Last Seen: 2025-04-27

GeneralInformation

ise.de
    automatedmails.ise.de
    www.automatedmails.ise.de
    wildduck-01.ise.de
mail.isegruppe.net
www.isegruppe.net

SecurityContact

https://hackerone.com/nextcloud
2024-08-31T23:00:00.000Z
https://github.com/nextcloud/security-advisories/security/advisories
https://hackerone.com/nextcloud
en

OpenPorts

25 / tcp
1449433477 | 2025-04-27T02:30:31.291150
80 / tcp
589765266 | 2025-04-19T02:46:25.752869
443 / tcp
-262969980 | 2025-04-26T17:00:27.507418

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2023(1)
CVE-2023-44487
7.5The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
2021(2)
CVE-2021-23017
7.7A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.
CVE-2021-3618
7.4ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.



Contact Us

Shodan ® - All rights reserved