382 matches found
CVE-2021-37460
Cross Site Scripting XSS exists in NCH Axon PBX v2.22 and earlier via /planprop?id= reflected...
CVE-2021-37461
Cross Site Scripting XSS exists in NCH Axon PBX v2.22 and earlier via /extensionsinstruction?id= reflected...
CVE-2021-37461
CVE-2021-37461 affects NCH Axon PBX, a virtual telephone switch, with a reflected XSS in /extensionsinstruction?id= where input is not properly filtered of special characters. Affects v2.22 and earlier. The provided documents do not specify a remediation version or patch status, exploit details, ...
CVE-2021-37462
CVE-2021-37462 describes a cross-site scripting (XSS) vulnerability in NCH Axon PBX, affecting v2.22 and earlier. The issue is a reflected XSS via the /ipblacklist?errorip= parameter. The connected documents confirm the affected product and the vulnerability pattern but do not provide details on ...
CVE-2021-37462
Cross Site Scripting XSS exists in NCH Axon PBX v2.22 and earlier via /ipblacklist?errorip= reflected...
CVE-2021-37463
In NCH Quorum v2.03 and earlier, XSS exists via User Display Name stored...
CVE-2021-37463
CVE-2021-37463 affects NCH Quorum v2.03 and earlier, with a stored XSS in the User Display Name. The root cause is a script injection that is stored and rendered in the user display context. Impact stated in CNVD/CNNVD references describes attackers potentially stealing cookie‑based authenticatio...
CVE-2021-37464
In NCH Quorum v2.03 and earlier, XSS exists via Conference Description stored...
CVE-2021-37464
CVE-2021-37464 affects NCH Quorum v2.03 and earlier, with a stored XSS via the Conference Description. Reported across multiple sources (CNVD/CNNVD, Red Hat, NVD, CVE lists). The vulnerability allows injection into the Conference Description field, enabling XSS which can lead to cookie-based auth...
CVE-2021-37465
In NCH Quorum v2.03 and earlier, XSS exists via /uploaddoc?id= reflected...
CVE-2021-37465
CVE-2021-37465 affects NCH Quorum v2.03 and earlier. The vulnerability is a reflected XSS via the /uploaddoc?id= parameter, as described by NVD/CNVD/CNNVD/Red Hat entries. The connected documents confirm the affected product/version and attack vector; no remediation details are provided in the do...
CVE-2021-37466
In NCH Quorum v2.03 and earlier, XSS exists via /conference?id= reflected...
CVE-2021-37466
CVE-2021-37466 affects NCH Quorum v2.03 and earlier, with a reflected cross-site scripting (XSS) vulnerability via /conference?id= . The cited sources consistently describe XSS in these versions; no exploit details or mitigations are provided in the connected documents. If remediation exists, it ...
CVE-2021-37467
CVE-2021-37467 affects NCH Quorum v2.03 and earlier. It describes a reflected cross-site scripting (XSS) vulnerability that occurs via the parameter confid in the URL /conferencebrowseuploadfile?confid=. The root cause, as stated, is improper handling/unsanitized user input, leading to client-sid...
CVE-2021-37467
In NCH Quorum v2.03 and earlier, XSS exists via /conferencebrowseuploadfile?confid= reflected...
CVE-2021-37468
CVE-2021-37468 affects NCH Reflect CRM 3.01. The vulnerability enables local users to disclose plaintext user account information by reading configuration files, due to inadequate access control and insecure storage of credentials in configuration data. Impact is information disclosure with local...
CVE-2021-37468
NCH Reflect CRM 3.01 allows local users to discover cleartext user account information by reading the configuration files...
CVE-2021-37469
CVE-2021-37469 describes a directory traversal in NCH WebDictate v2.13 and earlier. The root cause is a flawed logprop?file=/… path handling that allows authenticated users to traverse the filesystem and read files. The vulnerability affects the WebDictate component handling file paths and is sup...