Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

125 matches found

OSV
OSV•added 2023/07/11 5:15 p.m.•8 views

CVE-2023-37597

Cross Site Request Forgery CSRF vulnerability in issabel-pbx v.4.0.0-6 allows a remote attacker to cause a denial of service via the delete user grouplist function...

8.1CVSS5.8AI score0.00616EPSS
SaveExploits2References2
NVD
NVD•added 2023/07/11 5:15 p.m.•27 views

CVE-2023-37596

Cross Site Request Forgery CSRF vulnerability in issabel-pbx v.4.0.0-6 allows a remote attacker to cause a denial of service via a crafted script to the deleteuser function...

8.1CVSS7.8AI score0.00616EPSS
SaveExploits2References2
ATTACKERKB
ATTACKERKB•added 2023/07/11 5:15 p.m.•3 views

CVE-2023-37596

Cross Site Request Forgery CSRF vulnerability in issabel-pbx v.4.0.0-6 allows a remote attacker to cause a denial of service via a crafted script to the deleteuser function...

8.1CVSS7.3AI score0.00616EPSS
SaveExploits2References3
OSV
OSV•added 2023/07/11 5:15 p.m.•3 views

CVE-2023-37596

Cross Site Request Forgery CSRF vulnerability in issabel-pbx v.4.0.0-6 allows a remote attacker to cause a denial of service via a crafted script to the deleteuser function...

8.1CVSS5.8AI score0.00616EPSS
SaveExploits2References2
ATTACKERKB
ATTACKERKB•added 2023/07/11 5:15 p.m.•9 views

CVE-2023-37597

Cross Site Request Forgery CSRF vulnerability in issabel-pbx v.4.0.0-6 allows a remote attacker to cause a denial of service via the delete user grouplist function...

8.1CVSS7.3AI score0.00616EPSS
SaveExploits2References3
Prion
Prion•added 2023/07/11 5:15 p.m.•18 views

Cross site request forgery (csrf)

Cross Site Request Forgery CSRF vulnerability in issabel-pbx v.4.0.0-6 allows a remote attacker to cause a denial of service via the delete user grouplist function...

5.8CVSS7.8AI score0.00616EPSS
SaveExploits2References2Affected Software1
Prion
Prion•added 2023/07/11 5:15 p.m.•25 views

Cross site request forgery (csrf)

Cross Site Request Forgery CSRF vulnerability in issabel-pbx v.4.0.0-6 allows a remote attacker to cause a denial of service via a crafted script to the deleteuser function...

5.8CVSS7.7AI score0.00616EPSS
SaveExploits2References2Affected Software1
NVD
NVD•added 2023/07/11 2:15 a.m.•14 views

CVE-2023-37189

A stored cross site scripting XSS vulnerability in index.php?menu=billingrates of Issabel PBX version 4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the Name or Prefix fields under the Create New Rate module...

4.8CVSS5AI score0.00735EPSS
SaveExploits1References2
OSV
OSV•added 2023/07/11 2:15 a.m.•5 views

CVE-2023-37190

A stored cross-site scripting XSS vulnerability in Issabel issabel-pbx v.4.0.0-6 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Virtual Fax Name and Caller ID Name parameters under the New Virtual Fax feature...

4.8CVSS5.9AI score0.00482EPSS
SaveExploits1References2
NVD
NVD•added 2023/07/11 2:15 a.m.•24 views

CVE-2023-37190

A stored cross-site scripting XSS vulnerability in Issabel issabel-pbx v.4.0.0-6 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Virtual Fax Name and Caller ID Name parameters under the New Virtual Fax feature...

4.8CVSS5AI score0.00482EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB•added 2023/07/11 2:15 a.m.•3 views

CVE-2023-37189

A stored cross site scripting XSS vulnerability in index.php?menu=billingrates of Issabel PBX version 4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the Name or Prefix fields under the Create New Rate module...

4.8CVSS5.7AI score0.00735EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB•added 2023/07/11 2:15 a.m.•6 views

CVE-2023-37190

A stored cross-site scripting XSS vulnerability in Issabel issabel-pbx v.4.0.0-6 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Virtual Fax Name and Caller ID Name parameters under the New Virtual Fax feature...

4.8CVSS5.9AI score0.00482EPSS
SaveExploits1References3
OSV
OSV•added 2023/07/11 2:15 a.m.•4 views

CVE-2023-37189

A stored cross site scripting XSS vulnerability in index.php?menu=billingrates of Issabel PBX version 4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the Name or Prefix fields under the Create New Rate module...

4.8CVSS5.6AI score0.00735EPSS
SaveExploits1References2
Prion
Prion•added 2023/07/11 2:15 a.m.•18 views

Cross site scripting

A stored cross site scripting XSS vulnerability in index.php?menu=billingrates of Issabel PBX version 4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the Name or Prefix fields under the Create New Rate module...

4.3CVSS5AI score0.00735EPSS
SaveExploits1References2Affected Software1
Prion
Prion•added 2023/07/11 2:15 a.m.•21 views

Cross site scripting

A stored cross-site scripting XSS vulnerability in Issabel issabel-pbx v.4.0.0-6 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Virtual Fax Name and Caller ID Name parameters under the New Virtual Fax feature...

4.3CVSS4.9AI score0.00482EPSS
SaveExploits1References2Affected Software1
NVD
NVD•added 2023/07/11 1:15 a.m.•21 views

CVE-2023-37191

A stored cross-site scripting XSS vulnerability in Issabel issabel-pbx v.4.0.0-6 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Group and Description parameters...

4.8CVSS5AI score0.00649EPSS
SaveExploits1References2
OSV
OSV•added 2023/07/11 1:15 a.m.•6 views

CVE-2023-37191

A stored cross-site scripting XSS vulnerability in Issabel issabel-pbx v.4.0.0-6 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Group and Description parameters...

4.8CVSS5.9AI score0.00649EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB•added 2023/07/11 1:15 a.m.•3 views

CVE-2023-37191

A stored cross-site scripting XSS vulnerability in Issabel issabel-pbx v.4.0.0-6 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Group and Description parameters...

4.8CVSS5.9AI score0.00649EPSS
SaveExploits1References3
Prion
Prion•added 2023/07/11 1:15 a.m.•22 views

Cross site scripting

A stored cross-site scripting XSS vulnerability in Issabel issabel-pbx v.4.0.0-6 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Group and Description parameters...

4.3CVSS4.9AI score0.00649EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment•added 2023/07/11 12:0 a.m.•17 views

CVE-2023-37191

A stored cross-site scripting XSS vulnerability in Issabel issabel-pbx v.4.0.0-6 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Group and Description parameters...

5.6AI score0.00649EPSS
SaveExploits1References2
Rows per page
Query Builder