Show filters
93 Total Results
Displaying 31-40 of 93
Sort by:
Attacker Value
Unknown
CVE-2023-5524
Disclosure Date: October 20, 2023 (last updated August 28, 2024)
Insufficient blacklisting in M-Files Web Companion before release version 23.10 and LTS Service Release Versions before 23.8 LTS SR1 allows
Remote Code Execution
via specific file types
0
Attacker Value
Unknown
CVE-2023-5523
Disclosure Date: October 20, 2023 (last updated August 28, 2024)
Execution of downloaded content flaw in M-Files Web Companion before release version 23.10 and LTS Service Release Versions before 23.8 LTS SR1 allows
Remote Code Execution
0
Attacker Value
Unknown
CVE-2023-2325
Disclosure Date: October 20, 2023 (last updated August 28, 2024)
Stored XSS Vulnerability in M-Files Classic Web versions before 23.10 and LTS Service Release Versions before 23.2 LTS SR4 and 23.8 LTS SR1allows attacker to execute script on users browser via stored HTML document.
0
Attacker Value
Unknown
CVE-2023-45602
Disclosure Date: October 18, 2023 (last updated October 25, 2023)
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Shopfiles Ltd Ebook Store plugin <= 5.785 versions.
0
Attacker Value
Unknown
CVE-2023-4636
Disclosure Date: September 05, 2023 (last updated October 08, 2023)
The WordPress File Sharing Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 2.0.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.
0
Attacker Value
Unknown
CVE-2023-3425
Disclosure Date: August 25, 2023 (last updated October 08, 2023)
Out-of-bounds read issue in M-Files Server versions below 23.8.12892.6 and LTS Service Release Versions before 23.2 LTS SR3 allows unauthenticated user to read restricted amount of bytes from memory.
0
Attacker Value
Unknown
CVE-2023-3406
Disclosure Date: August 25, 2023 (last updated October 08, 2023)
Path Traversal issue in M-Files Classic Web versions below 23.6.12695.3 and LTS Service Release Versions before 23.2 LTS SR3 allows authenticated user to read some restricted files on the web server
0
Attacker Value
Unknown
CVE-2023-3405
Disclosure Date: June 27, 2023 (last updated October 08, 2023)
Unchecked parameter value in M-Files Server in versions before 23.6.12695.3 (excluding 23.2 SR2 and newer) allows anonymous user to cause denial of service
0
Attacker Value
Unknown
CVE-2023-2480
Disclosure Date: May 25, 2023 (last updated October 08, 2023)
Missing access permissions checks in M-Files Client before 23.5.12598.0 (excluding 23.2 SR2 and newer) allows elevation of privilege via UI extension applications
0
Attacker Value
Unknown
CVE-2023-22690
Disclosure Date: May 15, 2023 (last updated October 08, 2023)
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Shopfiles Ltd Ebook Store plugin <= 5.775 versions.
0
