Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
axon vulnerabilities and exploits
(subscribe to this query)
4.3
CVSSv2
CVE-2009-4038
Multiple cross-site scripting (XSS) vulnerabilities in NCH Software Axon Virtual PBX 2.10 and 2.11 allow remote malicious users to inject arbitrary web script or HTML via the (1) onok or (2) oncancel parameter to the logon program. NOTE: the provenance of this information is unkn...
Nch Axon Virtual Pbx 2.10
Nch Axon Virtual Pbx 2.11
4
CVSSv2
CVE-2021-37440
NCH Axon PBX v2.22 and previous versions allows path traversal for file disclosure via the logprop?file=/.. substring.
Nch Axon Pbx
3.5
CVSSv2
CVE-2021-37453
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and previous versions via the extension name (stored).
Nchsoftware Axon Pbx
3.5
CVSSv2
CVE-2021-37455
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and previous versions via the outbound dialing plan (stored).
Nchsoftware Axon Pbx
3.5
CVSSv2
CVE-2021-37457
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and previous versions via the SipRule field (stored).
Nchsoftware Axon Pbx
3.5
CVSSv2
CVE-2021-37461
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and previous versions via /extensionsinstruction?id= (reflected).
Nchsoftware Axon Pbx
6.5
CVSSv2
CVE-2021-37441
NCH Axon PBX v2.22 and previous versions allows path traversal for file deletion via the logdelete?file=/.. substring.
Nch Axon Pbx
3.5
CVSSv2
CVE-2021-37456
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and previous versions via the blacklist IP address (stored).
Nchsoftware Axon Pbx
3.5
CVSSv2
CVE-2021-37459
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and previous versions via the customer name field (stored).
Nchsoftware Axon Pbx
3.5
CVSSv2
CVE-2021-37454
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and previous versions via the line name (stored).
Nchsoftware Axon Pbx
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322
CVE-2006-4304
wireless
CVE-2023-23022
local file inclusion
CVE-2024-27058
CVE-2024-33820
open redirect
CVE-2024-27079
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »