Where
-Infinity
0

BleepingComputerFFmpeg fixes PixelSmash flaw in widely used video decoder

First published (updated )

Nextcloud Tables NextcloudNextcloud: SQL Injection in Column Type Parameter Allows Arbitrary SQL Execution

Risk 60
Severity
8.2
First published (updated )

Nextcloud calendarNextcloud: Calendar app leaked user identifiers via attendee suggestion endpoint

Risk 22
Severity
4.3
First published (updated )

Nextcloud NextCloud ServerNextcloud: Hidden Public Link creation when sharing to a Team External Member

Risk 48
Severity
6.4
First published (updated )

Nextcloud NextcloudNextcloud: Open Redirect in user_oidc login flow via protocol-relative URL bypass

Risk 38
Severity
6.1
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Nextcloud NextcloudNextcloud: Missing permission check for from submissions

Risk 38
Severity
6.5
First published (updated )

Nextcloud NextcloudNextcloud: Unauthorized force-mute from missing permission check when using internal signaling

Risk 19
Severity
3.5
First published (updated )

Nextcloud NextcloudNextcloud: Files drop share links for end-to-end encrypted folders allowed to drop files into other folders of the share owner

Risk 19
Severity
3.5
First published (updated )

Nextcloud NextcloudNextcloud: Authentication Bypass in ID4me handling via Missing JWT Signature Verification in User OIDC

Risk 59
Severity
8.1
First published (updated )

Nextcloud NextcloudNextcloud: Improper Access Control in Collectives

Risk 15
Severity
2.6
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Nextcloud NextcloudNextcloud: ACL Rename Permission Bypass in Team Folders Allows Unauthorized File Renames

Risk 22
Severity
4.3
First published (updated )

Nextcloud NextCloud ServerXSS

Risk 39
Severity
6.4
First published (updated )

Nextcloud NextcloudNextcloud Mail before 1.9.5 suffers from improper access control due to a missing permission check a…

Risk 22
Severity
4.3
First published (updated )

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203