Lucene search
+L

3109 matches found

Cvelist
Cvelist
added 2023/10/20 6:39 a.m.31 views

CVE-2023-2325 Stored XSS Vulnerability in M-Files Classic Web

Stored XSS Vulnerability in M-Files Classic Web versions before 23.10 and LTS Service Release Versions before 23.2 LTS SR4 and 23.8 LTS SR1allows attacker to execute script on users browser via stored HTML document...

7.3CVSS6.8AI score0.00427EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/10/20 12:0 a.m.7 views

M-Files Cross-Site Scripting Vulnerability

M-Files is an innovative metadata-driven document management platform from M-Files, Inc. A cross-site scripting vulnerability exists in M-Files Classic Web prior to 23.10, M-Files LTS Service Release prior to 23.2 LTS SR4, and 23.8 LTS SR1, which originates from a vulnerability that could allow a...

7.3CVSS5.9AI score0.00427EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/10/20 12:0 a.m.9 views

M-Files Web Code Issue Vulnerability

M-Files Web is an intelligent information management platform from M-Files USA, Inc. It is used to optimally support users in their daily work. A code issue vulnerability exists in M-Files Web versions prior to 23.10 that stems from an insufficient blacklist and allows remote code execution via...

8.2CVSS7.8AI score0.00312EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/10/20 12:0 a.m.7 views

M-Files Web Cross-Site Scripting Vulnerability

M-Files Web is an intelligent information management platform from M-Files USA, Inc. It is used to optimally support users in their daily work. A cross-site scripting vulnerability exists in M-Files Web versions prior to 23.10, which stems from a flaw in the execution of downloaded content that...

8.6CVSS7.1AI score0.00328EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/10/19 12:0 a.m.6 views

PT-2023-32153 · M Files · M-Files Web Companion

Name of the Vulnerable Software and Affected Versions: M-Files Web Companion versions prior to 23.10 M-Files Web Companion LTS Service Release Versions prior to 23.8 LTS SR1 Description: The issue is related to the execution of downloaded content, which allows for Remote Code Execution. This flaw...

8.6CVSS7.7AI score0.00328EPSS
SaveExploits0References5
OSV
OSV
added 2023/10/17 12:15 p.m.8 views

CVE-2023-39902

A software vulnerability has been identified in the U-Boot Secondary Program Loader SPL before 2023.07 on select NXP i.MX 8M family processors. Under certain conditions, a crafted Flattened Image Tree FIT format structure can be used to overwrite SPL memory, allowing unauthenticated software to...

7.8CVSS5.8AI score0.00145EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2023/10/17 12:15 p.m.3 views

CVE-2023-39902

A software vulnerability has been identified in the U-Boot Secondary Program Loader SPL before 2023.07 on select NXP i.MX 8M family processors. Under certain conditions, a crafted Flattened Image Tree FIT format structure can be used to overwrite SPL memory, allowing unauthenticated software to...

7.8CVSS7.1AI score0.00145EPSS
SaveExploits0References3
NVD
NVD
added 2023/10/16 10:15 a.m.36 views

CVE-2023-45639

Cross-Site Request Forgery CSRF vulnerability in Codex-m Sort SearchResult By Title plugin = 10.0 versions...

8.8CVSS5.8AI score0.00214EPSS
SaveExploits0References1
OSV
OSV
added 2023/10/16 10:15 a.m.7 views

CVE-2023-45639

Cross-Site Request Forgery CSRF vulnerability in Codex-m Sort SearchResult By Title plugin = 10.0 versions...

8.8CVSS7.3AI score0.00214EPSS
SaveExploits0References1
Prion
Prion
added 2023/10/16 10:15 a.m.20 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Codex-m Sort SearchResult By Title plugin = 10.0 versions...

6.8CVSS8.8AI score0.00214EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/10/16 9:32 a.m.11 views

CVE-2023-45639 WordPress Sort SearchResult By Title Plugin <= 10.0 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Codex-m Sort SearchResult By Title plugin = 10.0 versions...

4.3CVSS8.8AI score0.00214EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/10/16 9:32 a.m.34 views

CVE-2023-45639 WordPress Sort SearchResult By Title Plugin <= 10.0 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Codex-m Sort SearchResult By Title plugin = 10.0 versions...

4.3CVSS9AI score0.00214EPSS
SaveExploits0References1
CVE
CVE
added 2023/10/16 9:32 a.m.40 views

CVE-2023-45639

CVE-2023-45639 concerns the WordPress plugin Sort SearchResult By Title (Codex-m) with versions

8.8CVSS6.4AI score0.00214EPSS
SaveExploits0References1Affected Software1
Openbugbounty
Openbugbounty
added 2023/10/08 11:4 a.m.9 views

m-battle.ru Cross Site Scripting vulnerability OBB-3731789

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
Code423n4
Code423n4
added 2023/09/27 12:0 a.m.13 views

M-04 MitigationConfirmed

Lines of code Vulnerability details In the previous implementation RewardableERC20claimAndSyncRewards rewardsPerShare += delta one / totalSupply; Some rewards might be locked inside the contract due to the rounding loss. Mitigation PR 896 Recalculated balanceAfterClaimingRewards to remove the...

6.9AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2023/09/25 11:28 p.m.15 views

m.4shared.com Open Redirect vulnerability OBB-3711175

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.6AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2023/09/17 5:17 p.m.10 views

m-henseler.ch Cross Site Scripting vulnerability OBB-3691943

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
Cvelist
Cvelist
added 2023/09/11 12:0 a.m.24 views

CVE-2020-19323

An issue was discovered in /bin/miniupnpd on D-Link DIR-619L 2.06beta devices. There is a heap buffer overflow allowing remote attackers to restart router via the M-search request ST parameter. No authentication required...

7.9AI score0.00983EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2023/09/11 12:0 a.m.5 views

D-Link DIR-619 缓冲区错误漏洞

D-Link DIR-619L is a home wireless router from AUO D-Link, designed for home and small office environments, utilizing the IEEE 802.11n wireless standard with a maximum transmission rate of 300Mbps. The D-Link DIR-619L suffers from a buffer overflow vulnerability that originates from improper inpu...

7.5CVSS7.3AI score0.00983EPSS
SaveExploits1References3
OSV
OSV
added 2023/09/08 2:15 a.m.23 views

CVE-2023-40271

In Trusted Firmware-M through TF-Mv1.8.0, for platforms that integrate the CryptoCell accelerator, when the CryptoCell PSA Driver software Interface is selected, and the Authenticated Encryption with Associated Data Chacha20-Poly1305 algorithm is used, with the single-part verification function...

7.5CVSS7.6AI score0.00323EPSS
SaveExploits1References2
Rows per page
Query Builder