3108 matches found
CVE-2024-6789
CVE-2024-6789 describes a path traversal flaw in the API endpoint of M-Files Server that allows an authenticated user to read files. Affected products/versions are: M‑Files Server before 24.8.13981.0, M‑Files Server LTS before 24.2.13421.15 SR2, and M‑Files Server LTS before 23.8.12892.0 SR6. The...
CVE-2024-6789 Path traversal in M-Files API
A path traversal issue in API endpoint in M-Files Server before version 24.8.13981.0 and LTS 24.2.13421.15 SR2 and LTS 23.8.12892.0 SR6 allows authenticated user to read files...
M-Files Server 路径遍历漏洞
M-Files Server is a server for the M-Files system from M-Files, Inc. A path traversal vulnerability exists in M-Files Server version 24.8.13981.0, which stems from the presence of a path traversal vulnerability...
PT-2024-37864
Name of the Vulnerable Software and Affected Versions M-Files Server versions prior to 24.8.13981.0 M-Files Server LTS versions prior to 24.2.13421.15 SR2 M-Files Server LTS versions prior to 23.8.12892.0 SR6 Description A path traversal issue in the API endpoint of M-Files Server allows an...
org.bouncycastle: Importing an EC certificate with crafted F2m parameters may lead to Denial of Service
A vulnerability was found in Bouncy Castle. An issue was discovered in ECCurve.java and ECCurve.cs in Bouncy Castle Java BC Java. Importing an EC certificate with crafted F2m parameters can lead to excessive CPU consumption during the evaluation of the curve parameters...
Siemens SCALANCE M-800, RUGGEDCOM RM1224
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...
Information leakage vulnerability in the enterprise version of Zhiyuan A6-m Collaboration Management Software of Beijing Zhiyuan Internet Software Co. Ltd (CNVD-2024-37241)
Zhiyuan A6-m Collaboration Management Software Enterprise Edition is a collaboration management software for small and medium-sized enterprises. There is an information leakage vulnerability in the enterprise version of Zhiyuan A6-m Collaboration Management Software of Beijing Zhiyuan Internet...
New Research: The Proliferation of Cellular in IoT
Researchers explain the trend and argue for deeper understanding Analysis of Cellular Based Internet of Things IoT Technology is a new whitepaper co-authored by Rapid7 principal security researcher Deral Heiland and Thermo Fisher Scientific lead product security researcher Carlota Bindner. In thi...
CVE-2024-6881
Stored XSS in M-Files Hubshare versions before 5.0.6.0 allows an authenticated attacker to execute arbitrary JavaScript in user's browser session...
CVE-2024-6124
Reflected XSS in M-Files Hubshare before version 5.0.6.0 allows an attacker to execute arbitrary JavaScript code in the context of the victim's browser session...
CVE-2024-6881
Stored XSS in M-Files Hubshare versions before 5.0.6.0 allows an authenticated attacker to execute arbitrary JavaScript in user's browser session...
CVE-2024-6881
Stored XSS in M-Files Hubshare versions before 5.0.6.0 allows an authenticated attacker to execute arbitrary JavaScript in user's browser session...
CVE-2024-6124
Reflected XSS in M-Files Hubshare before version 5.0.6.0 allows an attacker to execute arbitrary JavaScript code in the context of the victim's browser session...
CVE-2024-6124
Reflected XSS in M-Files Hubshare before version 5.0.6.0 allows an attacker to execute arbitrary JavaScript code in the context of the victim's browser session...
CVE-2024-6124
CVE-2024-6124 describes a reflected XSS in M‑Files Hubshare prior to version 5.0.6.0 . The vulnerability allows an attacker to execute arbitrary JavaScript in the context of the victim’s browser session. The available sources confirm the affected product and the root cause is a reflected cross‑si...
CVE-2024-6124 Reflected XSS in Hubshare via Open Redirect
Reflected XSS in M-Files Hubshare before version 5.0.6.0 allows an attacker to execute arbitrary JavaScript code in the context of the victim's browser session...
CVE-2024-6124 Reflected XSS in Hubshare via Open Redirect
Reflected XSS in M-Files Hubshare before version 5.0.6.0 allows an attacker to execute arbitrary JavaScript code in the context of the victim's browser session...
CVE-2024-6881 Stored XSS Vulnerability
Stored XSS in M-Files Hubshare versions before 5.0.6.0 allows an authenticated attacker to execute arbitrary JavaScript in user's browser session...
CVE-2024-6881
CVE-2024-6881 concerns a stored XSS in M-Files Hubshare prior to version 5.0.6.0 . The issue allows an authenticated attacker to execute arbitrary JavaScript in a user’s browser session. Affected component is the Hubshare web interface; root cause is a stored XSS condition in the application flow...