Ngc Explorer
Approved changes feed: RSS · Atom
cpe:2.3:a:digitro:ngc_explorer:3.44.15:*:*:*:*:*:*:*part: a version: 3.44.15 update: *
| Vendor | Digitro (a1de3e53-40b8-518a-b4c6-9183c3a8a676) |
|---|---|
| Product | Ngc Explorer (8aad25e8-8496-573e-914b-2ac4e686ceb7) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-4527 |
vulnerable | 2026-06-08 07:29:16.386755 |
Dígitro NGC Explorer Password Transmission client-side enforcement of server-side security
LOW (3.7)
A security flaw has been discovered in Dígitro NGC Explorer up to 3.48.21. The impacted element is an unknown function of the component Password Transmission Handler. Performing a manipulation results in client-side enforcement of server-side security. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitability is regarded as difficult. Upgrading to version 3.48.22 is sufficient to resolve this issue. Upgrading the affected component is recommended. The action taken by the vendor is: "Strengthening of security validation performed on the server side, together with improvements to administrative and authentication controls." The vulnerabilities are limited to NGC Explorer and do not affect other Dígitro products, including UNA and Guardião.
Published: 2025-05-11T02:00:06.268Z
Updated: 2026-07-31T15:09:47.479Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-4526 |
vulnerable | 2026-06-08 07:29:16.386171 |
Dígitro NGC Explorer Configuration missing password field masking
MEDIUM (4.3)
A vulnerability was identified in Dígitro NGC Explorer up to 3.48.21. The affected element is an unknown function of the component Configuration Page. Such manipulation leads to missing password field masking. It is possible to launch the attack remotely. Upgrading to version 3.48.22 is sufficient to fix this issue. It is suggested to upgrade the affected component. The action taken by the vendor is: "Review and correction of controls related to the exposure of user information in the product configuration interface." The vulnerabilities are limited to NGC Explorer and do not affect other Dígitro products, including UNA and Guardião.
Published: 2025-05-11T01:00:06.924Z
Updated: 2026-07-31T15:09:38.888Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.