Vulnerability index

Browse CVEs

7 matching

Cards Compact

Filters 1 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

Axon Pbx HIGH 8.8

CVE-2021-37441

NCH Axon PBX v2.22 and earlier allows path traversal for file deletion via the logdelete?file=/.. substring.

Fix: after 2.22

Fix from $1,950 2021-07-25

Flexiserver MEDIUM 6.5

CVE-2021-37439

NCH FlexiServer v6.00 suffers from a syslog?file=/.. path traversal vulnerability.

Fix: after 6.00

Fix from $1,600 2021-07-25

Axon Pbx MEDIUM 6.5

CVE-2021-37440

NCH Axon PBX v2.22 and earlier allows path traversal for file disclosure via the logprop?file=/.. substring.

Fix: after 2.22

Fix from $1,600 2021-07-25

Webdictate MEDIUM 6.5

CVE-2021-37469

In NCH WebDictate v2.13 and earlier, authenticated users can abuse logprop?file=/.. path traversal to read files on the filesystem.

Fix: after 2.13

Fix from $1,600 2021-07-25

Quorum MEDIUM 5.5

CVE-2021-37452

NCH Quorum v2.03 and earlier allows local users to discover cleartext login information relating to users by reading the local .dat configuration fil…

Fix: after 2.03

Fix from $1,600 2021-07-25

Axon Pbx HIGH 7.8

CVE-2018-11551

AXON PBX 2.02 contains a DLL hijacking vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code on a targeted sys…

Mitigation only

Fix from $1,950 2018-06-01

Axon Pbx MEDIUM 6.1

CVE-2018-11552EPSS 29%

There is a reflected XSS vulnerability in AXON PBX 2.02 via the "AXON->Auto-Dialer->Agents->Name" field. The vulnerability exists due to insufficient…

No fix yet

Fix from $1,600 2018-06-01