PT-2025-9836

Name of the Vulnerable Software and Affected Versions SoftwareX versions prior to 6.8.0 Description The issue may allow for path traversal, potentially leading to arbitrary file download. This could facilitate further compromise of the device when combined with other issues. Recommendations For...

PT-2025-9837

Name of the Vulnerable Software and Affected Versions SoftwareX versions prior to 6.8.0 Description The issue may allow for path traversal, potentially leading to arbitrary file deletion. This could facilitate further compromise of the device when combined with other issues. Recommendations For...

PT-2025-9838

Name of the Vulnerable Software and Affected Versions SoftwareX versions prior to 6.8.0 Description The issue allows for external XML entity injection, enabling the arbitrary download of files. This can potentially facilitate further compromise of the device when combined with other issues...

PT-2025-9700 · Softwarex · Softwarex

Name of the Vulnerable Software and Affected Versions: SoftwareX versions prior to 6.7.0 Description: The issue allows for path traversal, which may enable remote code execution using a privileged account, requiring a device admin account. This cannot be performed by a regular user. In combinatio...

PT-2024-27028

Name of the Vulnerable Software and Affected Versions SoftwareX versions affected versions not specified Description The issue is due to missing input sanitization, allowing an attacker to perform cross-site-scripting attacks and run arbitrary JavaScript in the browser of other users. The login...

PT-2024-18965

Name of the Vulnerable Software and Affected Versions SoftwareX affected versions not specified Description The issue arises from a lack of validation of the pip field in a POST request sent to the "/customnode/install" endpoint, which is used to install custom nodes and is added to the server by...

PT-2024-27032

Name of the Vulnerable Software and Affected Versions SoftwareX versions prior to 7.40 Description The issue is due to missing input sanitization, allowing an attacker to perform cross-site-scripting attacks and run arbitrary Javascript in the browser of other users. The "Edit Disclaimer Text"...

PT-2024-10613 · Softwarex · Softwarex

Name of the Vulnerable Software and Affected Versions: SoftwareX affected versions not specified Description: The issue allows an image with a version lower than the fuse version to potentially be booted, leading to improper authentication. Recommendations: At the moment, there is no information...

PT-2024-40947 · Softwarex · Softwarex

Name of the Vulnerable Software and Affected Versions: SoftwareX versions prior to 0.15.1 Description: The issue concerns the borsh serialization of the HashMap, which did not adhere to the borsh specification. This led to potential non-canonical encodings that depended on the insertion order, an...

PT-2024-22696 · Softwarex · Softwarex

Name of the Vulnerable Software and Affected Versions: SoftwareX versions prior to 2.1.4 Description: The issue arises when a user's session is not invalidated after logout. Upon successful login, the Backend service returns an "Authorization" credential, which can still be used to initiate...

PT-2024-25911 · Softwarex · Softwarex

Name of the Vulnerable Software and Affected Versions: SoftwareX versions prior to 2.1.4 Description: The issue allows a regular user to view everyone's user flink information, including executeSQL and config, after successfully logging in. This is achieved by manually making a request using the...

PT-2024-22784

Name of the Vulnerable Software and Affected Versions SoftwareX versions prior to 2.1.4 Description The issue allows a user to perform a template injection attack, resulting in Remote Code Execution on the server. This can be done after a successful login, making it a moderate-impact issue...

PT-2024-40913 · Softwarex +1 · Softwarex +1

Name of the Vulnerable Software and Affected Versions: SoftwareX versions prior to 0.9.7 SoftwareX versions prior to 0.10.4 Description: The issue arises from unsafe memory accesses due to the assumption that reprpacked guarantees a specific field order in structs. However, the Rust specification...

PT-2024-40912 · Softwarex +1 · Softwarex +1

Name of the Vulnerable Software and Affected Versions: SoftwareX versions prior to 0.9.7 SoftwareX versions prior to 0.10.3 Description: The issue arises from unsafe memory accesses due to the assumption that reprpacked guarantees a specific field order in structs. However, the Rust specification...

PT-2024-18788

Name of the Vulnerable Software and Affected Versions SoftwareX versions prior to SMR Jun-2024 Release 1 Description The issue is related to a heap out-of-bound write vulnerability in parsing grid image headers in the libsavscmn.so library. This vulnerability allows local attackers to execute...

PT-2024-40380 · Softwarex · Softwarex

Name of the Vulnerable Software and Affected Versions: SoftwareX versions prior to 3.1.14 Description: The issue arises during installation, where certain parameters admin username and admin password are not properly escaped in the setup form. Recommendations: For versions prior to 3.1.14, update...

PT-2024-41049 · Softwarex · Softwarex

Name of the Vulnerable Software and Affected Versions: SoftwareX versions prior to 0.29 Description: The issue concerns the execution of commands with multi-line clipboard text, including "| sh". Recommendations: For versions prior to 0.29, update to version 0.29 to resolve the issue...

PT-2024-22631

Name of the Vulnerable Software and Affected Versions SoftwareX affected versions not specified Description A SQL injection issue exists in the script Handler CFG.ashx. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-2024-15801

Name of the Vulnerable Software and Affected Versions SoftwareX affected versions not specified Description The issue allows any user to delete an arbitrary folder recursively on a remote server due to bad input sanitization, leading to path traversal. The attacker would need access to the server...

PT-2024-14563 · Softwarex · Softwarex

Name of the Vulnerable Software and Affected Versions: SoftwareX affected versions not specified Description: The issue concerns a vulnerability of permission verification in the content sharing pop-up module. Successful exploitation of this issue may cause unauthorized file sharing...