EUVD-2019-6728

Malware in sbrugna...

EUVD-2008-5356

Malware in sbrugna...

Netdisco Unauthenticated Access

Netdisco is a web-based network management tool. When accessible without authentication, an attacker can gain unauthorized access to the Netdisco interface, potentially leading to information disclosure or further exploitation of the system. No source data...

EUVD-2023-41506

Malicious code in bioql PyPI...

EUVD-2023-41505

Malicious code in bioql PyPI...

CVE-2019-15810

Insufficient sanitization during device search in Netdisco 2.042010 allows for reflected XSS via manipulation of a URL parameter...

CVE-2008-5379

netdisco-mibs-installer 1.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/netdisco-mibs-0.6.tar.gz temporary file, related to the 1 netdisco-mibs-install and 2 netdisco-mibs-download scripts...

CVE-2023-37623

Netdisco before v2.063000 was discovered to contain a cross-site scripting XSS vulnerability via the component /Web/TypeAhead.pm...

CVE-2023-37624

Netdisco before v2.063000 was discovered to contain an open redirect vulnerability. An attacker may exploit this vulnerability to redirect users to arbitrary web URLs by tricking the victim users to click on crafted links...

CVE-2023-37624

Netdisco before v2.063000 was discovered to contain an open redirect vulnerability. An attacker may exploit this vulnerability to redirect users to arbitrary web URLs by tricking the victim users to click on crafted links...

CVE-2023-37623

Netdisco before v2.063000 was discovered to contain a cross-site scripting XSS vulnerability via the component /Web/TypeAhead.pm...

Open redirect

Netdisco before v2.063000 was discovered to contain an open redirect vulnerability. An attacker may exploit this vulnerability to redirect users to arbitrary web URLs by tricking the victim users to click on crafted links...

Cross site scripting

Netdisco before v2.063000 was discovered to contain a cross-site scripting XSS vulnerability via the component /Web/TypeAhead.pm...

PT-2023-26046 · Netdisco · Netdisco

Name of the Vulnerable Software and Affected Versions: Netdisco versions prior to 2.063000 Description: The issue allows an attacker to redirect users to arbitrary web URLs by tricking victim users into clicking on crafted links. Recommendations: For versions prior to 2.063000, update to version...

CVE-2023-37624: URL Redirection to Untrusted Site

Netdisco before v2.063000 was discovered to contain an open redirect vulnerability. An attacker may exploit this vulnerability to redirect users to arbitrary web URLs by tricking the victim users to click on crafted links...

CVE-2023-37623

Netdisco before v2.063000 was discovered to contain a cross-site scripting XSS vulnerability via the component /Web/TypeAhead.pm...

CVE-2023-37624

Netdisco before v2.063000 was discovered to contain an open redirect vulnerability. An attacker may exploit this vulnerability to redirect users to arbitrary web URLs by tricking the victim users to click on crafted links...

CVE-2023-37624

Netdisco before v2.063000 was discovered to contain an open redirect vulnerability. An attacker may exploit this vulnerability to redirect users to arbitrary web URLs by tricking the victim users to click on crafted links...

CVE-2023-37624

Netdisco (before v2.063000) contains an open redirect vulnerability that could redirect authenticated users to arbitrary URLs via crafted links. The issue is evidenced across multiple sources (NVD/NVD description, CVE listing) with an estimated CVSSv3.1 base score of 6.1 (medium) and impact limit...

CVE-2023-37623

Netdisco (affected product) prior to version 2.063000 contains a cross-site scripting (XSS) vulnerability in the /Web/TypeAhead.pm component. The root cause is an XSS flaw in that module, enabling an attacker to inject a script that could affect a user’s browser session. The CVE-2023-37623 entry ...