CVE-2021-37253

M-Files Web before 20.10.9524.1 allows a denial of service via overlapping ranges in HTTP requests with crafted Range or Request-Range headers. NOTE: this is disputed because the range behavior is the responsibility of the web server, not the responsibility of the individual web application...

CVE-2021-37253

M-Files Web before 20.10.9524.1 allows a denial of service via overlapping ranges in HTTP requests with crafted Range or Request-Range headers. NOTE: this is disputed because the range behavior is the responsibility of the web server, not the responsibility of the individual web application...

CVE-2021-37253

Affected software: M-Files Web before 20.10.9524.1. Vulnerability: DoS due to improper handling of overlapping Range/Request-Range headers in HTTP requests, as described by multiple sources. Root cause/condition: crafted Range headers trigger high CPU/memory consumption, leading to denial of acce...

CVE-2021-37253: Inconsistent Interpretation of HTTP Requests

M-Files Web before 20.10.9524.1 allows a denial of service via overlapping ranges in HTTP requests with crafted Range or Request-Range headers. NOTE: this is disputed because the range behavior is the responsibility of the web server, not the responsibility of the individual web application...

M-Files Web Denial Of Service Vulnerability

M-Files Web versions prior to 20.10.9524.1 and M-Files Web versions prior to 20.10.9445.0 contain an improper range header processing vulnerability. A remote unauthenticated attacker may send crafted requests with overlapping ranges via HTTP requests with a specially-crafted Range or Request-Rang...

PT-2021-21591 · M Files · M-Files Web

Name of the Vulnerable Software and Affected Versions: M-Files Web versions prior to 20.10.9524.1 Description: The issue allows a denial of service via overlapping ranges in HTTP requests with crafted Range or Request-Range headers. It is disputed because the range behavior is the responsibility ...

M-Files Web Denial Of Service

I. SUMMARY ============================================================================================================================================================= Title: M-Files Web Improper Range Header Processing Denial of Services DoS Vulnerability Product: M-Files Web version before...

M-Files Corporation M-Files Web 环境问题漏洞

M-Files Corporation M-Files Web is an intelligent information management platform from M-Files Corporation, USA. It is used to optimally support users in their daily work. A security vulnerability exists in M-Files Web that originates from M-Files Web allowing denial of service via overlapping...

CVE-2021-43997

FreeRTOS versions 10.2.0 through 10.4.5 do not prevent non-kernel code from calling the xPortRaisePrivilege internal function to raise privilege. FreeRTOS versions through 10.4.6 do not prevent a third party that has already independently gained the ability to execute injected code to achieve...

Privilege escalation

FreeRTOS versions 10.2.0 through 10.4.5 do not prevent non-kernel code from calling the xPortRaisePrivilege internal function to raise privilege. FreeRTOS versions through 10.4.6 do not prevent a third party that has already independently gained the ability to execute injected code to achieve...

CVE-2021-43997

FreeRTOS versions 10.2.0 through 10.4.5 do not prevent non-kernel code from calling the xPortRaisePrivilege internal function to raise privilege. FreeRTOS versions through 10.4.6 do not prevent a third party that has already independently gained the ability to execute injected code to achieve...

CVE-2021-43997

FreeRTOS versions 10.2.0 through 10.4.5 do not prevent non-kernel code from calling the xPortRaisePrivilege internal function to raise privilege. FreeRTOS versions through 10.4.6 do not prevent a third party that has already independently gained the ability to execute injected code to achieve...

CVE-2021-43997

CVE-2021-43997 affects FreeRTOS ARMv7-M and ARMv8-M MPU ports. Versions 10.2.0–10.4.5 allow non‑kernel code to call the internal xPortRaisePrivilege function to raise privilege; versions up to 10.4.6 can enable a second‑stage privilege escalation if injected code branches inside an MPU API wrappe...

CVE-2021-43997: Undefined Security Weakness

FreeRTOS versions 10.2.0 through 10.4.5 do not prevent non-kernel code from calling the xPortRaisePrivilege internal function to raise privilege. FreeRTOS versions through 10.4.6 do not prevent a third party that has already independently gained the ability to execute injected code to achieve...

CVE-2021-43012

Adobe Prelude version 10.1 and earlier are affected by a memory corruption vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim mus...

m-dynasty.com Cross Site Scripting vulnerability OBB-2271308

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

AMD Graphics Driver 缓冲区错误漏洞

AMD Graphics Driver is an integrated graphics driver from AMD. AMD Graphics Driver suffers from a buffer error vulnerability that stems from a potential security vulnerability in certain Intel Core processors with Radeon RX The Vega M GL integrated graphics card could allow privileged escalation,...

AMD Graphics Driver 信息泄露漏洞

AMD Graphics Driver is an integrated graphics driver from AMD. AMD Graphics Driver suffers from an information disclosure vulnerability that stems from a potential security hole in certain Intel Core processors with Radeon RX The Vega M GL integrated graphics card could allow privileged escalatio...

AMD Graphics Driver 缓冲区错误漏洞

AMD Graphics Driver is an integrated graphics driver from AMD. AMD Graphics Driver suffers from a buffer error vulnerability that stems from a potential security vulnerability in certain Intel Core processors with Radeon RX The Vega M GL integrated graphics card could allow privileged escalation,...

Intel Core Processors 缓冲区错误漏洞

Intel Core Processors is an Intel Core family of central processing units CPUs from Intel Corporation USA. Intel Core Processors suffers from a buffer error vulnerability that stems from a potential security vulnerability in certain Intel Core processors with Radeon RX The Vega M GL integrated...