3157 matches found
CVE-2024-9174
CVE-2024-9174 affects M-Files Hubshare (Social Module) prior to version 5.0.8.6. It is a stored HTML injection vulnerability that allows an authenticated user to spoof the UI. Root cause: HTML injection in the Social Module; impact includes UI spoofing. The PT-Security advisory corroborates the a...
CVE-2024-9174 Stored HTML Injection in Hubshare social module
Stored HTML Injection in Social Module in M-Files Hubshare before version 5.0.8.6 allows authenticated user to spoof UI...
M-Files Connector 安全漏洞
M-Files Connector is an M-Files connector for network folders from M-Files, Inc. A security vulnerability exists in M-Files Connector for Copilot versions prior to 24.9.3 that stems from an access control error...
M-Files Hubshare 安全漏洞
M-Files Hubshare is a collaboration solution from M-Files, Inc. designed to seamlessly share files, documents and collaborative content. A security vulnerability exists in M-Files Hubshare versions prior to 5.0.8.6 that stems from the presence of an HTML injection vulnerability...
PT-2024-39579 · M Files · M-Files Connector For Copilot
Name of the Vulnerable Software and Affected Versions: M-Files Connector for Copilot versions prior to 24.9.3 Description: The issue allows an authenticated user to bypass permissions and access a limited amount of documents due to an incorrect access control list calculation. Recommendations: Fo...
PT-2024-39472 · M Files · M-Files Hubshare
Name of the Vulnerable Software and Affected Versions: M-Files Hubshare versions prior to 5.0.8.6 Description: The issue allows an authenticated user to spoof the UI through stored HTML injection in the Social Module. Recommendations: For versions prior to 5.0.8.6, update to version 5.0.8.6 or...
libexpat: integer overflow
A flaw was found in libexpat's internal nextScaffoldPart function in xmlparse.c. It can have an integer overflow for mgroupSize on 32-bit platforms where UINTMAX equals SIZEMAX...
RHSA-2021:0383 Red Hat Security Advisory: RHV-M (ovirt-engine) 4.4.z security, bug fix, enhancement upd[ovirt-4.4.4] 0-day
Bulletin has no description...
RHSA-2021:0381 Red Hat Security Advisory: RHV-M(ovirt-engine) 4.4.z security, bug fix, enhancement update [ovirt-4.4.4]
Bulletin has no description...
CVE-2023-51712
An issue was discovered in Trusted Firmware-M through 2.0.0. The lack of argument verification in the logging subsystem allows attackers to read sensitive data via the login function...
CVE-2023-51712
An issue was discovered in Trusted Firmware-M through 2.0.0. The lack of argument verification in the logging subsystem allows attackers to read sensitive data via the login function...
Long Analysis of the M-209
Really interesting analysis of the American M-209 encryption device and its security...
CVE-2023-51712
An issue was discovered in Trusted Firmware-M through 2.0.0. The lack of argument verification in the logging subsystem allows attackers to read sensitive data via the login function...
PT-2024-14256 · Unknown · Trusted Firmware-M
Name of the Vulnerable Software and Affected Versions: Trusted Firmware-M versions through 2.0.0 Description: An issue was discovered in the logging subsystem of Trusted Firmware-M, where the lack of argument verification allows attackers to read sensitive data via the login function...
CVE-2023-51712
Trusted Firmware-M (through version 2.0.0) is affected by CVE-2023-51712 due to an argument verification flaw in the logging subsystem, which can allow an attacker to read sensitive data via the login function. The issue is described consistently across Red Hat, NVD, OSV, CNNVD, CVE listings, and...
Trusted Firmware-M 安全漏洞
Linaro Trusted Firmware-M Tf-M is a reference implementation of the Platform Security Architecture Psa IoT security framework from Linaro, UK. A security vulnerability exists in Trusted Firmware-M version 2.0.0 and prior versions, which stems from a lack of parameter validation in the logging...
CVE-2023-51712
An issue was discovered in Trusted Firmware-M through 2.0.0. The lack of argument verification in the logging subsystem allows attackers to read sensitive data via the login function...
MiniUPnPd 1.4 Denial of Service
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'MiniUPnPd 1.4 Denial of Service DoS Exploit', 'Description' = %q This module allows remote attackers to cause a denial of service DoS in MiniUPnP...
