1541 matches found
PT-2025-22536 · Unknown · Nexus Series +2
Name of the Vulnerable Software and Affected Versions: ASPECT-Enterprise versions through 3. NEXUS Series versions through 3. MATRIX Series versions through 3. Description: The issue is related to large content vulnerabilities in ASPECT, which can expose a device to disk overutilization on a syst...
PT-2025-22530 · Unknown · Nexus Series +2
Name of the Vulnerable Software and Affected Versions: ASPECT-Enterprise versions through 3.08.03 NEXUS Series versions through 3.08.03 MATRIX Series versions through 3.08.03 Description: Servlet injection vulnerabilities in ASPECT allow remote code execution if session administrator credentials...
PT-2025-22540 · Unknown · Nexus Series +2
Name of the Vulnerable Software and Affected Versions: ASPECT-Enterprise versions through 3. NEXUS Series versions through 3. MATRIX Series versions through 3. Description: Sensitive device logger information in ASPECT may be exposed if administrator credentials become compromised. Recommendation...
PT-2025-22531 · Unknown · Nexus Series +2
Name of the Vulnerable Software and Affected Versions: ASPECT-Enterprise versions through 3.08.03 NEXUS Series versions through 3.08.03 MATRIX Series versions through 3.08.03 Description: An Unchecked Loop Condition in ASPECT provides an attacker the ability to maliciously consume system resource...
CVE-2025-20256
A vulnerability in the web-based management interface of Cisco Secure Network Analytics Manager and Cisco Secure Network Analytics Virtual Manager could allow an authenticated, remote attacker with valid administrative credentials to execute arbitrary commands as root on the underlying operating...
CVE-2025-28235
An information disclosure vulnerability in the component /socket.io/1/websocket/ of Soundcraft Ui Series Models Ui12 and Ui16 Firmware v1.0.7x and v1.0.5x allows attackers to access Administrator credentials in plaintext...
CVE-2025-28230
Incorrect access control in JMBroadcast JMB0150 Firmware v1.0 allows attackers to access hardcoded administrator credentials...
CVE-2025-43928
In Infodraw Media Relay Service MRS 7.1.0.0, the MRS web server on port 12654 allows reading arbitrary files via ../ directory traversal in the username field. Reading ServerParameters.xml may reveal administrator credentials in cleartext or with MD5 hashing...
CVE-2025-43928
In Infodraw Media Relay Service MRS 7.1.0.0, the MRS web server on port 12654 allows reading arbitrary files via ../ directory traversal in the username field. Reading ServerParameters.xml may reveal administrator credentials in cleartext or with MD5 hashing...
PT-2025-17400 · Infodraw · Infodraw Media Relay Service
Name of the Vulnerable Software and Affected Versions: Infodraw Media Relay Service version 7.1.0.0 Description: The issue allows reading arbitrary files via ../ directory traversal in the username field. This can potentially reveal administrator credentials in cleartext or with MD5 hashing when...
CVE-2025-43928
In Infodraw Media Relay Service MRS 7.1.0.0, the MRS web server on port 12654 allows reading arbitrary files via ../ directory traversal in the username field. Reading ServerParameters.xml may reveal administrator credentials in cleartext or with MD5 hashing...
CVE-2025-43928
The CVE-2025-43928 entry concerns Infodraw Media Relay Service (MRS) v7.1.0.0. The MRS web server (port 12654) exposes a path traversal in the username field, enabling reading arbitrary files. Reading ServerParameters.xml could disclose administrator credentials (cleartext or MD5 hashed). Affecte...
CVE-2025-28235
An information disclosure vulnerability in the component /socket.io/1/websocket/ of Soundcraft Ui Series Models Ui12 and Ui16 Firmware v1.0.7x and v1.0.5x allows attackers to access Administrator credentials in plaintext...
CVE-2025-28230
Incorrect access control in JMBroadcast JMB0150 Firmware v1.0 allows attackers to access hardcoded administrator credentials...
CVE-2025-28235
An information disclosure vulnerability in the component /socket.io/1/websocket/ of Soundcraft Ui Series Models Ui12 and Ui16 Firmware v1.0.7x and v1.0.5x allows attackers to access Administrator credentials in plaintext...
CVE-2025-28230
CVE-2025-28230 affects JMBroadcast JMB0150 Firmware v1.0. Root cause: incorrect access control that allows access to hardcoded administrator credentials. Impact: potential disclosure of hardcoded admin credentials via network access with no user interaction. CVSS v3.1 score: 9.1 (CRITICAL) — AV:N...
PT-2025-17324 · Soundcraft · Soundcraft Ui Series
Name of the Vulnerable Software and Affected Versions: Soundcraft Ui Series Models Ui12 and Ui16 Firmware versions 1.0.5x through 1.0.7x Description: An information disclosure issue in the /socket.io/1/websocket/ component allows attackers to access Administrator credentials in plaintext...
Soundcraft Ui Series 安全漏洞
Soundcraft Ui Series is a professional audio mixer from Soundcraft. A security vulnerability exists in the Soundcraft Ui Series Models Ui12 and Ui16 Firmware versions 1.0.7x and 1.0.5x, which originates in the /socket.io/1/websocket/ component that could lead to the disclosure of administrator...