Lucene search
+L

215 matches found

NVD
NVD
•added 2024/09/02 6:15 p.m.•37 views

CVE-2024-6920

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NAC Telecommunication Systems Inc. NACPremium allows Stored XSS. This issue affects NACPremium: through 01082024...

6.1CVSS0.00244EPSS
SaveExploits0References2
OSV
OSV
•added 2024/09/02 6:15 p.m.•13 views

CVE-2024-6920

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NAC Telecommunication Systems Inc. NACPremium allows Stored XSS.This issue affects NACPremium: through 01082024...

6.1CVSS5.8AI score0.00244EPSS
SaveExploits0References1
OSV
OSV
•added 2024/09/02 6:15 p.m.•14 views

CVE-2024-6919

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in NAC Telecommunication Systems Inc. NACPremium allows Blind SQL Injection.This issue affects NACPremium: through 01082024...

9.8CVSS5.8AI score0.00424EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2024/09/02 6:15 p.m.•11 views

CVE-2024-6920

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NAC Telecommunication Systems Inc. NACPremium allows Stored XSS. This issue affects NACPremium: through 01082024...

6.1CVSS5.8AI score0.00244EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2024/09/02 6:15 p.m.•11 views

CVE-2024-6921

Cleartext Storage of Sensitive Information vulnerability in NAC Telecommunication Systems Inc. NACPremium allows Retrieve Embedded Sensitive Data. This issue affects NACPremium: through 01082024...

8.7CVSS5.8AI score0.00242EPSS
SaveExploits0References3
OSV
OSV
•added 2024/09/02 6:15 p.m.•12 views

CVE-2024-6921

Cleartext Storage of Sensitive Information vulnerability in NAC Telecommunication Systems Inc. NACPremium allows Retrieve Embedded Sensitive Data.This issue affects NACPremium: through 01082024...

7.5CVSS5.8AI score0.00242EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/09/02 1:24 p.m.•14 views

CVE-2024-6921 Cleartext Username and Password in NAC Telecommunication's NACPremium

Cleartext Storage of Sensitive Information vulnerability in NAC Telecommunication Systems Inc. NACPremium allows Retrieve Embedded Sensitive Data. This issue affects NACPremium: through 01082024...

8.7CVSS5.8AI score0.00242EPSS
SaveExploits0References2
CVE
CVE
•added 2024/09/02 12:54 p.m.•83 views

CVE-2024-6920

CVE-2024-6920 is a Stored XSS vulnerability in NAC Telecommunication’s NACPremium, caused by improper input neutralization during web page generation. Affected software is NACPremium (through 01082024). The primary impact is cross-site scripting, with no explicit exploitation details provided in ...

6.1CVSS5.8AI score0.00244EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2024/09/02 12:54 p.m.•20 views

CVE-2024-6920 Stored XSS in NAC Telecommunication's NACPremium

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NAC Telecommunication Systems Inc. NACPremium allows Stored XSS. This issue affects NACPremium: through 01082024...

4.8CVSS5.8AI score0.00244EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/09/02 12:25 p.m.•21 views

CVE-2024-6919 SQLi in NAC Telecommunication's NACPremium

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in NAC Telecommunication Systems Inc. NACPremium allows Blind SQL Injection. This issue affects NACPremium: through 01082024...

9.3CVSS5.8AI score0.00424EPSS
SaveExploits0References2
CVE
CVE
•added 2024/09/02 12:25 p.m.•70 views

CVE-2024-6919

CVE-2024-6919 is a SQL injection vulnerability in NAC Premium (NACPremium) caused by improper neutralization of special elements, enabling blind SQL injection. Affected versions are through 01082024. Connected documents consistently reference this as a NACPremium issue with potential data exposur...

9.8CVSS5.8AI score0.00424EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2024/09/02 12:25 p.m.•49 views

CVE-2024-6919 SQLi in NAC Telecommunication's NACPremium

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in NAC Telecommunication Systems Inc. NACPremium allows Blind SQL Injection. This issue affects NACPremium: through 01082024...

9.3CVSS0.00424EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/09/02 12:00 a.m.•13 views

NAC Telecommunication NACPremium 跨站脚本漏洞

NAC Telecommunication NACPremium is an application from NAC Telecommunication, Inc. A cross-site scripting vulnerability exists in NAC Telecommunication NACPremium 01082024 and prior versions, which stems from improper input neutralization during web page generation, resulting in vulnerability to...

6.1CVSS6AI score0.00244EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/09/02 12:00 a.m.•10 views

NAC Telecommunication NACPremium SQL注入漏洞

NAC Telecommunication NACPremium is an application from NAC Telecommunication, Inc. A SQL injection vulnerability exists in NAC Telecommunication NACPremium 01082024 and prior versions, which stems from improper neutralization of special elements that can lead to blind SQL injection...

9.8CVSS8AI score0.00424EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/09/02 12:00 a.m.•13 views

PT-2024-37958

Name of the Vulnerable Software and Affected Versions NACPremium versions through 01082024 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. The estimated number of potentially...

6.1CVSS5.6AI score0.00244EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
•added 2024/09/02 12:00 a.m.•13 views

PT-2024-37959

Name of the Vulnerable Software and Affected Versions NACPremium versions through 01082024 Description A Cleartext Storage of Sensitive Information issue exists in NAC Telecommunication Systems Inc. NACPremium, allowing the retrieval of embedded sensitive data. Recommendations For NACPremium...

8.7CVSS5.5AI score0.00242EPSS
SaveExploits0References12
CVE
CVE
•added 2024/08/10 3:52 a.m.•76 views

CVE-2024-5801

CVE-2024-5801 affects B&R Automation Runtime; enabling IP Forwarding in versions before 6.0.2 may allow remote attackers to route IP packets through the host, potentially bypassing firewall/NAC filtering. Base score 5.3 (MEDIUM). Remediation: upgrade to 6.0.2 or later. Exploitation details are no...

5.3CVSS6.7AI score0.00251EPSS
SaveExploits0References1
Openbugbounty
Openbugbounty
•added 2024/03/28 2:54 a.m.•13 views

nac-town.co.jp Cross Site Scripting vulnerability OBB-3889152

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
NVD
NVD
•added 2023/09/03 3:15 p.m.•41 views

CVE-2023-39374

ForeScout NAC SecureConnector version 11.2 - CWE-427: Uncontrolled Search Path Element...

7.8CVSS7.7AI score0.00204EPSS
SaveExploits0References1
Prion
Prion
•added 2023/09/03 3:15 p.m.•30 views

Design/Logic Flaw

ForeScout NAC SecureConnector version 11.2 - CWE-427: Uncontrolled Search Path Element...

4.4CVSS7.6AI score0.00204EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder