CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

7488 matches found

NVD•added 2023/01/27 10:15 p.m.•34 views

CVE-2022-39812

Italtel NetMatch-S CI 5.2.0-20211008 allows Absolute Path Traversal under NMSCI-WebGui/SaveFileUploader. An unauthenticated user can upload files to an arbitrary path. An attacker can change the uploadDir parameter in a POST request not possible using the GUI to an arbitrary directory. Because th...

7.5CVSS7.4AI score0.00961EPSS

SaveExploits1References1

osv_cve•added 2023/01/27 10:15 p.m.•14 views

CVE-2022-39811

Italtel NetMatch-S CI 5.2.0-20211008 has incorrect Access Control under NMSCI-WebGui/advancedsettings.jsp and NMSCIWebGui/SaveFileUploader. By not verifying permissions for access to resources, it allows an attacker to view pages that are not allowed, and modify the system configuration, bypassin...

9.1CVSS5.8AI score0.00823EPSS

SaveExploits1References1

NVD•added 2023/01/27 10:15 p.m.•36 views

CVE-2022-39811

9.1CVSS9.2AI score0.00823EPSS

SaveExploits1References1

NVD•added 2023/01/27 10:15 p.m.•32 views

CVE-2022-39813

Italtel NetMatch-S CI 5.2.0-20211008 allows Multiple Reflected/Stored XSS issues under NMSCIWebGui/jsecuritycheck via the jusername parameter, or NMSCIWebGui/actloglineview.jsp via the name or actLine parameter. An attacker leveraging this vulnerability could inject arbitrary JavaScript. The...

6.1CVSS6AI score0.0047EPSS

SaveExploits1References1

osv_cve•added 2023/01/27 10:15 p.m.•16 views

CVE-2022-39813

6.1CVSS5.8AI score0.0047EPSS

SaveExploits1References1

osv_cve•added 2023/01/27 10:15 p.m.•27 views

CVE-2022-39812

7.5CVSS5.9AI score0.00961EPSS

SaveExploits1References1

Prion•added 2023/01/27 10:15 p.m.•27 views

Cross site scripting

5.8CVSS6AI score0.0047EPSS

SaveExploits1References1Affected Software1

Prion•added 2023/01/27 10:15 p.m.•28 views

Information disclosure

6.4CVSS9.1AI score0.00823EPSS

SaveExploits1References1Affected Software1

Prion•added 2023/01/27 10:15 p.m.•36 views

Path traversal

5CVSS7.4AI score0.00961EPSS

SaveExploits1References1Affected Software1

Hacker One•added 2023/01/27 2:54 a.m.•45 views

IBM: Moodle XSS on s-immerscio.comprehend.ibm.com

Vulnerability description not provided...

7.1AI score

SaveExploits0

Positive Technologies•added 2023/01/27 12:00 a.m.•7 views

PT-2023-13728

Name of the Vulnerable Software and Affected Versions Italtel NetMatch-S CI version 5.2.0-20211008 Description The issue allows an unauthenticated user to upload files to an arbitrary path due to Absolute Path Traversal under NMSCI-WebGui/SaveFileUploader. An attacker can modify the uploadDir...

7.5CVSS0.00961EPSS

SaveExploits1References5

Rapid7 Vulnerability Database (full)•added 2023/01/27 12:00 a.m.•10 views

CVE-2022-39812: Improper Limitation of a Pathname to a Restricted Directory

7.5CVSS5.9AI score0.00961EPSS

SaveExploits1References3

CVE•added 2023/01/27 12:00 a.m.•65 views

CVE-2022-39811

This CVE (CVE-2022-39811) affects Italtel NetMatch-S CI 5.2.0-20211008. The root cause is incorrect access control in NMSCI-WebGui/advancedsettings.jsp and NMSCIWebGui/SaveFileUploader, where permissions are not verified for resource access. As described, an attacker could view pages that should ...

9.1CVSS8.1AI score0.00823EPSS

SaveExploits1References1Affected Software1

CVE•added 2023/01/27 12:00 a.m.•74 views

CVE-2022-39813

CVE-2022-39813 affects Italtel NetMatch-S CI 5.2.0-20211008. The vulnerability is described as multiple Reflected/Stored XSS issues in NMSCIWebGui/j_security_check (via j_username) and NMSCIWebGui/actloglineview.jsp (via name or actLine), allowing an attacker to inject arbitrary JavaScript. The p...

6.1CVSS6.4AI score0.0047EPSS

SaveExploits1References1Affected Software1

CVE•added 2023/01/27 12:00 a.m.•76 views

CVE-2022-39812

Italtel NetMatch-S CI 5.2.0-20211008 is affected by an Absolute Path Traversal vulnerability in NMSCI-WebGui/SaveFileUploader. An unauthenticated attacker can upload files to an arbitrary path by changing the uploadDir parameter in a POST request (GUI cannot do this), potentially leading to unaut...

7.5CVSS7.3AI score0.00961EPSS

SaveExploits1References1Affected Software1

Cvelist•added 2023/01/27 12:00 a.m.•44 views

CVE-2022-39812

7.6AI score0.00961EPSS

SaveExploits1References1

Positive Technologies•added 2023/01/27 12:00 a.m.•2 views

PT-2023-13729

Name of the Vulnerable Software and Affected Versions Italtel NetMatch-S CI version 5.2.0-20211008 Description The issue allows for Multiple Reflected/Stored XSS, enabling an attacker to inject arbitrary JavaScript. This can be achieved via the "j security check" endpoint under NMSCIWebGui, using...

6.1CVSS0.0047EPSS

SaveExploits1References4

Vulnrichment•added 2023/01/27 12:00 a.m.•12 views

CVE-2022-39813

6.1AI score0.0047EPSS

SaveExploits1References1

Positive Technologies•added 2023/01/27 12:00 a.m.•4 views

PT-2023-13727

Name of the Vulnerable Software and Affected Versions Italtel NetMatch-S CI version 5.2.0-20211008 Description The issue concerns incorrect Access Control. Specifically, it affects the "NMSCI-WebGui/advancedsettings.jsp" and "NMSCI-WebGui/SaveFileUploader" endpoints. This allows an attacker to vi...

9.1CVSS0.00823EPSS

SaveExploits1References4

Vulnrichment•added 2023/01/27 12:00 a.m.•13 views

CVE-2022-39812

7.6AI score0.00961EPSS

SaveExploits1References1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by