CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
NCH IVM Attendant v5.12 and earlier allows path traversal via the logdeleteselected check0 parameter for file deletion. |
| 25/07/2021 |
| CVE-2021-37442 | MITTEL6.5 | NCH IVM Attendant v5.12 and earlier allows path traversal via viewfile?file=/.. to read files. | 25/07/2021 |
| CVE-2021-37451 | MITTEL5.4 | Cross Site Scripting (XSS) exists in NCH IVM Attendant v5.12 and earlier via /msglist?mbx= (reflected). | 25/07/2021 |
| CVE-2021-37450 | MITTEL5.4 | Cross Site Scripting (XSS) exists in NCH IVM Attendant v5.12 and earlier via /ogmprop?id= (reflected). | 25/07/2021 |