Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Qognify Clear all filters
TI-2023-26779 CVE-2023-49114 · GHSA-m3q9-44rg-xw34

Local Privilege Escalation via DLL Hijacking

Priority HIGH 65

A DLL hijacking vulnerability was identified in the Qognify VMS Client Viewer version 7.1 or higher, which allows local users to execute arbitrary code and obtain higher privileges via careful placement of a malicious DL…

CVSS 3.1MEDIUM 6.7 Local Low privileges User interaction EPSS 0.00359 Published 2024-02-26 No fix listed CWE-427
TI-2023-02163 CVE-2023-2306 · GHSA-g24m-p7cv-rhwp

Qognify NiceVision Use of Hard-coded Credentials

Priority MEDIUM 50

Qognify NiceVision versions 3.1 and prior are vulnerable to exposing sensitive information using hard-coded credentials.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00616 Published 2023-10-05 No fix listed CWE-798
TI-2020-16936 CVE-2020-27868 · GHSA-3gqm-8w6h-2v84

Deserialization of untrusted data in Qognify Ocularis

Priority HIGH 83

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Qognify Ocularis 5.9.0.395.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.81753 Published 2021-02-11 No fix listed CWE-502