Browse CVEs

HIGH 8.8 CVE-2021-37441 NCH Axon PBX v2.22 and earlier allows path traversal for file deletion via the logdelete?file=/.. substring. Axon Pbx after 2.22 Fix from $1,9502021-07-25 MEDIUM 6.5 CVE-2021-37439 NCH FlexiServer v6.00 suffers from a syslog?file=/.. path traversal vulnerability. Flexiserver after 6.00 Fix from $1,6002021-07-25 MEDIUM 6.5 CVE-2021-37440 NCH Axon PBX v2.22 and earlier allows path traversal for file disclosure via the logprop?file=/.. substring. Axon Pbx after 2.22 Fix from $1,6002021-07-25 MEDIUM 6.5 CVE-2021-37469 In NCH WebDictate v2.13 and earlier, authenticated users can abuse logprop?file=/.. path traversal to read files on the filesystem. Webdictate after 2.13 Fix from $1,6002021-07-25 MEDIUM 5.5 CVE-2021-37452 NCH Quorum v2.03 and earlier allows local users to discover cleartext login information relating to users by reading the local .dat configuration fil… Quorum after 2.03 Fix from $1,6002021-07-25 HIGH 7.8 CVE-2018-11551 AXON PBX 2.02 contains a DLL hijacking vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code on a targeted sys… Axon Pbx Mitigation only Fix from $1,9502018-06-01 MEDIUM 6.1 CVE-2018-11552EPSS 29% There is a reflected XSS vulnerability in AXON PBX 2.02 via the "AXON->Auto-Dialer->Agents->Name" field. The vulnerability exists due to insufficient… Axon Pbx No fix yet Fix from $1,6002018-06-01