İçeriğe atla
Noroxi

nch kayıtları

nch üreticisine ait 9 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
1
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 18
  2. 21

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

9 kayıt
  • CVE-2021-37441
    35İzleyin

    NCH Axon PBX v2.22 and earlier allows path traversal for file deletion via the logdelete?file=/..

    YüksekCVSS 8,8İstismar yokEPSS %1

    nch · axon pbx25 Tem 2021

  • CVE-2018-11552
    33İzleyin

    There is a reflected XSS vulnerability in AXON PBX 2.02 via the "AXON->Auto-Dialer->Agents->Name" field.

    OrtaCVSS 6,1İstismar yokEPSS %29

    nch · axon pbx1 Haz 2018

  • CVE-2018-11551
    32İzleyin

    AXON PBX 2.02 contains a DLL hijacking vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code on a tar

    YüksekCVSS 7,8İstismar yokEPSS %2

    nch · axon pbx1 Haz 2018

  • CVE-2021-37469
    26İzleyin

    In NCH WebDictate v2.13 and earlier, authenticated users can abuse logprop?file=/..

    OrtaCVSS 6,5İstismar yokEPSS %1

    nch · webdictate25 Tem 2021

  • CVE-2021-37440
    26İzleyin

    NCH Axon PBX v2.22 and earlier allows path traversal for file disclosure via the logprop?file=/..

    OrtaCVSS 6,5İstismar yokEPSS %1

    nch · axon pbx25 Tem 2021

  • CVE-2021-37439
    26İzleyin

    NCH FlexiServer v6.00 suffers from a syslog?file=/..

    OrtaCVSS 6,5İstismar yokEPSS %1

    nch · flexiserver25 Tem 2021

  • CVE-2021-37452
    22İzleyin

    NCH Quorum v2.03 and earlier allows local users to discover cleartext login information relating to users by reading the local .dat configur

    OrtaCVSS 5,5İstismar yokEPSS %0

    nch · quorum25 Tem 2021

  • CVE-2009-4038
    18İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in NCH Software Axon Virtual PBX 2.10 and 2.11 allow remote attackers to inject arbitrar

    OrtaCVSS 4,3İstismar yokEPSS %2

    nch · axon virtual pbx20 Kas 2009

  • CVE-2021-37468
    13İzleyin

    NCH Reflect CRM 3.01 allows local users to discover cleartext user account information by reading the configuration files.

    DüşükCVSS 3,3İstismar yokEPSS %0

    nch · reflect customer relationship management25 Tem 2021