adiscon records
8 published records for vendor adiscon.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')6
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
8 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
46Plan | CVE-2023-34600Proof of concept | Adiscon LogAnalyzer v4.1.13 and before is vulnerable to SQL Injection.adiscon · loganalyzer · CWE-89 | Critical9.8 | — | 24.1% | Jun 20, 2023 |
33Monitor | CVE-2003-1518Proof of concept | Adiscon WinSyslog 4.21 SP1 allows remote attackers to cause a denial of service (CPU consumption) via a long syslog message.adiscon · winsyslog · CWE-119 | High7.8 | — | 7.2% | Dec 31, 2003 |
30Monitor | CVE-2018-19877Proof of concept | login.php in Adiscon LogAnalyzer before 4.1.7 has XSS via the Login Button Referer field.adiscon · loganalyzer · CWE-79 | Medium6.1 | — | 18.5% | Dec 5, 2018 |
26Monitor | CVE-2023-36306Proof of concept | A Cross Site Scripting (XSS) vulnerability in Adiscon Aiscon LogAnalyzer through 4.1.13 allows a remote attacker to execute arbitrary code vadiscon · loganalyzer · CWE-79 | Medium6.1 | — | 5.3% | Aug 8, 2023 |
25Monitor | CVE-2022-36664Proof of concept | Password Manager for IIS 2.0 has a cross-site scripting (XSS) vulnerability via the /isapi/PasswordManager.dll ResultURL parameter.adiscon · password manager for iis · CWE-79 | Medium6.1 | — | 3.8% | Dec 26, 2022 |
24Monitor | CVE-2021-31738No exploit | Adiscon LogAnalyzer 4.1.10 and 4.1.11 allow login.php XSS.adiscon · loganalyzer · CWE-79 | Medium6.1 | — | 0.9% | Jun 8, 2021 |
18Monitor | CVE-2014-6070Proof of concept | Multiple cross-site scripting (XSS) vulnerabilities in Adiscon LogAnalyzer before 3.6.6 allow remote attackers to inject arbitrary web scripadiscon · loganalyzer · CWE-79 | Medium4.3 | — | 3.5% | Sep 11, 2014 |
17Monitor | CVE-2012-3790No exploit | Cross-site scripting (XSS) vulnerability in index.php in Adiscon LogAnalyzer before 3.4.4 and 3.5.x before 3.5.5 allows remote attackers to adiscon · loganalyzer · CWE-79 | Medium4.3 | — | 1.2% | Jun 20, 2012 |
- CVE-2023-3460046Plan
Adiscon LogAnalyzer v4.1.13 and before is vulnerable to SQL Injection.
CriticalCVSS 9.8Proof of conceptEPSS 24%adiscon · loganalyzerJun 20, 2023
- CVE-2003-151833Monitor
Adiscon WinSyslog 4.21 SP1 allows remote attackers to cause a denial of service (CPU consumption) via a long syslog message.
HighCVSS 7.8Proof of conceptEPSS 7%adiscon · winsyslogDec 31, 2003
- CVE-2018-1987730Monitor
login.php in Adiscon LogAnalyzer before 4.1.7 has XSS via the Login Button Referer field.
MediumCVSS 6.1Proof of conceptEPSS 18%adiscon · loganalyzerDec 5, 2018
- CVE-2023-3630626Monitor
A Cross Site Scripting (XSS) vulnerability in Adiscon Aiscon LogAnalyzer through 4.1.13 allows a remote attacker to execute arbitrary code v
MediumCVSS 6.1Proof of conceptEPSS 5%adiscon · loganalyzerAug 8, 2023
- CVE-2022-3666425Monitor
Password Manager for IIS 2.0 has a cross-site scripting (XSS) vulnerability via the /isapi/PasswordManager.dll ResultURL parameter.
MediumCVSS 6.1Proof of conceptEPSS 3%adiscon · password manager for iisDec 26, 2022
- CVE-2021-3173824Monitor
Adiscon LogAnalyzer 4.1.10 and 4.1.11 allow login.php XSS.
MediumCVSS 6.1No exploitEPSS 0%adiscon · loganalyzerJun 8, 2021
- CVE-2014-607018Monitor
Multiple cross-site scripting (XSS) vulnerabilities in Adiscon LogAnalyzer before 3.6.6 allow remote attackers to inject arbitrary web scrip
MediumCVSS 4.3Proof of conceptEPSS 3%adiscon · loganalyzerSep 11, 2014
- CVE-2012-379017Monitor
Cross-site scripting (XSS) vulnerability in index.php in Adiscon LogAnalyzer before 3.4.4 and 3.5.x before 3.5.5 allows remote attackers to
MediumCVSS 4.3No exploitEPSS 1%adiscon · loganalyzerJun 20, 2012