Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: Altools Clear all filters
TI-2020-06323 CVE-2020-7809 · GHSA-r6hf-6mpj-h47p

Estsoft ALSong DOM-Based XSS Vulnerability

Priority LOW 28

ALSong 3.46 and earlier version contain a Document Object Model (DOM) based cross-site scripting vulnerability caused by improper validation of user input.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00631 Published 2020-05-15 No fix listed CWE-79
TI-2007-04405 CVE-2007-4550 · GHSA-qpg7-hxpw-2pcj

Format string vulnerability in ALPass 2.7 English and 3.02 Korean might allow…

Priority LOW 31

Format string vulnerability in ALPass 2.7 English and 3.02 Korean might allow user-assisted remote attackers to execute arbitrary code via format string specifiers in an fnm field in a folder-name record in an ALPASS DB…

CVSS 2.0MEDIUM 5.1 Network No auth Interaction — EPSS 0.04484 Published 2007-08-28 No fix listed CWE-134
TI-2007-04404 CVE-2007-4549 · GHSA-97rv-8hff-m396

Multiple buffer overflows in ALPass 2.7 English and 3.02 Korean allow user-assisted…

Priority LOW 38

Multiple buffer overflows in ALPass 2.7 English and 3.02 Korean allow user-assisted remote attackers to execute arbitrary code via an ALPass DB (APW) file containing (1) a long file-key or (2) a "Site Information and Fol…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.04964 Published 2007-08-28 No fix listed CWE-119