382 matches found
EUVD-2021-24008
Malware in sbrugna...
EUVD-2021-24021
Malware in sbrugna...
EUVD-2009-4009
Malware in sbrugna...
EUVD-2021-24015
Malware in sbrugna...
CVE-2021-37439
NCH FlexiServer v6.00 suffers from a syslog?file=/.. path traversal vulnerability...
CVE-2021-37444
NCH IVM Attendant v5.12 and earlier suffers from a directory traversal weakness upon uploading plugins in a ZIP archive. This can lead to code execution if a ZIP element's pathname is set to a Windows startup folder, a file for the inbuilt Out-Going Message function, or a file for the the inbuilt...
CVE-2021-37456
Cross Site Scripting XSS exists in NCH Axon PBX v2.22 and earlier via the blacklist IP address stored...
CVE-2021-37459
Cross Site Scripting XSS exists in NCH Axon PBX v2.22 and earlier via the customer name field stored...
CVE-2021-37457
Cross Site Scripting XSS exists in NCH Axon PBX v2.22 and earlier via the SipRule field stored...
CVE-2021-37466
In NCH Quorum v2.03 and earlier, XSS exists via /conference?id= reflected...
CVE-2021-37455
Cross Site Scripting XSS exists in NCH Axon PBX v2.22 and earlier via the outbound dialing plan stored...
CVE-2021-37462
Cross Site Scripting XSS exists in NCH Axon PBX v2.22 and earlier via /ipblacklist?errorip= reflected...
CVE-2021-37468
NCH Reflect CRM 3.01 allows local users to discover cleartext user account information by reading the configuration files...
CVE-2021-37465
In NCH Quorum v2.03 and earlier, XSS exists via /uploaddoc?id= reflected...
CVE-2021-37470
In NCH WebDictate v2.13, persistent Cross Site Scripting XSS exists in the Recipient Name field. An authenticated user can add or modify the affected field to inject arbitrary JavaScript...
CVE-2021-37464
In NCH Quorum v2.03 and earlier, XSS exists via Conference Description stored...
CVE-2021-37460
Cross Site Scripting XSS exists in NCH Axon PBX v2.22 and earlier via /planprop?id= reflected...
CVE-2021-37458
Cross Site Scripting XSS exists in NCH Axon PBX v2.22 and earlier via the primary phone field stored...