Approved changes feed: RSS · Atom
cpe:2.3:a:nedi:nedi:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Nedi (50c5be95-9e8f-5935-bd79-66af7fd3195d) |
|---|---|
| Product | Nedi (184071d1-d82e-5b07-803f-fa169cf4d013) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-20731 |
vulnerable | 2026-06-08 05:11:27.790042 |
Details available
A stored cross site scripting (XSS) vulnerability in NeDi before 1.7Cp3 allows remote attackers to inject arbitrary web script or HTML via User-Chat.php.
Published: 2019-01-17T02:00:00.000Z
Updated: 2024-08-05T12:12:28.343Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20730 |
vulnerable | 2026-06-08 05:11:27.789662 |
Details available
A SQL injection vulnerability in NeDi before 1.7Cp3 allows any user to execute arbitrary SQL read commands via the query.php component.
Published: 2019-01-17T02:00:00.000Z
Updated: 2024-08-05T12:12:28.205Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20729 |
vulnerable | 2026-06-08 05:11:27.789352 |
Details available
A reflected cross site scripting (XSS) vulnerability in NeDi before 1.7Cp3 allows remote attackers to inject arbitrary web script or HTML via the reg parameter in mh.php.
Published: 2019-01-17T02:00:00.000Z
Updated: 2024-08-05T12:12:27.390Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20728 |
vulnerable | 2026-06-08 05:11:27.788918 |
Details available
A cross site request forgery (CSRF) vulnerability in NeDi before 1.7Cp3 allows remote attackers to escalate privileges via User-Management.php.
Published: 2019-01-17T02:00:00.000Z
Updated: 2024-08-05T12:12:28.985Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20727 |
vulnerable | 2026-06-08 05:11:27.788330 |
Details available
Multiple command injection vulnerabilities in NeDi before 1.7Cp3 allow authenticated users to execute code on the server side via the flt parameter to Nodes-Traffic.php, the dv parameter to Devices-Graph.php, or the tit parameter to drawmap.php.
Published: 2019-01-17T02:00:00.000Z
Updated: 2024-08-05T12:12:27.679Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.