Vulnerabilities (CVE)

Filtered by vendor Allegro Subscribe
Total 4 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-25392 1 Allegro 1 Bigflow 2023-12-10 N/A 5.9 MEDIUM
Allegro Tech BigFlow <1.6 is vulnerable to Missing SSL Certificate Validation.
CVE-2021-43978 1 Allegro 1 Allegro 2023-12-10 5.5 MEDIUM 8.1 HIGH
Allegro WIndows 3.3.4152.0, embeds software administrator database credentials into its binary files, which allows users to access and modify data using the same credentials.
CVE-2021-42110 1 Allegro 1 Allegro 2023-12-10 6.2 MEDIUM 7.8 HIGH
An issue was discovered in Allegro Windows (formerly Popsy Windows) before 3.3.4156.1. A standard user can escalate privileges to SYSTEM if the FTP module is installed, because of DLL hijacking.
CVE-2000-0470 1 Allegro 1 Rom Pager 2023-12-10 7.5 HIGH N/A
Allegro RomPager HTTP server allows remote attackers to cause a denial of service via a malformed authentication request.