Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1One way hash with predictable salt vulnerabilities in ASPECT may expose sensitive information to a potential attackerThis issue affects ASPECT-Enterprise: through 3.*; NEXUS SeriesCheck if you run itEPSS 0.21%May 22, 2025
- Medium6.9Log injection vulnerabilities in ASPECT provide attacker access to inject malicious browser scripts if administrator credentials become compromised.This issue affects ASPECT-EnterpCheck if you run itEPSS 0.42%May 22, 2025
- Medium6.9Large content vulnerabilities are present in ASPECT exposing a device to disk overutilization on a system if administrator credentials become compromisedThis issue affects ASPECT-ECheck if you run itEPSS 0.39%May 22, 2025
- High7.0Large content vulnerabilities are present in ASPECT exposing a device to disk overutilization on a system if administrator credentials become compromisedThis issue affects ASPECT-ECheck if you run itEPSS 0.38%May 22, 2025
- Medium6.9Windows permissions for ASPECT configuration toolsets are not fully secured allow-ing exposure of configuration informationThis issue affects ASPECT-Enterprise: through 3.*; NEXUSCheck if you run itEPSS 0.16%May 22, 2025
- High7.1Device commissioning parameters in ASPECT may be modified by an external source if administrative credentials become compromisedThis issue affects ASPECT-Enterprise: through 3.*; NCheck if you run itEPSS 0.39%May 22, 2025
- High7.1DLL's are not digitally signed when loaded in ASPECT's configuration toolset exposing the application to binary planting during device commissioning.This issue affects ASPECT-EnterCheck if you run itEPSS 1.09%May 22, 2025
- High7.5Relative Path Traversal vulnerabilities in ASPECT allow access to file resources if session administrator credentials become compromised.Check if you run itEPSS 0.43%May 22, 2025
- Medium5.9An Unchecked Loop Condition in ASPECT provides an attacker the ability to maliciously consume system resources if session administrator credentials become compromised This issue afCheck if you run itEPSS 0.39%May 22, 2025
- High7.5Servlet injection vulnerabilities in ASPECT allow remote code execution if session administrator credentials become compromised.Check if you run itEPSS 0.74%May 22, 2025
- High7.5SQL injection vulnerabilities in ASPECT allow unintended access and manipulation of database repositories if session administrator credentials become compromised.Check if you run itEPSS 0.39%May 22, 2025
- Medium6.0File upload and execute vulnerabilities in ASPECT allow PHP script injection if session administrator credentials become compromised.Check if you run itEPSS 0.36%May 22, 2025
- Medium6.0File upload vulnerabilities are present in ASPECT if session administrator credentials become compromised This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: throuCheck if you run itEPSS 0.36%May 22, 2025
- High8.9Remote Code Execution vulnerabilities are present in ASPECT if session administrator credentials become compromised This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS SerCheck if you run itEPSS 0.58%May 22, 2025
- High7.3System File Deletion vulnerabilities in ASPECT provide attackers access to delete system files if session administrator credentials become compromised.Check if you run itEPSS 0.34%May 22, 2025
- Medium5.9Exposure of file path, file size or file existence vulnerabilities in ASPECT provide attackers access to file system information if session administrator credentials become compromCheck if you run itEPSS 0.31%May 22, 2025
- High8.9File corruption vulnerabilities in ASPECT provide attackers access to overwrite sys-tem files if session administrator credentials become compromised This issue affects ASPECT-EnteCheck if you run itEPSS 0.46%May 22, 2025
- Medium5.3Group-Office is an enterprise customer relationship management and groupware tool.Check if you run itEPSS 0.27%May 22, 2025
- High8.9Port manipulation vulnerabilities in ASPECT provide attackers with the ability to con-trol TCP/IP port access if session administrator credentials become compromised.Check if you run itEPSS 0.50%May 22, 2025
- Medium5.8Group-Office is an enterprise customer relationship management and groupware tool.Check if you run itEPSS 0.27%May 22, 2025
- Medium6.9Group-Office is an enterprise customer relationship management and groupware tool.Check if you run itEPSS 0.29%May 22, 2025
- High7.5Remote Code Execution vulnerabilities are present in ASPECT if session administra-tor credentials become compromised.Check if you run itEPSS 0.68%May 22, 2025
- High7.7Fiber is an Express-inspired web framework written in Go.Check if you run itEPSS 0.53%May 22, 2025
- Medium6.0wire-webapp is the web application for the open-source messaging service Wire.Check if you run itEPSS 0.11%May 22, 2025
- Medium5.6wire-webapp is the web application for the open-source messaging service Wire.Check if you run itEPSS 0.15%May 22, 2025
Sort