Allegro

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2021-43978 HIGH PATCH This Week

Allegro WIndows 3.3.4152.0, embeds software administrator database credentials into its binary files, which allows users to access and modify data using the same credentials. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, low attack complexity. This Insufficiently Protected Credentials vulnerability could allow attackers to obtain user credentials due to weak protection mechanisms.

Microsoft Information Disclosure Allegro

NVD

CVSS 3.1

8.1

EPSS

0.7%

CVE-2021-42110 HIGH PATCH This Week

An issue was discovered in Allegro Windows (formerly Popsy Windows) before 3.3.4156.1. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft Privilege Escalation Allegro

NVD

CVSS 3.1

7.8

EPSS

0.3%

CVE-2021-43978

EPSS 1% CVSS 8.1

HIGH PATCH This Week

Microsoft Information Disclosure Allegro

NVD

CVE-2021-42110

EPSS 0% CVSS 7.8

HIGH PATCH This Week

An issue was discovered in Allegro Windows (formerly Popsy Windows) before 3.3.4156.1. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft Privilege Escalation Allegro

NVD