpointCVE-2021-32703nextcloud · CVSS 5.3 · 1.5% likely

   CWE-7991 bounty report

10. Improper Input Validation in Nextcloud Server 15.0.7 allows group admins to create users with IDs of system folders.CVE-2019-15624Nextcloud · 1.5% likely

    CWE-201 bounty report

11. Ratelimit not applied on OCS API responsesCVE-2021-32678nextcloud · CVSS 3.7 · 1.4% likely

    CWE-7991 bounty report

12. Lack of ratelimit on public share link mount endpointCVE-2021-32741nextcloud · CVSS 5.3 · 1.3% likely

    CWE-7991 bounty report

13. A bug in Nextcloud Server 17.0.1 causes the workflow rules to depend their behaviour on the file extension when checking file mimetypes.CVE-2019-15613Nextcloud · 1.1% likely

    CWE-201 bounty report

14. Files Drop public link can be added as federated shareCVE-2021-32655nextcloud · CVSS 3.5 · 1.0% likely

    CWE-2411 bounty report

15. Nextcloud Talk not properly disassociating users from chats after account deletionCVE-2021-32689nextcloud · CVSS 8.1 · 1.0% likely

    CWE-708

16. Malicious Android application can crash the Nextcloud Android ClientCVE-2021-32694nextcloud · CVSS 4.1 · 1.0% likely

    CWE-2481 bounty report

17. Nextcloud Server before 9.0.55 and 10.0.2 suffers from a bypass in the quota limitation. Due to not properly sanitizing values provided by the `OC-Total-Length` HTTP header an aut…CVE-2017-0887Nextcloud · 0.9% likely

    CWE-8071 bounty report

18. Nextcloud Contacts photos only sanitized if mime type is all lower caseCVE-2023-33182nextcloud · CVSS 0 · 0.8% likely

    CWE-201 bounty report

19. Potential share collision for recipients when caching is enabled in nextcloud serverCVE-2023-28643nextcloud · CVSS 5.5 · 0.8% likely

    CWE-7061 bounty report

20. A missing file type check in Nextcloud Contacts 3.2.0 allowed a malicious user to upload any file as avatars.CVE-2020-8181Nextcloud · 0.8% likely

    CWE-8401 bounty report

21. Nextcloud Server has incomplete sanitization of SVG files allows to embed other images into previewsCVE-2024-52515nextcloud · CVSS 5.7 · 0.7% likely

    CWE-7061 bounty report

22. Nextcloud Tables app allowed to include local file via PhpSpreadsheet when importing a tableCVE-2025-58051nextcloud · CVSS 6.5 · 0.5% likely

    CWE-8411 bounty report

23. Nextcloud Calendar attachments of local files are offered to downloadedCVE-2025-66550nextcloud · CVSS 5.7 · 0.4% likely

    CWE-2411 bounty report

24. Nextcloud Calendar's event create can create attachments that link to other websitesCVE-2024-37316nextcloud · CVSS 4.6 · 0.4% likely

    CWE-2411 bounty report

25. The Approval app's approve/reject endpoint is meant to require the file's current etag as a freshness check, preventing an approver from approving or rejecting a file whose conten…CVE-2026-82982Nextcloud · CVSS 4.3 · 0.3% likely

    CWE-8401 bounty report

26. Nextcloud Groupfolders users with read-only permissions for team folder can restore deleted files from trash binCVE-2025-66545nextcloud · CVSS 3.5 · 0.3% likely

    CWE-707

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.