218 matches found
CVE-2021-37452
NCH Quorum v2.03 and earlier allows local users to discover cleartext login information relating to users by reading the local .dat configuration files...
CVE-2021-37452
NCH Quorum v2.03 and earlier allows local users to discover cleartext login information relating to users by reading the local .dat configuration files...
CVE-2021-37464
In NCH Quorum v2.03 and earlier, XSS exists via Conference Description stored...
CVE-2021-37465
In NCH Quorum v2.03 and earlier, XSS exists via /uploaddoc?id= reflected...
Cross site scripting
In NCH Quorum v2.03 and earlier, XSS exists via /conference?id= reflected...
Cross site scripting
In NCH Quorum v2.03 and earlier, XSS exists via /conferencebrowseuploadfile?confid= reflected...
Design/Logic Flaw
In NCH Quorum v2.03 and earlier, XSS exists via /uploaddoc?id= reflected...
CVE-2021-37463
In NCH Quorum v2.03 and earlier, XSS exists via User Display Name stored...
Design/Logic Flaw
In NCH Quorum v2.03 and earlier, XSS exists via Conference Description stored...
Code injection
NCH Quorum v2.03 and earlier allows local users to discover cleartext login information relating to users by reading the local .dat configuration files...
CVE-2021-37466
In NCH Quorum v2.03 and earlier, XSS exists via /conference?id= reflected...
Cross site scripting
In NCH Quorum v2.03 and earlier, XSS exists via User Display Name stored...
CVE-2021-37445
In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via logprop?file=/.. for file reading...
CVE-2021-37445
This entry describes a directory traversal vulnerability in NCH Quorum v2.03 and earlier. An authenticated user can read files by abusing logprop?file=/.., enabling traversal to access local files. The affected product is NCH Quorum (teleconference server software); the vulnerability is triggered...
CVE-2021-37446
Summary: CVE-2021-37446 affects NCH Quorum v2.03 and earlier, where an authenticated user can perform directory traversal via the parameter documentprop?file=/.. to read files. This is a path traversal flaw that could expose sensitive files on the remote system. Other connected sources reiterate ...
CVE-2021-37446
In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via documentprop?file=/.. for file reading...
CVE-2021-37447
In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via documentdelete?file=/.. for file deletion...
CVE-2021-37447
CVE-2021-37447 concerns NCH Quorum v2.03 and earlier. An authenticated user can perform directory traversal via the parameter documentdelete?file=/.., enabling file deletion on the affected system. The core issue is a path traversal in a function responsible for file deletion, allowing access bey...
CVE-2021-37452
CVE-2021-37452 affects NCH Quorum (v2.03 and earlier). The issue is an information disclosure where local users can read plaintext login information by accessing the local .dat configuration files. Multiple sources (NVD, Red Hat, CNVD, CVE records) consistently describe the vulnerability as local...