Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: NetCat Component: Netcat Content Management System Clear all filters
TI-2024-08026 CVE-2024-8652 · GHSA-qchx-h2pq-fhfp

Netcat CMS: reflected cross-site scripting in openstat module

Priority LOW 26

A vulnerability in NetCat CMS allows an attacker to execute JavaScript code in a user's browser when they visit specific path on the site.

CVSS 4.0MEDIUM 5.9 Network No auth User interaction EPSS 0.00283 Published 2024-09-19 Fixed in 6.4.0.24248 CWE-79
TI-2024-08025 CVE-2024-8651 · GHSA-6gcw-xcpf-vr88

Netcat CMS: user enumeration

Priority LOW 37

A vulnerability in NetCat CMS allows an attacker to send a specially crafted http request that can be used to check whether a user exists in the system, which could be a basis for further attacks.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00427 Published 2024-09-19 Fixed in 6.4.0.24248 CWE-204