| Max CVSS | 9.0 | Min CVSS | 3.5 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2020-8233 | 9.0 |
A command injection vulnerability exists in EdgeSwitch firmware <v1.9.0 that allowed an authenticated read-only user to execute arbitrary shell commands over the HTTP interface, allowing them to escalate privileges.
|
24-05-2022 - 17:03 | 17-08-2020 - 16:15 | |
| CVE-2020-8228 | 5.0 |
A missing rate limit in the Preferred Providers app 1.7.0 allowed an attacker to set the password an uncontrolled amount of times.
|
20-10-2020 - 18:56 | 05-10-2020 - 14:15 | |
| CVE-2020-8154 | 6.8 |
An Insecure direct object reference vulnerability in Nextcloud Server 18.0.2 allowed an attacker to remote wipe devices of other users when sending a malicious request directly to the endpoint.
|
19-10-2020 - 19:15 | 12-05-2020 - 13:15 | |
| CVE-2020-8155 | 3.5 |
An outdated 3rd party library in the Files PDF viewer for Nextcloud Server 18.0.2 caused a Cross-site scripting vulnerability when opening a malicious PDF.
|
19-10-2020 - 19:15 | 12-05-2020 - 13:15 |