Vulnerabilidades de Desktopalert
CVEs publicadas que afetam produtos de Desktopalert: 15 registro(s), com severidade, exploração e correções.
CVE-2025-54563
Alta · 7.5
CWE-284 24/11/2025
Improper Access Control em Desktopalert Pingalert Application Server
An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows Incorrect Access Control, leading to Remote Information Disclosure.
CVE-2025-54347
Crítica · 9.9
CWE-22 24/11/2025
Path Traversal em Desktopalert Pingalert Application Server
A Directory Traversal vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows an attacker to write arbitrary files under certain conditions.
CVE-2025-54341
Média · 5.3
CWE-798 24/11/2025
Use of Hard-coded Credentials em Desktopalert Pingalert Application Server
A vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2. There are Hard-coded configuration values.
CVE-2025-54338
Alta · 7.5
CWE-284 24/11/2025
Improper Access Control em Desktopalert Pingalert Application Server
An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows an attacker to disclose user hashes.
CVE-2025-54562
Média · 4.3
CWE-209 14/11/2025
Information Exposure Through an Error Message em Desktopalert Pingalert Application Server
A vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows Technical Information to be Disclosed through stack trace.
CVE-2025-54561
Média · 4.3
CWE-284 14/11/2025
Improper Access Control em Desktopalert Pingalert Application Server
An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows remote access to content despite lack of the correct permission through a Broken Authorization Schema.
CVE-2025-54560
Baixa · 3.8
CWE-918 14/11/2025
Server-Side Request Forgery (SSRF) em Desktopalert Pingalert Application Server
A Server-side Request Forgery vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows Probing of internal infrastructure.
CVE-2025-54559
Baixa · 3.7
CWE-22 14/11/2025
Path Traversal em Desktopalert Pingalert Application Server
An issue was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows remote Path Traversal for loading arbitrary external content.
CVE-2025-54348
Média · 6.5
CWE-80 14/11/2025
A Stored Cross Site Scripting (XSS) vulnerability was found in the Application Server of…
A Stored Cross Site Scripting (XSS) vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows an attacker to hijack user’s browser, capturing sensitive information.
CVE-2025-54346
Alta · 7.6
CWE-80 14/11/2025
A Reflected Cross Site Scripting (XSS) vulnerability was found in the Application Server…
A Reflected Cross Site Scripting (XSS) vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows an attacker to hijack user’s browser, capturing sensitive information.
CVE-2025-54345
Alta · 7.5
CWE-200 14/11/2025
Exposure of Sensitive Information em Desktopalert Pingalert Application Server
An issue was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2. Sensitive Information is exposed to an Unauthorized Actor.
CVE-2025-54343
Crítica · 9.6
CWE-284 14/11/2025
Improper Access Control em Desktopalert Pingalert Application Server
An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 exploitable remotely for Escalation of Privileges.
CVE-2025-54342
Baixa · 3.3
CWE-312 14/11/2025
Cleartext Storage of Sensitive Information em Desktopalert Pingalert Application Server
A vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2. There is Exposure of Sensitive Information because of Incompatible Policies.
CVE-2025-54340
Média · 4.1
CWE-327 14/11/2025
Use of a Broken or Risky Cryptographic Algorithm em Desktopalert Pingalert Application Server
A vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2. There is a Broken or Risky Cryptographic Algorithm.
CVE-2025-54339
Crítica · 10.0
CWE-284 14/11/2025
Improper Access Control em Desktopalert Pingalert Application Server
An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 exploitable remotely for Escalation of Privileges.