3681 matches found
CVE-2024-9333
Permissions bypass in M-Files Connector for Copilot before version 24.9.3 allows authenticated user to access limited amount of documents via incorrect access control list calculation...
CVE-2024-9174
Stored HTML Injection in Social Module in M-Files Hubshare before version 5.0.8.6 allows authenticated user to spoof UI...
CVE-2024-9174
Stored HTML Injection in Social Module in M-Files Hubshare before version 5.0.8.6 allows authenticated user to spoof UI...
CVE-2024-9333
CVE-2024-9333 involves M-Files Connector for Copilot prior to version 24.9.3 where an incorrect access control list calculation allows an authenticated user to bypass permissions and access a limited set of documents. The issue is tied to the access control mechanism in the connector, with impact...
CVE-2024-9333 Permission bypass in M-Files Connector for Copilot
Permissions bypass in M-Files Connector for Copilot before version 24.9.3 allows authenticated user to access limited amount of documents via incorrect access control list calculation...
CVE-2024-9333 Permission bypass in M-Files Connector for Copilot
Permissions bypass in M-Files Connector for Copilot before version 24.9.3 allows authenticated user to access limited amount of documents via incorrect access control list calculation...
CVE-2024-9174 Stored HTML Injection in Hubshare social module
Stored HTML Injection in Social Module in M-Files Hubshare before version 5.0.8.6 allows authenticated user to spoof UI...
CVE-2024-9174
CVE-2024-9174 affects M-Files Hubshare (Social Module) prior to version 5.0.8.6. It is a stored HTML injection vulnerability that allows an authenticated user to spoof the UI. Root cause: HTML injection in the Social Module; impact includes UI spoofing. The PT-Security advisory corroborates the a...
CVE-2024-9174 Stored HTML Injection in Hubshare social module
Stored HTML Injection in Social Module in M-Files Hubshare before version 5.0.8.6 allows authenticated user to spoof UI...
M-Files Connector 安全漏洞
M-Files Connector is an M-Files connector for network folders from M-Files, Inc. A security vulnerability exists in M-Files Connector for Copilot versions prior to 24.9.3 that stems from an access control error...
CVE-2024-9333: Improper Preservation of Permissions
Permissions bypass in M-Files Connector for Copilot before version 24.9.3 allows authenticated user to access limited amount of documents via incorrect access control list calculation...
M-Files Hubshare 安全漏洞
M-Files Hubshare is a collaboration solution from M-Files, Inc. designed to seamlessly share files, documents and collaborative content. A security vulnerability exists in M-Files Hubshare versions prior to 5.0.8.6 that stems from the presence of an HTML injection vulnerability...
CVE-2024-9174: Improper Neutralization of Input During Web Page Generation
Stored HTML Injection in Social Module in M-Files Hubshare before version 5.0.8.6 allows authenticated user to spoof UI...
PT-2024-39579
Name of the Vulnerable Software and Affected Versions M-Files Connector for Copilot versions prior to 24.9.3 Description The issue allows an authenticated user to bypass permissions and access a limited amount of documents due to an incorrect access control list calculation. Recommendations For...
PT-2024-39472
Name of the Vulnerable Software and Affected Versions M-Files Hubshare versions prior to 5.0.8.6 Description The issue allows an authenticated user to spoof the UI through stored HTML injection in the Social Module. Recommendations For versions prior to 5.0.8.6, update to version 5.0.8.6 or later...
libexpat: integer overflow
A flaw was found in libexpat's internal nextScaffoldPart function in xmlparse.c. It can have an integer overflow for mgroupSize on 32-bit platforms where UINTMAX equals SIZEMAX...
RHSA-2021:0383 Red Hat Security Advisory: RHV-M (ovirt-engine) 4.4.z security, bug fix, enhancement upd[ovirt-4.4.4] 0-day
Bulletin has no description...
RHSA-2021:0381 Red Hat Security Advisory: RHV-M(ovirt-engine) 4.4.z security, bug fix, enhancement update [ovirt-4.4.4]
Bulletin has no description...
CVE-2024-8523: Improper Control of Generation of Code
A vulnerability was found in lmxcms up to 1.4 and classified as critical. Affected by this issue is the function formatData of the file /admin.php?m=Acquisi&a=testcj&lid=1 of the component SQL Command Execution Module. The manipulation of the argument data leads to code injection. The attack may ...