OP
Vendor
Opmantek
18
CVEs
0
On KEV
0
New 30D
Products
OP9.8
Open-audit
Opmantek
16 CVEs0 on KEV0 new
NM7.5
Network Management Information System
Opmantek
2 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2021-44674 | OP Open-audit Opmantek | 6.5 | Jan 3 | An information exposure issue has been discovered in Opmantek Open-AudIT 4.2.0 |
| CVE-2021-40612 | OP Open-audit Opmantek | 9.8 | Dec 22 | An issue was discovered in Opmantek Open-AudIT after 3.5.0 |
| CVE-2021-44916 | OP Open-audit Opmantek | 6.1 | Dec 20 | Opmantek Open-AudIT Community 4.2.0 (Fixed in 4.3.0) is affected by a Cross Site Scripting (XSS) vulnerability |
| CVE-2021-3333 | OP Open-audit Opmantek | 6.1 | Feb 5 | Opmantek Open-AudIT 4.0.1 is affected by cross-site scripting (XSS) |
| CVE-2021-3130 | OP Open-audit Opmantek | 5.9 | Jan 20 | Within the Open-AudIT up to version 3.5.3 application, the web interface hides SSH secrets, Windows passwords, and SNMP strings from users using HTML 'password field' obfuscation |
| CVE-2020-11943 | OP Open-audit Opmantek | 8.8 | Apr 29 | An issue was discovered in Open-AudIT 3.2.2 |
| CVE-2020-11942 | OP Open-audit Opmantek | 9.8 | Apr 29 | An issue was discovered in Open-AudIT 3.2.2 |
| CVE-2020-12261 | OP Open-audit Opmantek | 5.4 | Apr 28 | Open-AudIT 3.3.0 allows an XSS attack after login |
| CVE-2020-12078 | OP Open-audit Opmantek | 8.8 | Apr 28 | An issue was discovered in Open-AudIT 3.3.1 |
| CVE-2020-11941 | OP Open-audit Opmantek | 8.8 | Apr 27 | An issue was discovered in Open-AudIT 3.2.2 |
| CVE-2020-8813 | OP Open-audit Opmantek | 8.8 | Feb 22 | graph_realtime.php in Cacti 1.2.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in a cookie, if a guest user has the graph real-time privilege |
| CVE-2019-16293 | OP Open-audit Opmantek | 8.8 | Sep 13 | The Create Discoveries feature of Open-AudIT before 3.2.0 allows an authenticated attacker to execute arbitrary OS commands via a crafted value for a URL field |
| CVE-2018-16607 | OP Open-audit Opmantek | 5.4 | Sep 19 | Cross-site scripting (XSS) vulnerability in the Orgs Page in Open-AudIT Professional edition in 2.2.7 allows remote attackers to inject arbitrary web script via the Orgs name… |
| CVE-2018-14493 | OP Open-audit Opmantek | 6.1 | Jul 25 | Cross-site scripting (XSS) vulnerability in the Groups Page in Open-Audit Community 2.2.6 allows remote attackers to inject arbitrary web script or HTML via the group name |
| CVE-2018-11124 | OP Open-audit Opmantek | 5.4 | Jul 6 | Cross-site scripting (XSS) vulnerability in Attributes functionality in Open-AudIT Community edition before 2.2.2 allows remote attackers to inject arbitrary web script or HTML… |
| CVE-2018-10314 | OP Open-audit Opmantek | 5.4 | May 10 | Cross-site scripting (XSS) vulnerability in Open-AudIT Community 2.2.0 allows remote attackers to inject arbitrary web script or HTML via a crafted name of a component, as… |
| CVE-2016-6534 | NM Network Management Information System Opmantek | 7.5 | Apr 10 | Opmantek NMIS before 4.3.7c has command injection via man, finger, ping, trace, and nslookup in the tools.pl CGI script |
| CVE-2016-5642 | NM Network Management Information System Opmantek | 5.4 | Apr 10 | Opmantek NMIS before 8.5.12G has XSS via SNMP |