296 matches found
BIT-DOLIBARR-2020-13240
The DMS/ECM module in Dolibarr 11.0.4 allows users with the 'Setup documents directories' permission to rename uploaded files to have insecure file extensions. This bypasses the .noexe protection mechanism against XSS...
BIT-DOLIBARR-2020-13239
The DMS/ECM module in Dolibarr 11.0.4 renders user-uploaded .html files in the browser when the attachment parameter is removed from the direct download link. This causes XSS...
CVE-2025-0503
Mattermost versions 9.11.x = 9.11.6 fail to filter out DMs from the deleted channels endpoint which allows an attacker to infer user IDs and other metadata from deleted DMs if someone had manually marked DMs as deleted in the database...
PT-2025-42897
Name of the Vulnerable Software and Affected Versions GeographicLib version 2.5 Description GeographicLib version 2.5 contains a buffer overflow in the GeoConvert DMS::InternalDecode function. Recommendations At the moment, there is no information about a newer version that contains a fix for thi...
dms-info.ru Cross Site Scripting vulnerability OBB-3890265
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-52098
Denial of Service DoS vulnerability in the DMS module. Successful exploitation of this vulnerability will affect availability...
Denial of service
Denial of Service DoS vulnerability in the DMS module. Successful exploitation of this vulnerability will affect availability...
CVE-2023-52098
Denial of Service DoS vulnerability in the DMS module. Successful exploitation of this vulnerability will affect availability...
CVE-2023-52098
CVE-2023-52098 describes a Denial of Service (DoS) vulnerability in the DMS module. The NVD entry states a Network-based exploitation with low attack complexity and no privileges required , resulting in an impact to availability (CVSS 3.1 base 7.5, HIGH). The connected records confirm the issue i...
CVE-2023-52098
Denial of Service DoS vulnerability in the DMS module. Successful exploitation of this vulnerability will affect availability...
CVE-2023-52098: Uncontrolled Resource Consumption
Denial of Service DoS vulnerability in the DMS module. Successful exploitation of this vulnerability will affect availability...
Virtual Snipers DMS 1.0 SQL Injection
==================================================================================================================================== | Title : Virtual Snipers DMS v1.0 Auth by pass Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox...
dms-net.org Cross Site Scripting vulnerability OBB-3486592
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Twitter’s Encrypted DMs Are Deeply Inferior to Signal and WhatsApp
The social network’s new privacy feature is technically flawed, opt-in, and limited in its functionality. All this for just $8 a month...
CVE-2022-47413
Given a malicious document provided by an attacker, the OpenKM DMS is vulnerable to a stored persistent, or "Type II" XSS condition...
Design/Logic Flaw
Given a malicious document provided by an attacker, the OpenKM DMS is vulnerable to a stored persistent, or "Type II" XSS condition...
CVE-2022-47419
CVE-2022-47419 affects Mayan EDMS DMS with a reflected XSS in the in-product tagging system. The CVSS 3.1 base score is 5.4 (MEDIUM) with network attack vector, low attack complexity, require low privileges and user interaction. Exploitation observed per GHSA-5M6V-2XGF-QHRW and OSV details; no au...
CVE-2022-47413
Technical details about CVE-2022-47413 are not provided in the supplied documents; no affected products or fixes are listed here. Monitor for updates.