AD
Vendor
Adremsoft
8
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2019-14481 | NE Netcrunch Adremsoft | 5.4 | Dec 16 | AdRem NetCrunch 10.6.0.4587 has a Cross-Site Request Forgery (CSRF) vulnerability in the NetCrunch web client |
| CVE-2019-14479 | NE Netcrunch Adremsoft | 8.8 | Dec 16 | AdRem NetCrunch 10.6.0.4587 allows Remote Code Execution |
| CVE-2019-14478 | NE Netcrunch Adremsoft | 5.4 | Dec 16 | AdRem NetCrunch 10.6.0.4587 has a stored Cross-Site Scripting (XSS) vulnerability in the NetCrunch web client |
| CVE-2019-14476 | NE Netcrunch Adremsoft | 6.5 | Dec 16 | AdRem NetCrunch 10.6.0.4587 has a Server-Side Request Forgery (SSRF) vulnerability in the NetCrunch server |
| CVE-2019-14483 | NE Netcrunch Adremsoft | 8.8 | Dec 16 | AdRem NetCrunch 10.6.0.4587 allows Credentials Disclosure |
| CVE-2019-14482 | NE Netcrunch Adremsoft | 9.8 | Dec 16 | AdRem NetCrunch 10.6.0.4587 has a hardcoded SSL private key vulnerability in the NetCrunch web client |
| CVE-2019-14480 | NE Netcrunch Adremsoft | 9.8 | Dec 16 | AdRem NetCrunch 10.6.0.4587 has an Improper Session Handling vulnerability in the NetCrunch web client, which can lead to an authentication bypass or escalation of privileges |
| CVE-2019-14477 | NE Netcrunch Adremsoft | 5.5 | Dec 16 | AdRem NetCrunch 10.6.0.4587 has Improper Credential Storage since the internal user database is readable by low-privileged users and passwords in the database are weakly encoded… |
