CVE-2019-14478
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2019-14478
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
AdRem NetCrunch 10.6.0.4587 has a stored Cross-Site Scripting (XSS) vulnerability in the NetCrunch web client. The user's input data is not properly encoded when being echoed back to the user. This data can be interpreted as executable code by the browser and allows an attacker to execute JavaScript code in the context of the user's browser if the victim opens or searches for a node whose "Display Name" contains an XSS payload.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Adrem Netcrunch 跨站脚本漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Adrem Netcrunch是美国Adrem公司的一个设备监控软件。该软件基于 SNMP 源、Windows 事件日志和 Syslog 服务器等时间可对 Windows、Linux、Mac OS X、BSD、NetWare 和 SNMP 设备进行监控。 AdRem NetCrunch 10.6.0.4587 存在跨站脚本漏洞，该漏洞源于当回显给用户时，用户的输入数据没有正确编码。浏览器可以将此数据解释为可执行代码，并允许攻击者可利用该漏洞在用户浏览器的上下文中执行JavaScript代码，如果受害者打开
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2019-14478
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2019-14478
请登录查看更多情报信息。
Same Patch Batch · n/a · 2020-12-16 · 28 CVEs total
| CVE-2020-7781 | 9.8 CRITICAL | Command Injection |
| CVE-2020-28458 | 7.3 HIGH | Prototype Pollution |
| CVE-2020-4008 | VMware Carbon Black Cloud 安全漏洞 | |
| CVE-2020-35476 | OpenTSDB 操作系统命令注入漏洞 | |
| CVE-2020-29363 | P11-glue P11-kit 缓冲区错误漏洞 | |
| CVE-2020-29362 | P11-glue P11-kit 缓冲区错误漏洞 | |
| CVE-2020-29361 | P11-glue P11-kit 输入验证错误漏洞 | |
| CVE-2020-25617 | SolarWinds N-Central 路径遍历漏洞 | |
| CVE-2020-25618 | SolarWinds N-Central 操作系统命令注入漏洞 | |
| CVE-2020-25619 | SolarWinds N-Central 安全漏洞 | |
| CVE-2020-25620 | SolarWinds N-Central 信任管理问题漏洞 | |
| CVE-2020-25621 | SolarWinds N-Central 授权问题漏洞 | |
| CVE-2020-25622 | SolarWinds N-Central 跨站请求伪造漏洞 | |
| CVE-2020-14254 | HCL BigFix Inventory 安全漏洞 | |
| CVE-2020-14248 | IBM BigFix Inventory 代码问题漏洞 | |
| CVE-2020-28931 | EPSON EPS TSE Server 跨站请求伪造漏洞 | |
| CVE-2020-29607 | Pluck 代码问题漏洞 | |
| CVE-2019-14477 | Adrem Netcrunch 信任管理问题漏洞 | |
| CVE-2019-14480 | Adrem Netcrunch 授权问题漏洞 | |
| CVE-2019-14483 | Adrem Netcrunch 信息泄露漏洞 |
Showing top 20 of 28 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8276
bettercap MySQL Server mysql_server.go integer coercion - CVE-2026-8275
bettercap zerogod IPP Service zerogod_ipp_primitives.go ippR - CVE-2026-8270
Open5GS SMF ogs_nas_parse_qos_rules denial of service - CVE-2026-8269
Open5GS SMF smf_nsmf_handle_create_sm_context denial of serv - CVE-2026-8268
Open5GS SMF OpenAPI_list_create denial of service
V. Comments for CVE-2019-14478
No comments yet