CVE-2023-2112

The CVE-2023-2112 issue affects M-Files’ Desktop component service, where versions prior to 23.4.12455.0 permit lateral movement between sessions. The vulnerability is tied to the desktop component, enabling session-to-session movement with local attack potential. According to the publicly docume...

CVE-2023-2112 Desktop component allows lateral movement between sessions

Desktop component service allows lateral movement between sessions in M-Files before 23.4.12455.0...

CVE-2023-2112 Desktop component allows lateral movement between sessions

Desktop component service allows lateral movement between sessions in M-Files before 23.4.12455.0...

CVE-2023-0384

CVE-2023-0384 affects M‑Files Server prior to 23.4.12528.1, where user‑controlled operations can cause uncontrolled memory consumption in a scheduled job, leading to a Denial of Service. The issue is documented across multiple sources (e.g., M‑Files security advisories, CNVD, PT Security) with th...

CVE-2023-0384 Uncontrolled Resource Consuption in M-Files Server

User-controlled operations could have allowed Denial of Service in M-Files Server before 23.4.12528.1 due to uncontrolled memory consumption for a scheduled job...

CVE-2023-0384 Uncontrolled Resource Consuption in M-Files Server

User-controlled operations could have allowed Denial of Service in M-Files Server before 23.4.12528.1 due to uncontrolled memory consumption for a scheduled job...

CVE-2023-0383 Uncontrolled Resource Consuption in M-Files Server

User-controlled operations could have allowed Denial of Service in M-Files Server before 23.4.12528.1 due to uncontrolled memory consumption...

CVE-2023-0383

CVE-2023-0383 affects M-Files Server versions prior to 23.4.12528.1. The issue is a denial-of-service caused by uncontrolled memory consumption triggered by user-controlled operations. Remediation: upgrade to version 23.4.12528.1 or later. No exploitation details are provided in the documents bey...

M-Files 资源管理错误漏洞

M-Files is an innovative metadata-driven document management platform from M-Files, Inc. A security vulnerability exists in M-Files versions prior to 23.4.12528.1 that stems from uncontrolled memory consumption leading to a denial of service in the server...

PT-2023-16232 · M Files · M-Files Server

Name of the Vulnerable Software and Affected Versions: M-Files Server versions prior to 23.4.12528.1 Description: The issue allows for Denial of Service due to uncontrolled memory consumption when user-controlled operations are performed. Recommendations: For versions prior to 23.4.12528.1, updat...

M-Files 安全漏洞

M-Files is an innovative metadata-driven document management platform from M-Files, Inc. A security vulnerability exists in versions prior to M-Files 23.4.12455.0 that stems from a desktop component service that allows lateral movement between sessions...

M-Files 资源管理错误漏洞

M-Files is an innovative metadata-driven document management platform from M-Files, Inc. A resource management error vulnerability exists in versions prior to M-Files 23.4.12528.1 that stems from uncontrolled memory consumption of scheduled jobs, which can be exploited by an attacker to cause a...

PT-2023-17911 · M Files · My Files

Name of the Vulnerable Software and Affected Versions: M-Files versions prior to 23.4.12455.0 Description: The issue allows lateral movement between sessions in the desktop component service. Recommendations: For versions prior to 23.4.12455.0, update to version 23.4.12455.0 or later to resolve t...

Siemens SCALANCE M-800 & S615 Sensitive Cookie in HTTPS Session Without 'Secure' Attribute (CVE-2016-7090)

The integrated web server on Siemens SCALANCE M-800 and S615 modules with firmware before 4.02 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session. This...

m-link.cz Cross Site Scripting vulnerability OBB-3252952

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-0382

User-controlled operations could have allowed Denial of Service in M-Files Server before 23.4.12528.1 due to uncontrolled memory consumption...

CVE-2023-0382

User-controlled operations could have allowed Denial of Service in M-Files Server before 23.4.12528.1 due to uncontrolled memory consumption...

CVE-2023-0382 Uncontrolled Resource Consumption in M-Files Server

User-controlled operations could have allowed Denial of Service in M-Files Server before 23.4.12528.1 due to uncontrolled memory consumption...

CVE-2023-0382 Uncontrolled Resource Consumption in M-Files Server

User-controlled operations could have allowed Denial of Service in M-Files Server before 23.4.12528.1 due to uncontrolled memory consumption...

CVE-2023-0382

CVE-2023-0382 affects M-Files Server prior to version 23.4.12528.1, where user-controlled operations can cause uncontrolled memory consumption leading to Denial of Service. Exploitation details are not provided in the documents beyond this impact; no active exploit data is cited. Remediation: upd...