3158 matches found
Advantech WebAccess SCADA Password Parameter Buffer Overflow (CVE-2014-0992)
A stack buffer overflow exists in Advantech's WebAccess SCADA software. The vulnerability is due to insufficient input validation of the Password parameter in an ActiveX control that is part of the WebAccess Client. A remote, unauthenticated attacker could exploit this vulnerability by enticing a...
PT-2014-6478
Name of the Vulnerable Software and Affected Versions Zarafa WebAccess version 7.1.10 Zarafa WebApp version 1.6 beta Description The issue is related to weak permissions for the config.php file, which allows local users to obtain sensitive information by reading the PHP session files. This proble...
PT-2014-6480
Name of the Vulnerable Software and Affected Versions Zarafa WebAccess version 4.1 Zarafa WebApp affected versions not specified Description The issue allows local users to obtain sensitive information by reading temporary session data due to world-readable permissions for the files in the tmp...
CVE-2014-0991
Stack-based buffer overflow in Advantech WebAccess formerly BroadWin WebAccess 7.2 allows remote attackers to execute arbitrary code via the projectname parameter...
CVE-2014-0992
Stack-based buffer overflow in Advantech WebAccess formerly BroadWin WebAccess 7.2 allows remote attackers to execute arbitrary code via the password parameter...
CVE-2014-0987
Stack-based buffer overflow in Advantech WebAccess formerly BroadWin WebAccess 7.2 allows remote attackers to execute arbitrary code via the NodeName2 parameter...
CVE-2014-0988
Stack-based buffer overflow in Advantech WebAccess formerly BroadWin WebAccess 7.2 allows remote attackers to execute arbitrary code via the AccessCode parameter...
CVE-2014-0989
Stack-based buffer overflow in Advantech WebAccess formerly BroadWin WebAccess 7.2 allows remote attackers to execute arbitrary code via the AccessCode2 parameter...
CVE-2014-0990
Stack-based buffer overflow in Advantech WebAccess formerly BroadWin WebAccess 7.2 allows remote attackers to execute arbitrary code via the UserName parameter...
CVE-2014-0985
Stack-based buffer overflow in Advantech WebAccess formerly BroadWin WebAccess 7.2 allows remote attackers to execute arbitrary code via the NodeName parameter...
CVE-2014-0986
Stack-based buffer overflow in Advantech WebAccess formerly BroadWin WebAccess 7.2 allows remote attackers to execute arbitrary code via the GotoCmd parameter...
Stack overflow
Stack-based buffer overflow in Advantech WebAccess formerly BroadWin WebAccess 7.2 allows remote attackers to execute arbitrary code via the AccessCode parameter...
Stack overflow
Stack-based buffer overflow in Advantech WebAccess formerly BroadWin WebAccess 7.2 allows remote attackers to execute arbitrary code via the NodeName parameter...
Stack overflow
Stack-based buffer overflow in Advantech WebAccess formerly BroadWin WebAccess 7.2 allows remote attackers to execute arbitrary code via the password parameter...
Stack overflow
Stack-based buffer overflow in Advantech WebAccess formerly BroadWin WebAccess 7.2 allows remote attackers to execute arbitrary code via the NodeName2 parameter...
Stack overflow
Stack-based buffer overflow in Advantech WebAccess formerly BroadWin WebAccess 7.2 allows remote attackers to execute arbitrary code via the UserName parameter...
Stack overflow
Stack-based buffer overflow in Advantech WebAccess formerly BroadWin WebAccess 7.2 allows remote attackers to execute arbitrary code via the projectname parameter...
Stack overflow
Stack-based buffer overflow in Advantech WebAccess formerly BroadWin WebAccess 7.2 allows remote attackers to execute arbitrary code via the AccessCode2 parameter...
