Nchsoftware vulnerabilities

Products

• Axon Pbx 10
• Quorum 8
• Ivm Attendant 7
• Express Invoice 4
• Express Accounts 2

Newest

• nchsoftware ivm attendant NCH IVM Attendant v5.12 and earlier allows path traversal via viewfile?file=/.. to read files. CVE-2021-37442 6.5 MediumJuly 25, 2021
• nchsoftware ivm attendant NCH IVM Attendant v5.12 and earlier allows path traversal via the logdeleteselected check0... CVE-2021-37443 8.1 HighJuly 25, 2021
• nchsoftware ivm attendant NCH IVM Attendant v5.12 and earlier suffers from a directory traversal weakness upon uploading... CVE-2021-37444 8.8 HighJuly 25, 2021
• nchsoftware quorum In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via logprop... CVE-2021-37445 6.5 MediumJuly 25, 2021
• nchsoftware quorum In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via... CVE-2021-37446 4.3 MediumJuly 25, 2021
• nchsoftware quorum In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via... CVE-2021-37447 8.1 HighJuly 25, 2021
• nchsoftware ivm attendant Cross Site Scripting (XSS) exists in NCH IVM Attendant v5.12 and earlier via the Mailbox name ... CVE-2021-37448 5.4 MediumJuly 25, 2021
• nchsoftware ivm attendant Cross Site Scripting (XSS) exists in NCH IVM Attendant v5.12 and earlier via /ogmlist?folder= ... CVE-2021-37449 5.4 MediumJuly 25, 2021
• nchsoftware ivm attendant Cross Site Scripting (XSS) exists in NCH IVM Attendant v5.12 and earlier via /ogmprop?id= ... CVE-2021-37450 5.4 MediumJuly 25, 2021
• nchsoftware ivm attendant Cross Site Scripting (XSS) exists in NCH IVM Attendant v5.12 and earlier via /msglist?mbx= ... CVE-2021-37451 5.4 MediumJuly 25, 2021
• nchsoftware axon pbx Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the extension name (stored). CVE-2021-37453 5.4 MediumJuly 25, 2021
• nchsoftware axon pbx Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the line name (stored). CVE-2021-37454 5.4 MediumJuly 25, 2021
• nchsoftware axon pbx Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the outbound dialing plan... CVE-2021-37455 5.4 MediumJuly 25, 2021
• nchsoftware axon pbx Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the blacklist IP address ... CVE-2021-37456 5.4 MediumJuly 25, 2021
• nchsoftware axon pbx Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the SipRule field (stored). CVE-2021-37457 5.4 MediumJuly 25, 2021
• nchsoftware axon pbx Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the primary phone field ... CVE-2021-37458 5.4 MediumJuly 25, 2021
• nchsoftware axon pbx Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the customer name field ... CVE-2021-37459 5.4 MediumJuly 25, 2021
• nchsoftware axon pbx Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via /planprop?id= (reflected). CVE-2021-37460 5.4 MediumJuly 25, 2021
• nchsoftware axon pbx Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via /extensionsinstruction?id... CVE-2021-37461 5.4 MediumJuly 25, 2021
• nchsoftware axon pbx Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via /ipblacklist?errorip= ... CVE-2021-37462 5.4 MediumJuly 25, 2021
• nchsoftware quorum In NCH Quorum v2.03 and earlier, XSS exists via User Display Name (stored). CVE-2021-37463 5.4 MediumJuly 25, 2021
• nchsoftware quorum In NCH Quorum v2.03 and earlier, XSS exists via Conference Description (stored). CVE-2021-37464 5.4 MediumJuly 25, 2021
• nchsoftware quorum In NCH Quorum v2.03 and earlier, XSS exists via /uploaddoc?id= (reflected). CVE-2021-37465 5.4 MediumJuly 25, 2021
• nchsoftware quorum In NCH Quorum v2.03 and earlier, XSS exists via /conference?id= (reflected). CVE-2021-37466 5.4 MediumJuly 25, 2021
• nchsoftware quorum In NCH Quorum v2.03 and earlier, XSS exists via /conferencebrowseuploadfile?confid= (reflected). CVE-2021-37467 5.4 MediumJuly 25, 2021
• nchsoftware webdictate In NCH WebDictate v2.13, persistent Cross Site Scripting (XSS) exists in the Recipient Name field... CVE-2021-37470 5.4 MediumJuly 25, 2021
• nchsoftware express invoice NCH Express Invoice 8.06 to 8.24 is vulnerable to Reflected XSS in the Quotes List module. CVE-2020-13476 4.8 MediumDecember 28, 2020
• nchsoftware express accounts In NCH Express Accounts 8.24 and earlier, an authenticated low-privilege user can enter a crafted... CVE-2020-13474 6.5 MediumDecember 28, 2020
• nchsoftware express accounts NCH Express Accounts 8.24 and earlier allows local users to discover the cleartext password by... CVE-2020-13473 5.5 MediumDecember 28, 2020
• nchsoftware express invoice In NCH Express Invoice 7.25, an authenticated low-privilege user can enter a crafted URL to... CVE-2020-11561 8.8 HighApril 7, 2020
• nchsoftware express invoice NCH Express Invoice 7.25 allows local users to discover the cleartext password by reading the... CVE-2020-11560 Public exploit 7.8 HighApril 7, 2020
• nchsoftware express accounts accounting In NCH Express Accounts Accounting v7.02, persistent cross site scripting (XSS) exists in... CVE-2019-16330 5.4 MediumOctober 17, 2019
• nchsoftware express invoice In NCH Express Invoice v7.12, persistent cross site scripting (XSS) exists via the Invoices/Items... CVE-2019-16282 5.4 MediumOctober 14, 2019
• nchsoftware meo encryption software Untrusted search path vulnerability in MEO Encryption Software 2.02 allows local users to gain... CVE-2010-5220 6.9 MediumSeptember 6, 2012