Phx

**Name of the Vulnerable Software and Affected Versions** Topaz OFD version 2.11.0.201 **Description** A problematic vulnerability was found in Topaz OFD, affecting an unknown part of the file C:Program FilesTopaz OFDWarsawcore.exe of the component Protection Module Warsaw. The manipulation leads to an unquoted search path, and attacking locally is a requirement. **Recommendations** For version 2.11.0.201, upgrade to version 2.12.0.259 to address this issue. It is recommended to upgrade the affected component.

**Name of the Vulnerable Software and Affected Versions** NextBX QWAlerter version 4.50 **Description** A critical issue was found in the software, affecting some unknown functionality of the file QWAlerter.exe. The manipulation leads to an unquoted search path, allowing an attack to be launched on the local host. **Recommendations** For NextBX QWAlerter version 4.50, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Pointware EasyInventory version 1.0.12.0 **Description** A critical issue affects the processing of the file C:Program Files (x86)EasyInventoryEasy2W.exe, leading to an unquoted search path. This issue requires local attacking to be exploited. The vendor was contacted about this disclosure but did not respond. **Recommendations** For Pointware EasyInventory version 1.0.12.0, consider restricting access to the file C:Program Files (x86)EasyInventoryEasy2W.exe to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.