CVE-2020-7866

When using XPLATFORM 9.2.2.270 or earlier versions ActiveX component, arbitrary commands can be executed due to improper input validation...

Input validation

When using XPLATFORM 9.2.2.270 or earlier versions ActiveX component, arbitrary commands can be executed due to improper input validation...

CVE-2020-7866

CVE-2020-7866 affects XPLATFORM 9.2.2.270 and earlier, where an ActiveX component allows arbitrary command execution due to improper input validation. The vulnerability can be triggered remotely over the network with low attack complexity and no authentication, leading to high-severity impact on ...

CVE-2020-7866 Tobesoft XPLATFORM Arbitrary Command Execution Vulnerability

When using XPLATFORM 9.2.2.270 or earlier versions ActiveX component, arbitrary commands can be executed due to improper input validation...

CVE-2021-26419

Scripting Engine Memory Corruption Vulnerability...

CVE-2021-28185

The specific function in ASUS BMC’s firmware Web management page ActiveX configuration-1 acquisition does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate t...

CVE-2021-28185 ASUS BMC's firmware: buffer overflow - ActiveX configuration-1 acquisition

The specific function in ASUS BMC’s firmware Web management page ActiveX configuration-1 acquisition does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate t...

The vulnerability of the ActiveX Installer Service on the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the ActiveX Installer Service component in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2020-7850

NBBDownloader.ocx ActiveX Control in Groupware contains a vulnerability that could allow remote files to be downloaded and executed by setting the arguments to the activex method. A remote attacker could induce a user to access a crafted web page, causing damage such as malicious code infection...

CVE-2020-7850

NBBDownloader.ocx ActiveX Control in Groupware contains a vulnerability that could allow remote files to be downloaded and executed by setting the arguments to the activex method. A remote attacker could induce a user to access a crafted web page, causing damage such as malicious code infection...

Design/Logic Flaw

NBBDownloader.ocx ActiveX Control in Groupware contains a vulnerability that could allow remote files to be downloaded and executed by setting the arguments to the activex method. A remote attacker could induce a user to access a crafted web page, causing damage such as malicious code infection...

CVE-2020-7850

The CVE-2020-7850 entry concerns the NBBDownloader.ocx ActiveX control in Groupware. Descriptions across sources indicate a vulnerability that allows remote files to be downloaded and executed by manipulating arguments to the ActiveX method, enabling a remote attacker to lure a user to a crafted ...

CVE-2020-7850 Douzone ActiveX File Download and Execution Vulnerability

NBBDownloader.ocx ActiveX Control in Groupware contains a vulnerability that could allow remote files to be downloaded and executed by setting the arguments to the activex method. A remote attacker could induce a user to access a crafted web page, causing damage such as malicious code infection...

NBBDownloader.ocx ActiveX 参数注入漏洞

SearchDomino.com ActiveX is an application from SearchDomino.com, Inc. Real-Time, Collaborative Enabled Programs NBBDownloader.ocx ActiveX suffers from a parameter injection vulnerability that can be exploited by remote attackers to trick users into visiting a crafted web page, which can cause...

CVE-2021-26869

Windows ActiveX Installer Service Information Disclosure Vulnerability...

CVE-2021-26869

Windows ActiveX Installer Service Information Disclosure Vulnerability...

CVE-2021-26869

Windows ActiveX Installer Service Information Disclosure Vulnerability...

Information disclosure

Windows ActiveX Installer Service Information Disclosure Vulnerability...

CVE-2021-26869 Windows ActiveX Installer Service Information Disclosure Vulnerability

...

CVE-2021-26869 Windows ActiveX Installer Service Information Disclosure Vulnerability

...