Vulnerabilities (CVE)

Filtered by vendor Descor Subscribe
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-26853 1 Descor 1 Infocad 2025-04-23 N/A 10.0 CRITICAL
DESCOR INFOCAD 3.5.1 and before and fixed in v.3.5.2.0 has a broken authorization schema.
CVE-2025-26852 1 Descor 1 Infocad 2025-04-23 N/A 10.0 CRITICAL
DESCOR INFOCAD 3.5.1 and before and fixed in v.3.5.2.0 allows SQL Injection.
CVE-2018-13789 1 Descor 1 Infocad Fm 2024-11-21 5.0 MEDIUM 7.5 HIGH
An issue was discovered in Descor Infocad FM before 3.1.0.0. An unauthenticated web service allows the retrieval of files on the web server and on reachable SMB servers.