35 matches found
Information disclosure
CloudView NMS before 2.10a allows remote attackers to obtain sensitive information via a direct request for admin/auto.def...
Design/Logic Flaw
CloudView NMS before 2.10a has XSS via a TELNET login...
CVE-2016-5075
CloudView NMS (before 2.10a) is affected by a Cross-Site Scripting (XSS) vulnerability via a TELNET login. Root cause: XSS in the login flow. Impact as described: vulnerability could allow injection of script/HTML. Affected version: prior to 2.10a; fix likely in 2.10a or later (document implies u...
CVE-2016-5073
CloudView NMS before 2.10a has XSS via SNMP...
CVE-2016-5074
CloudView NMS before 2.10a has a format string issue exploitable over SNMP...
CVE-2016-5076
CloudView NMS before 2.10a allows remote attackers to obtain sensitive information via a direct request for admin/auto.def...
CVE-2016-5075
CloudView NMS before 2.10a has XSS via a TELNET login...
PT-2017-8690
Name of the Vulnerable Software and Affected Versions CloudView NMS versions prior to 2.10a Description The issue is related to a format string problem that can be exploited over SNMP. Recommendations For versions prior to 2.10a, update to version 2.10a or later to resolve the issue...
PT-2017-8692
Name of the Vulnerable Software and Affected Versions CloudView NMS versions prior to 2.10a Description The issue allows remote attackers to obtain sensitive information by making a direct request for the admin/auto.def file. Recommendations For versions prior to 2.10a, update to version 2.10a or...
PT-2017-8691
Name of the Vulnerable Software and Affected Versions CloudView NMS versions prior to 2.10a Description The issue allows for XSS via a TELNET login. Recommendations For versions prior to 2.10a, update to version 2.10a or later to resolve the issue...
CVE-2016-5075: Improper Neutralization of Input During Web Page Generation
CloudView NMS before 2.10a has XSS via a TELNET login...
CVE-2016-5076: Exposure of Sensitive Information to an Unauthorized Actor
CloudView NMS before 2.10a allows remote attackers to obtain sensitive information via a direct request for admin/auto.def...
CVE-2016-5074: Use of Externally-Controlled Format String
CloudView NMS before 2.10a has a format string issue exploitable over SNMP...
CVE-2016-5073: Improper Neutralization of Input During Web Page Generation
CloudView NMS before 2.10a has XSS via SNMP...
PT-2017-8689
Name of the Vulnerable Software and Affected Versions CloudView NMS versions prior to 2.10a Description The issue is related to a security problem where an attacker can exploit the system via SNMP, leading to XSS. Recommendations For versions prior to 2.10a, update to version 2.10a or later to...