📦 Desktop

This vulnerability in Nextcloud Desktop Client for Linux causes synchronized files to have overly permissive file permissions (world-writable or world-readable). This allows unauthorized users on the ...

CVE-2021-22879 is a resource injection vulnerability in Nextcloud Desktop Client that allows malicious Nextcloud servers to execute arbitrary commands on users' systems. Users who connect to untrusted...

The Nextcloud Desktop Client vulnerability allows attackers to bypass signature validation when a manipulated server sends an empty initial signature. This could enable man-in-the-middle attacks or se...

Nextcloud Desktop client versions before 3.16.5 send file paths unencrypted to the server when manually locking files in end-to-end encrypted directories. This allows server administrators to see whic...