Lucene search
+L

3654 matches found

attackerkb
attackerkb
•added 2024/05/24 6:15 a.m.•8 views

CVE-2024-5142

Stored Cross-Site Scripting vulnerability in Social Module in M-Files Hubshare before version 5.0.6.0 allows authenticated attacker to run scripts in other users browser...

7CVSS5.4AI score0.00306EPSS
SaveExploits0References4
NVD
NVD
•added 2024/05/24 6:15 a.m.•25 views

CVE-2024-5142

Stored Cross-Site Scripting vulnerability in Social Module in M-Files Hubshare before version 5.0.6.0 allows authenticated attacker to run scripts in other users browser...

7CVSS5.7AI score0.00306EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/05/24 5:58 a.m.•29 views

CVE-2024-5142 XSS in Hubshare's social module

Stored Cross-Site Scripting vulnerability in Social Module in M-Files Hubshare before version 5.0.6.0 allows authenticated attacker to run scripts in other users browser...

7CVSS5.6AI score0.00306EPSS
SaveExploits0References2
CVE
CVE
•added 2024/05/24 5:58 a.m.•79 views

CVE-2024-5142

CVE-2024-5142 describes a Stored Cross-Site Scripting vulnerability in the Social Module of M-Files Hubshare, affecting versions prior to 5.0.6.0. The issue allows an authenticated attacker to execute scripts in other users’ browsers. Technical details across connected sources confirm the vulnera...

7CVSS5.6AI score0.00306EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2024/05/24 5:58 a.m.•27 views

CVE-2024-5142 XSS in Hubshare's social module

Stored Cross-Site Scripting vulnerability in Social Module in M-Files Hubshare before version 5.0.6.0 allows authenticated attacker to run scripts in other users browser...

7CVSS5.7AI score0.00306EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/24 12:00 a.m.•1 views

CVE-2024-5142: Improper Neutralization of Input During Web Page Generation

Stored Cross-Site Scripting vulnerability in Social Module in M-Files Hubshare before version 5.0.6.0 allows authenticated attacker to run scripts in other users browser...

7CVSS5.8AI score0.00306EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/05/24 12:00 a.m.•12 views

M-Files Hubshare 安全漏洞

M-Files Hubshare is a collaboration solution from M-Files, Inc. designed to seamlessly share files, documents and collaborative content. A security vulnerability exists in M-Files Hubshare versions prior to 5.0.3.8. An attacker exploited the vulnerability to run scripts in other users' browsers...

7CVSS6.7AI score0.00306EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/05/24 12:00 a.m.•13 views

PT-2024-34626

Name of the Vulnerable Software and Affected Versions M-Files Hubshare versions prior to 5.0.6.0 Description The issue allows an authenticated attacker to run scripts in other users' browsers due to a Stored Cross-Site Scripting vulnerability in the Social Module. Recommendations For versions pri...

7CVSS5.3AI score0.00306EPSS
SaveExploits0References9
Openbugbounty
Openbugbounty
•added 2024/05/22 11:17 a.m.•14 views

m-l-b.ch Improper Access Control vulnerability OBB-3929909

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

7AI score
SaveExploits0
CNNVD
CNNVD
•added 2024/05/20 12:00 a.m.•13 views

bit-loader 安全漏洞

bit-loader is a framework for building module loaders by the individual developer Miguel Castillo. A security vulnerability exists in bit-loader-babel version v.10.0.3, which originated from a vulnerability that allows an attacker to execute arbitrary code via the M function e parameter in index....

8.8CVSS8.7AI score0.00687EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/05/20 12:00 a.m.•20 views

PT-2024-20340 · Unknown · @Bit/Loader

Name of the Vulnerable Software and Affected Versions: @bit/loader version 10.0.3 Description: A Prototype Pollution issue allows an attacker to execute arbitrary code via the M function e argument in index.js. Recommendations: For version 10.0.3, consider disabling the M function until a patch i...

8.8CVSS8AI score0.00687EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
•added 2024/05/16 2:21 a.m.•11 views

SUSE CVE-2024-29857

An issue was discovered in ECCurve.java and ECCurve.cs in Bouncy Castle Java BC Java before 1.78, BC Java LTS before 2.73.6, BC-FJA before 1.0.2.5, and BC C .Net before 2.3.1. Importing an EC certificate with crafted F2m parameters can lead to excessive CPU consumption during the evaluation of th...

5.8CVSS7AI score0.011EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2024/05/14 4:58 a.m.•28 views

CVE-2024-0151

Arm is aware of a potential software security issue in code that uses Cortex-M Security Extensions CMSE and has been compiled with tools that implement Arm v8-M Security Extensions Requirements on Development Tools before version 1.4. This issue potentially allows an attacker who can pass...

7.9CVSS7.4AI score0.00448EPSS
SaveExploits0References4
Exploit DB
Exploit DB
•added 2024/05/04 12:00 a.m.•350 views

Elber Reble610 M/ODU XPIC IP-ASI-SDH Microwave Link - Device Config Disclosure

Elber Reble610 M/ODU XPIC IP-ASI-SDH Microwave Link Device Config Vendor: Elber S.r.l. Product web page: https://www.elber.it Affected version: 0.01 Revision 0 Summary: The REBLE610 features an accurate hardware design, absence of internal cabling and full modularity. The unit is composed by a...

5.3AI score
SaveExploits0
NVD
NVD
•added 2024/04/26 6:15 a.m.•25 views

CVE-2024-4056

Denial of service condition in M-Files Server in versions before 24.4.13592.4 and after 23.11 excluding 24.2 LTS allows unauthenticated user to consume computing resources...

7.5CVSS7.5AI score0.00769EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2024/04/26 6:15 a.m.•8 views

CVE-2024-4056

Denial of service condition in M-Files Server in versions before 24.4.13592.4 and after 23.11 excluding 24.2 LTS allows unauthenticated user to consume computing resources...

7.5CVSS5.3AI score0.00769EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2024/04/26 6:15 a.m.•21 views

CVE-2024-4056

Denial of service condition in M-Files Server in versions before 24.4.13592.4 and after 23.11 excluding 24.2 LTS allows unauthenticated user to consume computing resources...

7.5CVSS5.8AI score0.00769EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2024/04/26 6:02 a.m.•30 views

CVE-2024-4056 Denial of service condition in M-Files Server

Denial of service condition in M-Files Server in versions before 24.4.13592.4 and after 23.11 excluding 24.2 LTS allows unauthenticated user to consume computing resources...

7.5CVSS7.7AI score0.00769EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/04/26 6:02 a.m.•13 views

CVE-2024-4056 Denial of service condition in M-Files Server

Denial of service condition in M-Files Server in versions before 24.4.13592.4 and after 23.11 excluding 24.2 LTS allows unauthenticated user to consume computing resources...

7.5CVSS7.5AI score0.00769EPSS
SaveExploits0References2
CVE
CVE
•added 2024/04/26 6:02 a.m.•91 views

CVE-2024-4056

CVE-2024-4056 describes a denial-of-service condition in M‑Files Server. Affected are M‑Files Server versions prior to 24.4.13592.4 and those after 23.11, with the exception of the 24.2 LTS branch. The issue allows an unauthenticated user to consume computing resources, potentially impacting avai...

7.5CVSS7.5AI score0.00769EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder