CVE-2018-17910

WebAccess Versions 8.3.2 and prior. The application fails to properly validate the length of user-supplied data, causing a buffer overflow condition that allows for arbitrary remote code execution...

CVE-2018-14820

Advantech WebAccess 8.3.1 and earlier has a .dll component that is susceptible to external control of file name or path vulnerability, which may allow an arbitrary file deletion when processing...

Advantech WebAccess Cross-Site Scripting Vulnerability (CNVD-2018-21798)

Advantech WebAccess is a set of HMI/SCADA software from Advantech based on browser architecture. The software supports dynamic graphic display and real-time data control, and provides remote control and management of automation equipment. A cross-site scripting vulnerability exists in Advantech...

CVE-2018-15703

Affected product : Advantech WebAccess 8.3.2 and earlier. Vulnerability : multiple reflected cross-site scripting (XSS) flaws in the WebAccess web interface. Root cause : input is reflected back to victims in the browser without proper sanitization. Impact : remote, unauthenticated attacker can l...

CVE-2018-15704

Advantech WebAccess 8.3.2 and earlier are affected by a stack-based buffer overflow in broadweb/system/opcImg.asp. The CNVD entry confirms a vulnerability that an unauthenticated? or remote attacker could exploit via a crafted HTTP request to that path to execute arbitrary code or cause a denial ...

CVE-2017-16720

A Path Traversal issue was discovered in WebAccess versions 8.3.2 and earlier. An attacker has access to files within the directory structure of the target device...

Foxit Reader <= 8.3.2 Multiple Vulnerabilities - Windows

Foxit Reader is prone to multiple code execution and information disclosure vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if...

CVE-2017-3194

Pandora iOS app prior to version 8.3.2 fails to properly validate SSL certificates provided by HTTPS connections, which may enable an attacker to conduct man-in-the-middle MITM attacks...

Foxit PhantomPDF < 8.3.2 Multiple Vulnerabilities

According to its version, the Foxit PhantomPDF application formally known as Phantom installed on the remote Windows host is prior to 8.3.2. It is, therefore, affected by multiple vulnerabilities: - A flaw exists in the app.launchURL method allowing a context-dependent attacker to potentially...

CVE-2016-3063

Multiple functions in NetApp OnCommand System Manager before 8.3.2 do not properly escape special characters, which allows remote authenticated users to execute arbitrary API calls via unspecified vectors...

Information disclosure

Clustered Data ONTAP versions 8.0, 8.3.1, and 8.3.2 contain a default privileged account which under certain conditions can be used for unauthorized information disclosure...

CVE-2015-8020

Clustered Data ONTAP versions 8.0, 8.3.1, and 8.3.2 contain a default privileged account which under certain conditions can be used for unauthorized information disclosure...

PT-2011-1646 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA 5500 series devices versions prior to 8.32 Description: The issue allows remote attackers to cause a denial of service, resulting in a device crash, via multicast traffic. Recommendations: For versions...

PT-2011-1644 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA 5500 series devices versions prior to 8.32 Description: The issue allows remote attackers to bypass intended access restrictions via an unspecified type of network traffic that had previously been denied...