CVE-2023-37230

Loftware Spectrum testDeviceConnection before 5.1 allows SSRF...

CVE-2023-37229

Loftware Spectrum before 5.1 allows SSRF...

CVE-2023-37227

Loftware Spectrum before 4.6 HF13 Deserializes Untrusted Data...

CVE-2023-37229

Loftware Spectrum before 5.1 allows SSRF...

CVE-2023-37231

Loftware Spectrum before 4.6 HF14 uses a Hard-coded Password...

CVE-2023-37226

Loftware Spectrum before 4.6 HF14 has Missing Authentication for a Critical Function...

CVE-2023-37226

Loftware Spectrum before 4.6 HF14 has Missing Authentication for a Critical Function...

CVE-2023-37226

Loftware Spectrum before 4.6 HF14 has Missing Authentication for a Critical Function...

Loftware Spectrum 安全漏洞

Loftware Spectrum is an enterprise label printing solution from Loftware, a comprehensive, cloud-based label printing platform for companies of all sizes. A security vulnerability exists in Loftware Spectrum prior to version 4.6, which stems from HF14 that allows authenticated XML external entity...

Loftware Spectrum 安全漏洞

Loftware Spectrum is an enterprise label printing solution from Loftware, a comprehensive, cloud-based label printing platform for companies of all sizes. A security vulnerability exists in Loftware Spectrum prior to version 5.1 that stems from the inclusion of a server-side request forgery...

PT-2024-12597 · Loftware · Loftware Spectrum

Name of the Vulnerable Software and Affected Versions: Loftware Spectrum versions prior to 5.1 Description: The issue allows Server-Side Request Forgery SSRF, which is a type of attack where an attacker can trick a server into making requests to internal or external resources. No information is...

CVE-2023-37233

Loftware Spectrum before 4.6 HF14 allows authenticated XXE attacks...

CVE-2023-37233: Improper Restriction of XML External Entity Reference

Loftware Spectrum before 4.6 HF14 allows authenticated XXE attacks...

CVE-2023-37227: Deserialization of Untrusted Data

Loftware Spectrum before 4.6 HF13 Deserializes Untrusted Data...

CVE-2023-37226: Improper Authentication

Loftware Spectrum before 4.6 HF14 has Missing Authentication for a Critical Function...

CVE-2023-37232: Exposure of Sensitive Information to an Unauthorized Actor

Loftware Spectrum through 4.6 exposes Sensitive Information Logs to an Unauthorized Actor...

CVE-2023-37229: Server-Side Request Forgery (SSRF)

Loftware Spectrum before 5.1 allows SSRF...

CVE-2023-37229

Loftware Spectrum before 5.1 allows SSRF...

CVE-2023-37227

Loftware Spectrum before 4.6 HF13 Deserializes Untrusted Data...

CVE-2023-37226

Loftware Spectrum before 4.6 HF14 has Missing Authentication for a Critical Function...