Advisories · Technology

Nextcloud Server & ownCloud Server Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4.

Every CVE that names Nextcloud Server & ownCloud Server Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2016-9462 CVE record

Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are not properly verifying restore privileges when restoring a file.
- Nextcloud Server & ownCloud Server Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4
- CWE-275
Not analysed yet 28 Mar 2017
CVE-2016-9461 CVE record

Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are not properly verifying edit check permissions on WebDAV copy actions.
- Nextcloud Server & ownCloud Server Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4
- CWE-275
Not analysed yet 28 Mar 2017
CVE-2016-9460 CVE record

Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are vulnerable to a content-spoofing attack in the files app.
- Nextcloud Server & ownCloud Server Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4
- CWE-451
Not analysed yet 28 Mar 2017
CVE-2016-9459 CVE record

Sensitive information in error messages in Nextcloud Server & ownCloud Server Nextcloud Server before 9.0.52 & ownCloud…
- Nextcloud Server & ownCloud Server Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4
- Information disclosure
Not analysed yet 28 Mar 2017