Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Psyprax Subscribe
Filtered by product Psyprax
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-10552 1 Psyprax 1 Psyprax 2021-07-21 5.5 MEDIUM 8.1 HIGH
An issue was discovered in Psyprax before 3.2.2. The Firebird database is accessible with the default user sysdba and password masterke after installation. This allows any user to access it and read and modify the contents, including passwords. Local database files can be accessed directly as well.
CVE-2020-10554 1 Psyprax 1 Psyprax 2021-07-21 5.0 MEDIUM 7.5 HIGH
An issue was discovered in Psyprax beforee 3.2.2. Passwords used to encrypt the data are stored in the database in an obfuscated format, which can be easily reverted. For example, the password AAAAAAAA is stored in the database as MMMMMMMM.
CVE-2020-10553 1 Psyprax 1 Psyprax 2021-02-08 2.1 LOW 5.5 MEDIUM
An issue was discovered in Psyprax before 3.2.2. The file %PROGRAMDATA%\Psyprax32\PPScreen.ini contains a hash for the lockscreen (aka screensaver) of the application. If that entry is removed, the lockscreen is no longer displayed and the app is no longer locked. All local users are able to modify that file.