Lucene search
+L

1075 matches found

CNNVD
CNNVD
•added 2025/04/02 12:00 a.m.•19 views

Pexip Infinity 安全漏洞

Pexip Infinity Pexip Video Conferencing Cloud Collaboration Platform is a video conferencing cloud collaboration platform from the Norwegian company Pexip. The product provides high quality and secure cloud conferencing capabilities. A security vulnerability exists in Pexip Infinity versions prio...

9.1CVSS6.7AI score0.00536EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/04/02 12:00 a.m.•23 views

CVE-2025-30080

Signalling in Pexip Infinity 29 through 36.2 before 37.0 has improper input validation that allows remote attackers to trigger a temporary denial of service software abort...

0.00527EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/03/15 4:27 a.m.•30 views

CVE-2024-51319

A local file include vulnerability in the /servlet/Report of Zucchetti Ad Hoc Infinity 2.4 allows an authenticated attacker to achieve Remote Code Execution by uploading a jsp web/reverse shell through /jsp/zimgupload.jsp...

7.3CVSS7.2AI score0.00455EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/03/15 4:26 a.m.•27 views

CVE-2024-51320

Cross Site Scripting vulnerability in Zucchetti Ad Hoc Infinity 2.4 allows an authenticated attacker to achieve Remote Code Execution via the /servlet/gsdmfsavehtmltmp, /servlet/gsdmbtlkopenfile components...

5.4CVSS6.9AI score0.00377EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/03/15 4:25 a.m.•29 views

CVE-2024-51321

In Zucchetti Ad Hoc Infinity 2.4, an improper check on the mcURL parameter allows an attacker to redirect the victim to an attacker-controlled website after the authentication...

7.6CVSS6.8AI score0.00342EPSS
SaveExploits1References1
NVD
NVD
•added 2025/03/11 3:15 p.m.•21 views

CVE-2024-51321

In Zucchetti Ad Hoc Infinity 2.4, an improper check on the mcURL parameter allows an attacker to redirect the victim to an attacker-controlled website after the authentication...

7.6CVSS0.00342EPSS
SaveExploits1References1
NVD
NVD
•added 2025/03/11 3:15 p.m.•20 views

CVE-2024-51319

A local file include vulnerability in the /servlet/Report of Zucchetti Ad Hoc Infinity 2.4 allows an authenticated attacker to achieve Remote Code Execution by uploading a jsp web/reverse shell through /jsp/zimgupload.jsp...

7.3CVSS0.00455EPSS
SaveExploits1References1
OSV
OSV
•added 2025/03/11 3:15 p.m.•13 views

CVE-2024-51321

In Zucchetti Ad Hoc Infinity 2.4, an improper check on the mcURL parameter allows an attacker to redirect the victim to an attacker-controlled website after the authentication...

7.6CVSS5.8AI score0.00342EPSS
SaveExploits1References1
NVD
NVD
•added 2025/03/11 3:15 p.m.•19 views

CVE-2024-51322

Cross Site Scripting vulnerability in Zucchetti Ad Hoc Infinity 2.4 allows an authenticated attacker to achieve Remote Code Execution via the /jsp/home.jsp, /jsp/gsfrfeditorHTML.jsp, /servlet/SPVisualZoom, /jsp/gsmdcontainer.jsp components...

5.4CVSS0.00377EPSS
SaveExploits1References1
OSV
OSV
•added 2025/03/11 3:15 p.m.•13 views

CVE-2024-51322

Cross Site Scripting vulnerability in Zucchetti Ad Hoc Infinity 2.4 allows an authenticated attacker to achieve Remote Code Execution via the /jsp/home.jsp, /jsp/gsfrfeditorHTML.jsp, /servlet/SPVisualZoom, /jsp/gsmdcontainer.jsp components...

5.4CVSS5.9AI score0.00377EPSS
SaveExploits1References1
OSV
OSV
•added 2025/03/11 3:15 p.m.•17 views

CVE-2024-51319

A local file include vulnerability in the /servlet/Report of Zucchetti Ad Hoc Infinity 2.4 allows an authenticated attacker to achieve Remote Code Execution by uploading a jsp web/reverse shell through /jsp/zimgupload.jsp...

7.3CVSS5.9AI score0.00455EPSS
SaveExploits1References1
OSV
OSV
•added 2025/03/11 3:15 p.m.•15 views

CVE-2024-51320

Cross Site Scripting vulnerability in Zucchetti Ad Hoc Infinity 2.4 allows an authenticated attacker to achieve Remote Code Execution via the /servlet/gsdmfsavehtmltmp, /servlet/gsdmbtlkopenfile components...

5.4CVSS5.9AI score0.00377EPSS
SaveExploits1References1
NVD
NVD
•added 2025/03/11 3:15 p.m.•18 views

CVE-2024-51320

Cross Site Scripting vulnerability in Zucchetti Ad Hoc Infinity 2.4 allows an authenticated attacker to achieve Remote Code Execution via the /servlet/gsdmfsavehtmltmp, /servlet/gsdmbtlkopenfile components...

5.4CVSS0.00377EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/03/11 12:00 a.m.•27 views

CVE-2024-51321

In Zucchetti Ad Hoc Infinity 2.4, an improper check on the mcURL parameter allows an attacker to redirect the victim to an attacker-controlled website after the authentication...

0.00342EPSS
SaveExploits1References1
CVE
CVE
•added 2025/03/11 12:00 a.m.•58 views

CVE-2024-51320

A Cross Site Scripting (XSS) vulnerability exists in Zucchetti Ad Hoc Infinity version 2.4 , an ERP software. The flaw is located in the /servlet/gsdm_fsave_htmltmp and /servlet/gsdm_btlk_openfile components. An authenticated attacker can exploit this vulnerability to achieve Remote Code Executio...

5.4CVSS6.7AI score0.00377EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2025/03/11 12:00 a.m.•32 views

CVE-2024-51320

Cross Site Scripting vulnerability in Zucchetti Ad Hoc Infinity 2.4 allows an authenticated attacker to achieve Remote Code Execution via the /servlet/gsdmfsavehtmltmp, /servlet/gsdmbtlkopenfile components...

0.00377EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/11 12:00 a.m.•5 views

CVE-2024-51319: Improper Control of Filename for Include/Require Statement in PHP Program

A local file include vulnerability in the /servlet/Report of Zucchetti Ad Hoc Infinity 2.4 allows an authenticated attacker to achieve Remote Code Execution by uploading a jsp web/reverse shell through /jsp/zimgupload.jsp...

7.3CVSS5.9AI score0.00455EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/03/11 12:00 a.m.•18 views

Zucchetti Ad Hoc Infinity 安全漏洞

Zucchetti Ad Hoc Infinity is an ERP software from Zucchetti. A security vulnerability exists in Zucchetti Ad Hoc Infinity version 2.4 that originates from a local file inclusion in /servlet/Report and could lead to remote code execution...

7.3CVSS7.6AI score0.00455EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2025/03/11 12:00 a.m.•31 views

CVE-2024-51322

Cross Site Scripting vulnerability in Zucchetti Ad Hoc Infinity 2.4 allows an authenticated attacker to achieve Remote Code Execution via the /jsp/home.jsp, /jsp/gsfrfeditorHTML.jsp, /servlet/SPVisualZoom, /jsp/gsmdcontainer.jsp components...

0.00377EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/03/11 12:00 a.m.•16 views

Zucchetti Ad Hoc Infinity 跨站脚本漏洞

Zucchetti Ad Hoc Infinity is an ERP software from Zucchetti. A cross-site scripting vulnerability exists in Zucchetti Ad Hoc Infinity version 2.4, which originates from cross-site scripting in the /servlet/gsdmfsavehtmltmp and /servlet/gsdmbtlkopenfile components and could lead to remote code...

5.4CVSS7.2AI score0.00377EPSS
SaveExploits1References2
Rows per page
Query Builder