Priority LOW 31
Thermo Fisher Torrent Suite Software is vulnerable to a path traversal, which could allow an authenticated attacker to read arbitrary files on the Torrent Server that are accessible to the web service account.
Vulnerabilities
10 records
TI-2026-14419 CVE-2026-17583 · GHSA-5p87-q7f6-jf7x
Thermo Fisher Applied Biosystems Genetic Analyzers Missing Support for Integrity Check
Priority LOW 37
The affected Thermo Fisher Applied Biosystems Genetic Analyzers are vulnerable because .fsa/.hid output files can be edited.
TI-2025-34135 CVE-2025-54307 · GHSA-7gh5-58ch-ph4v
An issue was discovered in the Thermo Fisher Torrent Suite Django application 5.18.1.
Priority MEDIUM 42
An issue was discovered in the Thermo Fisher Torrent Suite Django application 5.18.1.
TI-2025-34134 CVE-2025-54306 · GHSA-42m6-m7p8-vqwv
An issue was discovered in the Thermo Fisher Torrent Suite Django application 5.18.1.
Priority LOW 35
An issue was discovered in the Thermo Fisher Torrent Suite Django application 5.18.1.
TI-2025-34133 CVE-2025-54305 · GHSA-rxh6-pq89-vv2f
An issue was discovered in the Thermo Fisher Torrent Suite Django application 5.18.1.
Priority LOW 35
An issue was discovered in the Thermo Fisher Torrent Suite Django application 5.18.1.
TI-2025-34132 CVE-2025-54304 · GHSA-9r76-4gr2-pv84
An issue was discovered on Thermo Fisher Ion Torrent OneTouch 2 INS1005527 devices.
Priority MEDIUM 50
An issue was discovered on Thermo Fisher Ion Torrent OneTouch 2 INS1005527 devices.
TI-2025-34131 CVE-2025-54303 · GHSA-p4v2-9grq-vm24
The Thermo Fisher Torrent Suite Django application 5.18.1 has weak default credentials…
Priority MEDIUM 49
The Thermo Fisher Torrent Suite Django application 5.18.1 has weak default credentials, which are stored as fixtures for the Django ORM API.
TI-2025-33819 CVE-2025-53963 · GHSA-mmhc-m89q-9v2j
An issue was discovered on Thermo Fisher Ion Torrent OneTouch 2 INS1005527 devices.
Priority MEDIUM 49
An issue was discovered on Thermo Fisher Ion Torrent OneTouch 2 INS1005527 devices.
TI-2017-08387 CVE-2017-11349 · GHSA-5c6j-5c43-8hhw
dataTaker DT8x dEX 1.72.007 allows remote attackers to compose programs or schedules, for…
Priority MEDIUM 46
dataTaker DT8x dEX 1.72.007 allows remote attackers to compose programs or schedules, for purposes such as sending e-mail messages or making outbound connections to FTP servers for uploading data.
TI-2017-08222 CVE-2017-11165 · GHSA-h4fr-cprr-q23r
dataTaker DT80 dEX 1.50.012 allows remote attackers to obtain sensitive credential and…
Priority HIGH 78
dataTaker DT80 dEX 1.50.012 allows remote attackers to obtain sensitive credential and configuration information via a direct request for the /services/getFile.cmd?userfile=config.xml URI.