Latest CVE Feed
-
7.8
HIGHCVE-2021-37471
Cradlepoint IBR900-600 devices running versions < 7.21.10 are vulnerable to a restricted shell escape sequence that provides an attacker the capability to simultaneously deny availability to the device's NetCloud Manager console, local console and SSH com... Read more
- EPSS Score: %0.37
- Published: Nov. 07, 2021
- Modified: Nov. 21, 2024
-
5.4
MEDIUMCVE-2021-37470
In NCH WebDictate v2.13, persistent Cross Site Scripting (XSS) exists in the Recipient Name field. An authenticated user can add or modify the affected field to inject arbitrary JavaScript.... Read more
Affected Products : webdictate- EPSS Score: %0.16
- Published: Jul. 25, 2021
- Modified: Nov. 21, 2024
-
6.5
MEDIUMCVE-2021-37469
In NCH WebDictate v2.13 and earlier, authenticated users can abuse logprop?file=/.. path traversal to read files on the filesystem.... Read more
Affected Products : webdictate- EPSS Score: %0.27
- Published: Jul. 25, 2021
- Modified: Nov. 21, 2024
-
3.3
LOWCVE-2021-37468
NCH Reflect CRM 3.01 allows local users to discover cleartext user account information by reading the configuration files.... Read more
Affected Products : reflect_customer_relationship_management- EPSS Score: %0.02
- Published: Jul. 25, 2021
- Modified: Nov. 21, 2024
-
5.4
MEDIUMCVE-2021-37467
In NCH Quorum v2.03 and earlier, XSS exists via /conferencebrowseuploadfile?confid= (reflected).... Read more
Affected Products : quorum- EPSS Score: %0.21
- Published: Jul. 25, 2021
- Modified: Nov. 21, 2024
-
5.4
MEDIUMCVE-2021-37466
In NCH Quorum v2.03 and earlier, XSS exists via /conference?id= (reflected).... Read more
Affected Products : quorum- EPSS Score: %0.21
- Published: Jul. 25, 2021
- Modified: Nov. 21, 2024
-
5.4
MEDIUMCVE-2021-37465
In NCH Quorum v2.03 and earlier, XSS exists via /uploaddoc?id= (reflected).... Read more
Affected Products : quorum- EPSS Score: %0.21
- Published: Jul. 25, 2021
- Modified: Nov. 21, 2024
-
5.4
MEDIUMCVE-2021-37464
In NCH Quorum v2.03 and earlier, XSS exists via Conference Description (stored).... Read more
Affected Products : quorum- EPSS Score: %0.21
- Published: Jul. 25, 2021
- Modified: Nov. 21, 2024
-
5.4
MEDIUMCVE-2021-37463
In NCH Quorum v2.03 and earlier, XSS exists via User Display Name (stored).... Read more
Affected Products : quorum- EPSS Score: %0.21
- Published: Jul. 25, 2021
- Modified: Nov. 21, 2024
-
5.4
MEDIUMCVE-2021-37462
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via /ipblacklist?errorip= (reflected).... Read more
Affected Products : axon_pbx- EPSS Score: %0.18
- Published: Jul. 25, 2021
- Modified: Nov. 21, 2024
-
5.4
MEDIUMCVE-2021-37461
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via /extensionsinstruction?id= (reflected).... Read more
Affected Products : axon_pbx- EPSS Score: %0.18
- Published: Jul. 25, 2021
- Modified: Nov. 21, 2024
-
5.4
MEDIUMCVE-2021-37460
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via /planprop?id= (reflected).... Read more
Affected Products : axon_pbx- EPSS Score: %0.21
- Published: Jul. 25, 2021
- Modified: Nov. 21, 2024
-
5.4
MEDIUMCVE-2021-37459
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the customer name field (stored).... Read more
Affected Products : axon_pbx- EPSS Score: %0.21
- Published: Jul. 25, 2021
- Modified: Nov. 21, 2024
-
5.4
MEDIUMCVE-2021-37458
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the primary phone field (stored).... Read more
Affected Products : axon_pbx- EPSS Score: %0.18
- Published: Jul. 25, 2021
- Modified: Nov. 21, 2024
-
5.4
MEDIUMCVE-2021-37457
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the SipRule field (stored).... Read more
Affected Products : axon_pbx- EPSS Score: %0.21
- Published: Jul. 25, 2021
- Modified: Nov. 21, 2024
-
5.4
MEDIUMCVE-2021-37456
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the blacklist IP address (stored).... Read more
Affected Products : axon_pbx- EPSS Score: %0.18
- Published: Jul. 25, 2021
- Modified: Nov. 21, 2024
-
5.4
MEDIUMCVE-2021-37455
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the outbound dialing plan (stored).... Read more
Affected Products : axon_pbx- EPSS Score: %0.18
- Published: Jul. 25, 2021
- Modified: Nov. 21, 2024
-
5.4
MEDIUMCVE-2021-37454
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the line name (stored).... Read more
Affected Products : axon_pbx- EPSS Score: %0.18
- Published: Jul. 25, 2021
- Modified: Nov. 21, 2024
-
5.4
MEDIUMCVE-2021-37453
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the extension name (stored).... Read more
Affected Products : axon_pbx- EPSS Score: %0.18
- Published: Jul. 25, 2021
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-37452
NCH Quorum v2.03 and earlier allows local users to discover cleartext login information relating to users by reading the local .dat configuration files.... Read more
Affected Products : quorum- EPSS Score: %0.02
- Published: Jul. 25, 2021
- Modified: Nov. 21, 2024