Export limit exceeded: 425899 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2023-22296

Reflected cross-site scripting vulnerability in MAHO-PBX NetDevancer series MAHO-PBX NetDevancer Lite/Uni/Pro/Cloud prior to Ver.1.11.00, MAHO-PBX NetDevancer VSG Lite/Uni prior to Ver.1.11.00, and MAHO-PBX NetDevancer MobileGate Home/Office prior to Ver.1.11.00 allows a remote unauthenticated attacker to inject an arbitrary script.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Ate-mahoroba
Products
Maho-pbx Netdevancer Maho-pbx Netdevancer Firmware Maho-pbx Netdevancer Mobilegate and 3 more
CVE-2023-22286

Cross-site request forgery (CSRF) vulnerability in MAHO-PBX NetDevancer Lite/Uni/Pro/Cloud prior to Ver.1.11.00, MAHO-PBX NetDevancer VSG Lite/Uni prior to Ver.1.11.00, and MAHO-PBX NetDevancer MobileGate Home/Office prior to Ver.1.11.00 allows a remote unauthenticated attacker to hijack the user authentication and conduct user's unintended operations by having a user to view a malicious page while logged in.

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed
Vendors
Ate-mahoroba
Products
Maho-pbx Netdevancer Maho-pbx Netdevancer Firmware Maho-pbx Netdevancer Mobilegate and 3 more
CVE-2023-22280

MAHO-PBX NetDevancer Lite/Uni/Pro/Cloud prior to Ver.1.11.00, MAHO-PBX NetDevancer VSG Lite/Uni prior to Ver.1.11.00, and MAHO-PBX NetDevancer MobileGate Home/Office prior to Ver.1.11.00 allow a remote authenticated attacker with an administrative privilege to execute an arbitrary OS command.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Ate-mahoroba
Products
Maho-pbx Netdevancer Maho-pbx Netdevancer Firmware Maho-pbx Netdevancer Mobilegate and 3 more