Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
quest vulnerabilities and exploits
(subscribe to this query)
570
VMScore
CVE-2022-31555
The romain20100/nursequest repository through 2018-02-22 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Nurse Quest Project Nurse Quest
383
VMScore
CVE-2021-44030
Quest KACE Desktop Authority prior to 11.2 allows XSS because it does not prevent untrusted HTML from reaching the jQuery.htmlPrefilter method of jQuery.
Quest Kace Desktop Authority
383
VMScore
CVE-2021-44028
XXE can occur in Quest KACE Desktop Authority prior to 11.2 because the log4net configuration file might be controlled by an attacker, a related issue to CVE-2018-1285.
Quest Kace Desktop Authority
668
VMScore
CVE-2021-44029
An issue exists in Quest KACE Desktop Authority prior to 11.2. This vulnerability allows malicious users to execute remote code through a deserialization exploitation in the RadAsyncUpload function of ASP.NET AJAX. An attacker can leverage this vulnerability when the encryption k...
Quest Kace Desktop Authority
668
VMScore
CVE-2021-44031
An issue exists in Quest KACE Desktop Authority prior to 11.2. /dacomponentui/profiles/profileitems/outlooksettings/Insertimage.aspx contains a vulnerability that could allow pre-authentication remote code execution. An attacker could upload a .ASP file to reside at /images/{GUID...
Quest Kace Desktop Authority
383
VMScore
CVE-2020-35203
Reflected XSS in Web Compliance Manager in Quest Policy Authority version 8.1.2.200 allows malicious users to inject malicious code into the browser via a specially crafted link to the initFile.jsp file via the msg parameter. NOTE: This vulnerability only affects products that ar...
Quest Policy Authority For Unified Communications 8.1.2.200
383
VMScore
CVE-2020-35719
Reflected XSS in Quest Policy Authority 8.1.2.200 allows remote malicious users to inject malicious code into the browser via a specially crafted link to the /WebCM/Applications/Search/index.jsp file via the added parameter. NOTE: This vulnerability only affects products that are...
Quest Policy Authority For Unified Communications 8.1.2.200
312
VMScore
CVE-2020-35721
Reflected XSS in Quest Policy Authority 8.1.2.200 allows remote malicious users to inject malicious code into the browser via a specially crafted link to the BrowseAssets.do file via the title parameter. NOTE: This vulnerability only affects products that are no longer supported ...
Quest Policy Authority For Unified Communications 8.1.2.200
312
VMScore
CVE-2020-35724
Reflected XSS in Quest Policy Authority 8.1.2.200 allows remote malicious users to inject malicious code into the browser via a specially crafted link to the Error.jsp file via the err parameter (or indirectly via the cpr, tcp, or abs parameter). NOTE: This vulnerability only aff...
Quest Policy Authority For Unified Communications 8.1.2.200
383
VMScore
CVE-2020-35725
Reflected XSS in Quest Policy Authority 8.1.2.200 allows remote malicious users to inject malicious code into the browser via a specially crafted link to the /WebCM/index.jsp file via the msg parameter. NOTE: This vulnerability only affects products that are no longer supported b...
Quest Policy Authority For Unified Communications 8.1.2.200
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
NULL pointer dereference
CVE-2023-52689
CVE-2024-23803
client side
CVE-2023-52696
information disclosure
CVE-2024-35843
CVE-2024-27130
CVE-2023-52697
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
NEXT »