Lucene search
K

9 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2012-5098

Malware in sbrugna...

4.3CVSS6.4AI score0.00254EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/05/23 7:31 a.m.3 views

CVE-2024-48939

Insufficient validation performed on the REST API License file in Paxton Net2 before 6.07.14023.5015 SR4 enables use of the REST API with an invalid License File. Attackers may be able to retrieve access-log data...

7.5CVSS6.8AI score0.004EPSS
Exploits0References1
NVD
NVD
added 2024/11/11 1:15 a.m.11 views

CVE-2024-48939

Insufficient validation performed on the REST API License file in Paxton Net2 before 6.07.14023.5015 SR4 enables use of the REST API with an invalid License File. Attackers may be able to retrieve access-log data...

7.5CVSS0.004EPSS
Exploits0References4
Cvelist
Cvelist
added 2024/11/11 12:0 a.m.15 views

CVE-2024-48939

Insufficient validation performed on the REST API License file in Paxton Net2 before 6.07.14023.5015 SR4 enables use of the REST API with an invalid License File. Attackers may be able to retrieve access-log data...

0.004EPSS
Exploits0References3
CVE
CVE
added 2024/11/11 12:0 a.m.69 views

CVE-2024-48939

Paxton Net2 prior to version 6.07.14023.5015 (SR4) has insufficient validation of the REST API License file, which can allow using the REST API with an invalid license and may enable retrieval of access-log data. Confirmed in multiple sources (NVD, Red Hat, CNVD/CNNVD, PT Security) across CVE-202...

7.5CVSS6.5AI score0.004EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2024/10/21 12:0 a.m.2 views

PT-2024-33285 · Paxton · Net2

Name of the Vulnerable Software and Affected Versions: Paxton Net2 versions prior to 6.07.14023.5015 SR4 Description: Insufficient validation is performed on the REST API License file, enabling the use of the REST API with an invalid License File. This allows attackers to potentially retrieve...

7.5CVSS7AI score0.004EPSS
Exploits0References11
NVD
NVD
added 2012/12/06 11:45 a.m.5 views

CVE-2012-5175

Cross-site scripting XSS vulnerability in KENT-WEB ACCESS REPORT 4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors related to access-log data...

4.3CVSS5.6AI score0.00254EPSS
Exploits0References3
Prion
Prion
added 2012/12/06 11:45 a.m.9 views

Cross site scripting

Cross-site scripting XSS vulnerability in KENT-WEB ACCESS REPORT 4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors related to access-log data...

4.3CVSS6.1AI score0.00254EPSS
Exploits0References3Affected Software1
CVE
CVE
added 2012/12/06 11:0 a.m.42 views

CVE-2012-5175

CVE-2012-5175 concerns an XSS vulnerability in KENT-WEB ACCESS REPORT (v4.2 and earlier). The issue arises in processing of access-log data, enabling remote attackers to inject arbitrary web script or HTML that may execute in a user’s browser. Affected product: ACCESS REPORT by KENT-WEB; versions...

4.3CVSS5.8AI score0.00254EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder