Filter
Software
M-files M-files ServerLack of rate limiting in M-Files Server and M-Files Web products with versions before 21.12.10873.0, allows brute-forcing of certain type of user accounts.
9.8
First published (updated )
M-files M-files ServerBrute force vulnerability in M-Files user authentication
9.8
EPSS
0.09%
First published (updated )
M-Files HubshareJavascript injection in PDFtron in M-Files Hubshare
8.8
First published (updated )
M-files M-filesLocal Elevation of Privilege in M-Files
8.8
First published (updated )
M-files M-files ServerIncorrect calculation of effective permissions
8.8
EPSS
0.05%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2023-5523M-Files Web Companion allows Remote Code Execution
8.6
First published (updated )
M-Files HubshareReflected XSS in Hubshare via Open Redirect
8.5
EPSS
0.04%
First published (updated )
M-files M-files ServerPath traversal in M-Files API
8.4
EPSS
0.04%
First published (updated )
CVE-2023-5524M-Files Web Companion allows Remote Code Execution for some filetypes
8.2
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
M-Files HubshareXSS in all comments fields in M-Files Hubshare
8.2
First published (updated )
M-Files HubshareBroken access controls on PDFtron data in M-Files Hubshare
8.2
First published (updated )
M-files M-filesElevation of Privilege in M-Files Desktop Client
7.8
First published (updated )
M-files M-files WebM-Files Web before 20.10.9524.1 allows a denial of service via overlapping ranges (in HTTP requests …
7.8
First published (updated )
M-files M-files ServerDesktop component allows lateral movement between sessions
7.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
M-Files Classic WebPath traversal issue in M-Files Classic Web
7.7
First published (updated )
M-files M-files ServerXSS vulnerability in M-Files Web
7.6
First published (updated )
M-files M-files WebIn M-Files Web product with versions before 20.10.9524.1 and 20.10.9445.0, a remote attacker could u…
7.5
First published (updated )
M-Files HubshareBroken access controls on PDFtron WebviewerUI in M-Files Hubshare
7.5
First published (updated )
M-files M-files ServerInsertion of Sensitive Information into Log File
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
M-files M-files ServerInsecure way of passing a download key
7.5
First published (updated )
M-files M-files ServerUncontrolled Resource Consuption in M-Files Server
7.5
First published (updated )
M-files M-files ServerUncontrolled Resource Consuption in M-Files Server
7.5
First published (updated )
M-files M-files ServerDenial of service condition in M-Files Server
7.5
First published (updated )
M-files M-files ServerM-Files REST API allows Denial of Service
7.5
EPSS
0.05%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
M-Files Classic WebStored XSS Vulnerability in M-Files Classic Web
7.3
First published (updated )
M-files M-filesIncorrect privilege assignment in M-Files Web Server
6.5
First published (updated )
M-files M-files ServerUncontrolled Resource Consumption in M-Files Server
6.5
First published (updated )
M-files M-files ServerUncontrolled Resource Consumption in M-Files Server
6.5
EPSS
0.04%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.