2025

An issue in Ocuco Innovation v.2.10.24.51 allows a local attacker to escalate privileges via the SETTINGSVATIGATOR.EXE c

An issue in Ocuco Innovation v.2.10.24.51 allows a local attacker to escalate privileges via the STOCKORDERENTRY.EXE com

An issue in Ocuco Innovation v.2.10.24.51 allows a local attacker to escalate privileges via the JOBENTRY.EXE

An issue in Ocuco Innovation APPMANAGER.EXE v.2.10.24.51 allows a local attacker to escalate privileges via the applicat

An issue in Ocuco Innovation Tracking.exe v.2.10.24.51 allows a local attacker to escalate privileges via the modificati

Stored Cross Site Scripting vulnerabilities exist in ASPECT if administrator creden-tials become compromisedThis issue a

SSRF Server Side Request Forgery vulnerabilities exist in ASPECT if administrator credentials become compromisedThis iss

SSL Verification Bypass vulnerabilities exist in ASPECT if administrator credentials become compromisedThis issue affect

2nd Order SQL injection vulnerabilities in ASPECT allow unintended access and manipulation of database repositories if a

Serialized configuration information may be disclosed during device commissioning while using ASPECT's configuration too

Sensitive device logger information in ASPECT may be exposed if administrator credentials become compromisedThis issue a

Predictable filename vulnerabilities in ASPECT may expose sensitive information to a potential attacker if administrator

One way hash with predictable salt vulnerabilities in ASPECT may expose sensitive information to a potential attackerThi

Log injection vulnerabilities in ASPECT provide attacker access to inject malicious browser scripts if administrator cre

Large content vulnerabilities are present in ASPECT exposing a device to disk overutilization on a system if administrat

Windows permissions for ASPECT configuration toolsets are not fully secured allow-ing exposure of configuration informat

Device commissioning parameters in ASPECT may be modified by an external source if administrative credentials become com

DLL's are not digitally signed when loaded in ASPECT's configuration toolset exposing the application to binary planting

Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.119 and 25.0.20

Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.119 and 25.0.20

Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.119 and 25.0.20

Fiber is an Express-inspired web framework written in Go. Starting in version 2.52.6 and prior to version 2.52.7, `fiber

wire-webapp is the web application for the open-source messaging service Wire. A bug fix caused a regression causing an

File upload vulnerabilities are present in ASPECT if session administrator credentials become compromised This issue aff

Remote Code Execution vulnerabilities are present in ASPECT if session administrator credentials become compromised This

System File Deletion vulnerabilities in ASPECT provide attackers access to delete system files if session administrator

Exposure of file path, file size or file existence vulnerabilities in ASPECT provide attackers access to file system inf

File upload and execute vulnerabilities in ASPECT allow PHP script injection if session administrator credentials become

Port manipulation vulnerabilities in ASPECT provide attackers with the ability to con-trol TCP/IP port access if session

File corruption vulnerabilities in ASPECT provide attackers access to overwrite sys-tem files if session administrator c

Remote Code Execution vulnerabilities are present in ASPECT if session administra-tor credentials become compromised. Th

In Infoblox NETMRI before 7.6.1, authenticated users can perform SQL injection attacks.

Relative Path Traversal vulnerabilities in ASPECT allow access to file resources if session administrator credentials be

An Unchecked Loop Condition in ASPECT provides an attacker the ability to maliciously consume system resources if sessio

Servlet injection vulnerabilities in ASPECT allow remote code execution if session administrator credentials become comp

SQL injection vulnerabilities in ASPECT allow unintended access and manipulation of database repositories if session adm

wire-webapp is the web application for the open-source messaging service Wire. A change caused a regression resulting in

Asterisk is an open-source private branch exchange (PBX). Prior to versions 18.26.2, 20.14.1, 21.9.1, and 22.4.1 of Aste

Asterisk is an open-source private branch exchange (PBX). Prior to versions 18.26.2, 20.14.1, 21.9.1, and 22.4.1 of Aste

Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems. Starting in ve

Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems. Starting in ve

Insecure permissions in autodeploy-layer v1.2.0 allows attackers to escalate privileges and compromise the customer clou

An insecure file system permissions vulnerability in MSP360 Backup 8.0 allows a low privileged user to execute commands

IBM Aspera Faspex 5.0.0 through 5.0.12 is vulnerable to HTML injection. A remote attacker could inject malicious HTML co

IBM Aspera Faspex 5.0.0 through 5.0.12 could allow an authenticated user to obtain sensitive information or perform unau

IBM Aspera Faspex 5.0.0 through 5.0.12 could allow an authenticated user to obtain sensitive information or perform unau

An escalation of privilege vulnerability in ASPECT could provide an attacker root access to a server when logged in as a

Absolute File Traversal vulnerabilities in ASPECT allows access and modification of unintended resources. This issue aff

A vulnerability classified as critical was found in Campcodes Cybercafe Management System 1.0. Affected by this vulnerab

A request smuggling vulnerability identified within Pingora’s proxying framework, pingora-proxy, allows malicious HTTP r