Lucene search
+L

573 matches found

CNNVD
CNNVD
added 2024/07/29 12:0 a.m.8 views

M-Files Hubshare 安全漏洞

M-Files Hubshare is a collaboration solution from M-Files, Inc. designed to seamlessly share files, documents and collaborative content. A security vulnerability exists in M-Files Hubshare version 5.0.6.0 that stems from vulnerability to a stored cross-site scripting attack that allows an...

8.5CVSS6.2AI score0.00349EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/07/29 12:0 a.m.9 views

PT-2024-37924

Name of the Vulnerable Software and Affected Versions M-Files Hubshare versions prior to 5.0.6.0 Description The issue allows an authenticated attacker to execute arbitrary JavaScript in a user's browser session. This is achieved through a stored XSS attack. Recommendations For versions prior to...

8.5CVSS5.6AI score0.00349EPSS
SaveExploits0References7
ATTACKERKB
ATTACKERKB
added 2024/05/24 6:15 a.m.4 views

CVE-2024-5142

Stored Cross-Site Scripting vulnerability in Social Module in M-Files Hubshare before version 5.0.6.0 allows authenticated attacker to run scripts in other users browser...

7CVSS5.4AI score0.00306EPSS
SaveExploits0References4
NVD
NVD
added 2024/05/24 6:15 a.m.21 views

CVE-2024-5142

Stored Cross-Site Scripting vulnerability in Social Module in M-Files Hubshare before version 5.0.6.0 allows authenticated attacker to run scripts in other users browser...

7CVSS5.7AI score0.00306EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/05/24 5:58 a.m.19 views

CVE-2024-5142 XSS in Hubshare's social module

Stored Cross-Site Scripting vulnerability in Social Module in M-Files Hubshare before version 5.0.6.0 allows authenticated attacker to run scripts in other users browser...

7CVSS5.6AI score0.00306EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/05/24 5:58 a.m.21 views

CVE-2024-5142 XSS in Hubshare's social module

Stored Cross-Site Scripting vulnerability in Social Module in M-Files Hubshare before version 5.0.6.0 allows authenticated attacker to run scripts in other users browser...

7CVSS5.7AI score0.00306EPSS
SaveExploits0References2
CVE
CVE
added 2024/05/24 5:58 a.m.68 views

CVE-2024-5142

CVE-2024-5142 describes a Stored Cross-Site Scripting vulnerability in the Social Module of M-Files Hubshare, affecting versions prior to 5.0.6.0. The issue allows an authenticated attacker to execute scripts in other users’ browsers. Technical details across connected sources confirm the vulnera...

7CVSS5.6AI score0.00306EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2024/05/24 12:0 a.m.6 views

M-Files Hubshare 安全漏洞

M-Files Hubshare is a collaboration solution from M-Files, Inc. designed to seamlessly share files, documents and collaborative content. A security vulnerability exists in M-Files Hubshare versions prior to 5.0.3.8. An attacker exploited the vulnerability to run scripts in other users' browsers...

7CVSS6.7AI score0.00306EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/05/24 12:0 a.m.7 views

PT-2024-34626

Name of the Vulnerable Software and Affected Versions M-Files Hubshare versions prior to 5.0.6.0 Description The issue allows an authenticated attacker to run scripts in other users' browsers due to a Stored Cross-Site Scripting vulnerability in the Social Module. Recommendations For versions pri...

7CVSS5.3AI score0.00306EPSS
SaveExploits0References9
ATTACKERKB
ATTACKERKB
added 2024/04/26 6:15 a.m.5 views

CVE-2024-4056

Denial of service condition in M-Files Server in versions before 24.4.13592.4 and after 23.11 excluding 24.2 LTS allows unauthenticated user to consume computing resources...

7.5CVSS5.3AI score0.00769EPSS
SaveExploits0References4Affected Software1
NVD
NVD
added 2024/04/26 6:15 a.m.17 views

CVE-2024-4056

Denial of service condition in M-Files Server in versions before 24.4.13592.4 and after 23.11 excluding 24.2 LTS allows unauthenticated user to consume computing resources...

7.5CVSS7.5AI score0.00769EPSS
SaveExploits0References3
OSV
OSV
added 2024/04/26 6:15 a.m.12 views

CVE-2024-4056

Denial of service condition in M-Files Server in versions before 24.4.13592.4 and after 23.11 excluding 24.2 LTS allows unauthenticated user to consume computing resources...

7.5CVSS5.8AI score0.00769EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/04/26 6:2 a.m.11 views

CVE-2024-4056 Denial of service condition in M-Files Server

Denial of service condition in M-Files Server in versions before 24.4.13592.4 and after 23.11 excluding 24.2 LTS allows unauthenticated user to consume computing resources...

7.5CVSS7.5AI score0.00769EPSS
SaveExploits0References2
CVE
CVE
added 2024/04/26 6:2 a.m.73 views

CVE-2024-4056

CVE-2024-4056 describes a denial-of-service condition in M‑Files Server. Affected are M‑Files Server versions prior to 24.4.13592.4 and those after 23.11, with the exception of the 24.2 LTS branch. The issue allows an unauthenticated user to consume computing resources, potentially impacting avai...

7.5CVSS7.5AI score0.00769EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2024/04/26 6:2 a.m.23 views

CVE-2024-4056 Denial of service condition in M-Files Server

Denial of service condition in M-Files Server in versions before 24.4.13592.4 and after 23.11 excluding 24.2 LTS allows unauthenticated user to consume computing resources...

7.5CVSS7.7AI score0.00769EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/04/26 12:0 a.m.8 views

PT-2024-28921

Name of the Vulnerable Software and Affected Versions M-Files Server versions prior to 24.4.13592.4 M-Files Server versions after 23.11 excluding 24.2 LTS Description A denial of service condition in M-Files Server allows an unauthenticated user to consume computing resources. Recommendations For...

7.5CVSS5.2AI score0.00769EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2024/04/26 12:0 a.m.11 views

M-Files Server 安全漏洞

M-Files Server is a server for the M-Files system from M-Files, Inc. A security vulnerability exists in M-Files Server versions prior to 23.11 through 24.4.13592.4 that stems from the presence of a denial-of-service DOS vulnerability that could allow an unauthenticated attacker to consume computi...

7.5CVSS6.7AI score0.00769EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2024/03/04 8:15 a.m.4 views

CVE-2023-4479

Stored XSS Vulnerability in M-Files Web versions before 23.8 allows attacker to execute script on users browser via stored HTML document within limited time period...

7.3CVSS7.5AI score0.00436EPSS
SaveExploits0References4
NVD
NVD
added 2024/03/04 8:15 a.m.23 views

CVE-2023-4479

Stored XSS Vulnerability in M-Files Web versions before 23.8 allows attacker to execute script on users browser via stored HTML document within limited time period...

7.3CVSS6.8AI score0.00436EPSS
SaveExploits0References3
OSV
OSV
added 2024/03/04 8:15 a.m.10 views

CVE-2023-4479

Stored XSS Vulnerability in M-Files Web versions before 23.8 allows attacker to execute script on users browser via stored HTML document within limited time period...

5.4CVSS5.9AI score0.00436EPSS
SaveExploits0References3
Rows per page
Query Builder