3751 matches found
CVE-2023-37230
Loftware Spectrum testDeviceConnection before 5.1 allows SSRF...
CVE-2023-37227
Loftware Spectrum before 4.6 HF13 Deserializes Untrusted Data...
PT-2024-12594 · Loftware · Loftware Spectrum
Name of the Vulnerable Software and Affected Versions: Loftware Spectrum versions prior to 4.6 HF14 Description: The issue is related to Missing Authentication for a Critical Function. There is no information provided about the estimated number of potentially affected devices worldwide or...
CVE-2023-37232
Loftware Spectrum (v4.6 and earlier) exposes sensitive information from logs to unauthorized actors. Documents consistently describe the issue as a disclosure of logs, impacting confidentiality (CVSSv3.1: HIGH, 7.5). The exact root cause, affected components, and remediation steps are not detaile...
CVE-2023-37234
Loftware Spectrum versions through 4.6 contain a security vulnerability due to an unprotected JMX Registry. Affected component: Loftware Spectrum (through 4.6). Reported impact includes exposure risks consistent with unprotected JMX access. The issue stems from the JMX Registry exposure; no explo...
PT-2024-12595 · Loftware · Loftware Spectrum
Name of the Vulnerable Software and Affected Versions: Loftware Spectrum versions prior to 4.6 HF13 Description: The issue is related to the deserialization of untrusted data. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents...
PT-2024-12597 · Loftware · Loftware Spectrum
Name of the Vulnerable Software and Affected Versions: Loftware Spectrum versions prior to 5.1 Description: The issue allows Server-Side Request Forgery SSRF, which is a type of attack where an attacker can trick a server into making requests to internal or external resources. No information is...
CVE-2023-37229
Loftware Spectrum before 5.1 allows SSRF...
CVE-2023-37229
The Loftware Spectrum enterprise label printing solution (versions prior to 5.1 ) is vulnerable to Server-Side Request Forgery (SSRF) . This flaw allows an attacker to trick the server into making unauthorized requests to internal or external resources. To remediate this issue, users should updat...
CVE-2023-37226
Loftware Spectrum, an enterprise label printing platform, is vulnerable to a Missing Authentication for a Critical Function in versions prior to 4.6 HF14 . This flaw allows unauthorized access to critical functionality, potentially impacting the integrity and availability of the system. Remediati...
CVE-2023-37230
Loftware Spectrum testDeviceConnection before 5.1 allows SSRF...
PT-2024-12599 · Loftware · Loftware Spectrum
Name of the Vulnerable Software and Affected Versions: Loftware Spectrum versions prior to 4.6 HF14 Description: The issue is related to a hard-coded password in Loftware Spectrum. This could potentially allow unauthorized access. Recommendations: For versions prior to 4.6 HF14, update to version...
CVE-2023-37231
Loftware Spectrum before 4.6 HF14 uses a Hard-coded Password...
CVE-2023-37233
Loftware Spectrum before 4.6 HF14 allows authenticated XXE attacks...
CVE-2023-37226
Loftware Spectrum before 4.6 HF14 has Missing Authentication for a Critical Function...
CVE-2023-37232
Loftware Spectrum through 4.6 exposes Sensitive Information Logs to an Unauthorized Actor...
Loftware Spectrum 安全漏洞
Loftware Spectrum is an enterprise label printing solution from Loftware, a comprehensive, cloud-based label printing platform for companies of all sizes. A security vulnerability exists in Loftware Spectrum prior to version 5.1 that stems from the inclusion of a server-side request forgery...
Loftware Spectrum 安全漏洞
Loftware Spectrum is an enterprise label printing solution from Loftware, a comprehensive, cloud-based label printing platform for companies of all sizes. A security vulnerability exists in Loftware Spectrum prior to version 4.6 that stems from HF14 missing authentication for critical functions...