CVE-2020-15035

NeDi 1.9C is vulnerable to cross-site scripting XSS attack. The application allows an attacker to execute arbitrary JavaScript code via the Monitoring-Map.php hde parameter...

CVE-2020-15030

NeDi 1.9C is vulnerable to cross-site scripting XSS attack. The application allows an attacker to execute arbitrary JavaScript code via the Topology-Routes.php rtr parameter...

CVE-2020-15029

NeDi 1.9C is vulnerable to cross-site scripting XSS attack. The application allows an attacker to execute arbitrary JavaScript code via the Assets-Management.php sn parameter...

Cross site scripting

NeDi 1.9C is vulnerable to cross-site scripting XSS attack. The application allows an attacker to execute arbitrary JavaScript code via the Monitoring-Setup.php tet parameter...

CVE-2020-15034

NeDi 1.9C is vulnerable to cross-site scripting XSS attack. The application allows an attacker to execute arbitrary JavaScript code via the Monitoring-Setup.php tet parameter...

CVE-2020-15033

NeDi 1.9C is vulnerable to cross-site scripting XSS attack. The application allows an attacker to execute arbitrary JavaScript code via the snmpget.php ip parameter...

CVE-2020-15028

NeDi 1.9C is vulnerable to a cross-site scripting XSS attack. The application allows an attacker to execute arbitrary JavaScript code via the Topology-Map.php xo parameter...

CVE-2020-15028

NeDi 1.9C is vulnerable to a cross-site scripting (XSS) flaw. The issue allows an attacker to execute arbitrary JavaScript via the Topology-Map.php page parameter xo. This appears consistently across multiple feeds (NVD, CNVD, PRION, OpenVAS) and is described as a web-application XSS without evid...

CVE-2020-15029

CVE-2020-15029 affects NeDi 1.9C, vulnerable to cross-site scripting (XSS) via the Assets-Management.php sn parameter. The issue is a client-side script injection risk in the web UI that could allow arbitrary JavaScript execution in authenticated or guest contexts depending on access, as describe...

CVE-2020-15030

NeDi 1.9C contains a cross-site scripting (XSS) vulnerability that allows an attacker to execute arbitrary JavaScript code via the Topology-Routes.php rtr parameter. The issue is tied to CVE-2020-15030 and is corroborated by multiple feeds indicating the same vector. The provided connected docume...

CVE-2020-15031

CVE-2020-15031 concerns NeDi 1.9C, where a cross-site scripting (XSS) vulnerability exists in the Assets-Management.php chg parameter, allowing an attacker to execute arbitrary JavaScript code. The vulnerability is documented across multiple sources (NVD entry and Red Hat advisory), specifying th...

CVE-2020-15033

NeDi 1.9C is vulnerable to cross-site scripting (XSS) via the snmpget.php ip parameter. Multiple connected sources (Red Hat advisory, CNVD, CNVD CNVD-2020-44580, NVD entry, OpenVAS entry, PRION, CVE record) confirm the same detail. The exact root cause is not elaborated beyond the parameter-based...

CVE-2020-15034

CVE-2020-15034 : NeDi 1.9C is vulnerable to cross-site scripting (XSS) via the Monitoring-Setup.php tet parameter, allowing an attacker to execute arbitrary JavaScript in a victim’s browser. The provided documents state the vulnerability but do not include remediation details or confirmed exploit...

CVE-2020-15035

CVE-2020-15035 affects NeDi 1.9C, where a Cross-Site Scripting (XSS) flaw exists in the Monitoring-Map.php page via the hde parameter. The vulnerability allows an attacker to inject and execute arbitrary JavaScript in the victim’s browser, as described across multiple sources (NVD/CNVD/PRION/CVE ...

CVE-2020-15037

NeDi 1.9C is vulnerable to cross-site scripting XSS attack. The application allows an attacker to execute arbitrary JavaScript code via the Reports-Devices.php page st parameter...

CVE-2020-15036

NeDi 1.9C is vulnerable to cross-site scripting XSS attack. The application allows an attacker to execute arbitrary JavaScript code via the Topology-Linked.php dv parameter...

Cross site scripting

NeDi 1.9C is vulnerable to cross-site scripting XSS attack. The application allows an attacker to execute arbitrary JavaScript code via the Topology-Linked.php dv parameter...

CVE-2020-15036

CVE-2020-15036 affects NeDi 1.9C, with a reflected Cross-Site Scripting (XSS) vulnerability exploitable via the dv parameter on Topology-Linked.php. The issue is documented across multiple feeds (NVD, RH Red Hat CVE page, CNVD, OpenVAS) as NeDi 1.9C XSS; no exploitation details are provided in th...

CVE-2020-15037

The CVE-2020-15037 entry concerns NeDi 1.9C, a web application where an attacker can inject arbitrary JavaScript through the Reports-Devices.php page via the st[] parameter, causing a cross-site scripting (XSS) vulnerability. The consolidated connected documents confirm the vulnerability exists i...

NeDi Consulting Unspecified Vulnerability in NeDi

NeDi Consulting NeDi is a suite of open source software that supports the discovery and mapping of network devices from the Swiss company NeDi Consulting. A security vulnerability exists in NeDi Consulting NeDi version 1.9C, which stems from the pwsec.php file not properly escaping shell...