Login Request a demo
NE
Product
Netcrunch
by Adremsoft · last CVE Dec 16, 2020
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 2High 2Medium 4Low 0
Severity
All severities8Critical2High2Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Netcrunch to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-14482
9.8
2%
Dec 16
AdRem NetCrunch 10.6.0.4587 has a hardcoded SSL private key vulnerability in the NetCrunch web client
Affected: through 10.6.0.4587
CVE-2019-14480
9.8
1%
Dec 16
AdRem NetCrunch 10.6.0.4587 has an Improper Session Handling vulnerability in the NetCrunch web client, which can lead to an authentication bypass or escalation of privileges
Affected: through 11.0.0.5282
CVE-2019-14479
8.8
4%
Dec 16
AdRem NetCrunch 10.6.0.4587 allows Remote Code Execution
Affected: 10.6.0.4587
CVE-2019-14483
8.8
2%
Dec 16
AdRem NetCrunch 10.6.0.4587 allows Credentials Disclosure
Affected: through 10.6.0.4587
CVE-2019-14476
6.5
1%
Dec 16
AdRem NetCrunch 10.6.0.4587 has a Server-Side Request Forgery (SSRF) vulnerability in the NetCrunch server
Affected: 10.6.0.4587
CVE-2019-14477
5.5
0%
Dec 16
AdRem NetCrunch 10.6.0.4587 has Improper Credential Storage since the internal user database is readable by low-privileged users and passwords in the database are weakly encoded…
Affected: through 11.0.0.5282
CVE-2019-14481
5.4
0%
Dec 16
AdRem NetCrunch 10.6.0.4587 has a Cross-Site Request Forgery (CSRF) vulnerability in the NetCrunch web client
Affected: 10.6.0.4587
CVE-2019-14478
5.4
1%
Dec 16
AdRem NetCrunch 10.6.0.4587 has a stored Cross-Site Scripting (XSS) vulnerability in the NetCrunch web client
Affected: 10.6.0.4587
Showing 8