Lucene search
+L

295 matches found

Cvelist
Cvelist
added 2023/11/22 9:56 a.m.31 views

CVE-2023-6189 Improper Permission Handling in M-Files Server

Missing access permissions checks in the M-Files server before 23.11.13156.0 allow attackers to perform data write and export jobs using the M-Files API methods...

4.3CVSS5.6AI score0.00511EPSS
Exploits0References2
CVE
CVE
added 2023/11/22 9:56 a.m.92 views

CVE-2023-6117

CVE-2023-6117 affects M-Files server REST API: obsolete REST API functionalities can be exploited to cause memory consumption leading to Denial of Service. Affected versions are prior to 23.11.13156.0. Exploit details are not disclosed in the provided docs beyond the DoS impact. Mitigation: upgra...

7.5CVSS6.5AI score0.00713EPSS
Exploits0References3Affected Software1
CNNVD
CNNVD
added 2023/11/22 12:0 a.m.5 views

M-Files Security Vulnerability

M-Files is an innovative metadata-driven document management platform from M-Files, Inc. A security vulnerability exists in M-Files server versions prior to 23.11.13156.0, which stems from a security flaw in the Rest API method. An attacker could exploit this vulnerability to conduct a denial of...

7.5CVSS6.6AI score0.00713EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2023/11/22 12:0 a.m.9 views

PT-2023-32525 · M Files · M-Files Server

Name of the Vulnerable Software and Affected Versions: M-Files server versions prior to 23.11.13156.0 Description: A possibility of unwanted server memory consumption was detected through the obsolete functionalities in the Rest API methods of the M-Files server, which allows attackers to execute...

7.5CVSS7.5AI score0.00713EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2023/08/25 9:15 a.m.4 views

CVE-2023-3425

Out-of-bounds read issue in M-Files Server versions below 23.8.12892.6 and LTS Service Release Versions before 23.2 LTS SR3 allows unauthenticated user to read restricted amount of bytes from memory...

6.5CVSS5.6AI score0.00535EPSS
Exploits0References4
NVD
NVD
added 2023/08/25 9:15 a.m.28 views

CVE-2023-3425

Out-of-bounds read issue in M-Files Server versions below 23.8.12892.6 and LTS Service Release Versions before 23.2 LTS SR3 allows unauthenticated user to read restricted amount of bytes from memory...

6.5CVSS6.4AI score0.00535EPSS
Exploits0References3
OSV
OSV
added 2023/08/25 9:15 a.m.5 views

CVE-2023-3425

Out-of-bounds read issue in M-Files Server versions below 23.8.12892.6 and LTS Service Release Versions before 23.2 LTS SR3 allows unauthenticated user to read restricted amount of bytes from memory...

5.3CVSS5.8AI score0.00535EPSS
Exploits0References3
Prion
Prion
added 2023/08/25 9:15 a.m.21 views

Design/Logic Flaw

Out-of-bounds read issue in M-Files Server versions below 23.8.12892.6 and LTS Service Release Versions before 23.2 LTS SR3 allows unauthenticated user to read restricted amount of bytes from memory...

5CVSS5.3AI score0.00535EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2023/08/25 8:8 a.m.63 views

CVE-2023-3425

CVE-2023-3425 affects M-Files Server: out-of-bounds read allowing an unauthenticated user to read a restricted number of bytes from memory. Affected versions are M-Files Server

6.5CVSS5.5AI score0.00535EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2023/08/25 8:8 a.m.36 views

CVE-2023-3425 CVE-2023-3425: Out-of-Bounds memory read

Out-of-bounds read issue in M-Files Server versions below 23.8.12892.6 and LTS Service Release Versions before 23.2 LTS SR3 allows unauthenticated user to read restricted amount of bytes from memory...

6.5CVSS6.6AI score0.00535EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2023/08/25 8:8 a.m.17 views

CVE-2023-3425 CVE-2023-3425: Out-of-Bounds memory read

Out-of-bounds read issue in M-Files Server versions below 23.8.12892.6 and LTS Service Release Versions before 23.2 LTS SR3 allows unauthenticated user to read restricted amount of bytes from memory...

6.5CVSS6.9AI score0.00535EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/08/25 12:0 a.m.6 views

PT-2023-24773 · M Files · M-Files Server

Name of the Vulnerable Software and Affected Versions: M-Files Server versions prior to 23.8.12892.6 M-Files Server LTS Service Release Versions prior to 23.2 LTS SR3 Description: The issue is an out-of-bounds read that allows an unauthenticated user to read a restricted amount of bytes from...

6.5CVSS7.1AI score0.00535EPSS
Exploits0References5
NVD
NVD
added 2023/06/27 3:15 p.m.15 views

CVE-2023-3405

Unchecked parameter value in M-Files Server in versions before 23.6.12695.3 excluding 23.2 SR2 and newer allows anonymous user to cause denial of service...

7.5CVSS7.4AI score0.00845EPSS
Exploits0References4
OSV
OSV
added 2023/06/27 3:15 p.m.8 views

CVE-2023-3405

Unchecked parameter value in M-Files Server in versions before 23.6.12695.3 excluding 23.2 SR2 and newer allows anonymous user to cause denial of service...

7.5CVSS5.8AI score0.00845EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2023/06/27 3:15 p.m.3 views

CVE-2023-3405

Unchecked parameter value in M-Files Server in versions before 23.6.12695.3 excluding 23.2 SR2 and newer allows anonymous user to cause denial of service...

7.5CVSS7.4AI score0.00845EPSS
Exploits0References4
Prion
Prion
added 2023/06/27 3:15 p.m.21 views

Denial of service

Unchecked parameter value in M-Files Server in versions before 23.6.12695.3 excluding 23.2 SR2 and newer allows anonymous user to cause denial of service...

5CVSS7.3AI score0.00845EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2023/06/27 2:24 p.m.27 views

CVE-2023-3405 Denial of service condition in M-Files Server

Unchecked parameter value in M-Files Server in versions before 23.6.12695.3 excluding 23.2 SR2 and newer allows anonymous user to cause denial of service...

7.5CVSS7.6AI score0.00845EPSS
Exploits0References2
CVE
CVE
added 2023/06/27 2:24 p.m.51 views

CVE-2023-3405

CVE-2023-3405 affects M-Files Server prior to 23.6.12695.3 (excluding 23.2 SR2 and newer). The issue is an unchecked parameter value that allows an anonymous user to cause a denial of service. Remediation: update to version 23.6.12695.3 or later (or apply equivalent restriction/mitigation as indi...

7.5CVSS7.4AI score0.00845EPSS
Exploits0References4Affected Software1
Vulnrichment
Vulnrichment
added 2023/06/27 2:24 p.m.15 views

CVE-2023-3405 Denial of service condition in M-Files Server

Unchecked parameter value in M-Files Server in versions before 23.6.12695.3 excluding 23.2 SR2 and newer allows anonymous user to cause denial of service...

7.5CVSS6.8AI score0.00845EPSS
Exploits0References2
CNNVD
CNNVD
added 2023/06/27 12:0 a.m.7 views

M-Files Server 安全漏洞

M-Files Server is a server for the M-Files system from M-Files, Inc. A security vulnerability exists in M-Files Server version 23.6.12695.3 and earlier, which stems from unchecked parameter values that allow anonymous users to cause a denial of service...

7.5CVSS7.3AI score0.00845EPSS
Exploits0References4
Rows per page
Query Builder