COMMAX WebViewer ActiveX Control 2.1.4.5 Buffer Overflow

COMMAX WebViewer ActiveX Control 2.1.4.5 CommaxWebViewer.ocx Buffer Overflow Vendor: COMMAX Co., Ltd. Prodcut web page: https://www.commax.com Affected version: 2.1.4.5 Summary: COMMAX activex web viewer client 32bit for COMMAX DVR/NVR. Desc: The vulnerability is caused due to a boundary error in...

COMMAX UMS Client ActiveX Control 1.7.0.2 (CNC_Ctrl.dll) Heap Buffer Overflow

Summary COMMAX activex web viewer client 32bit for COMMAX DVR/NVR. Description The vulnerability is caused due to a boundary error in the processing of user input, which can be exploited to cause a heap based buffer overflow when a user inserts overly long array of string bytes through several...

CVE-2020-7866

When using XPLATFORM 9.2.2.270 or earlier versions ActiveX component, arbitrary commands can be executed due to improper input validation...

CVE-2020-7866

When using XPLATFORM 9.2.2.270 or earlier versions ActiveX component, arbitrary commands can be executed due to improper input validation...

CVE-2020-7866

When using XPLATFORM 9.2.2.270 or earlier versions ActiveX component, arbitrary commands can be executed due to improper input validation...

Input validation

When using XPLATFORM 9.2.2.270 or earlier versions ActiveX component, arbitrary commands can be executed due to improper input validation...

CVE-2020-7866

CVE-2020-7866 affects XPLATFORM 9.2.2.270 and earlier, where an ActiveX component allows arbitrary command execution due to improper input validation. The vulnerability can be triggered remotely over the network with low attack complexity and no authentication, leading to high-severity impact on ...

CVE-2020-7866 Tobesoft XPLATFORM Arbitrary Command Execution Vulnerability

When using XPLATFORM 9.2.2.270 or earlier versions ActiveX component, arbitrary commands can be executed due to improper input validation...

PT-2021-12687

Name of the Vulnerable Software and Affected Versions: XPLATFORM versions 9.2.2.270 and earlier Description: The issue allows for the execution of arbitrary commands due to improper input validation in the ActiveX component. Recommendations: For XPLATFORM versions 9.2.2.270 and earlier, at the...

CVE-2020-7866: Improper Input Validation

When using XPLATFORM 9.2.2.270 or earlier versions ActiveX component, arbitrary commands can be executed due to improper input validation...

CVE-2021-26419

Scripting Engine Memory Corruption Vulnerability...

CVE-2021-28185

The specific function in ASUS BMC’s firmware Web management page ActiveX configuration-1 acquisition does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate t...

CVE-2021-28185 ASUS BMC's firmware: buffer overflow - ActiveX configuration-1 acquisition

The specific function in ASUS BMC’s firmware Web management page ActiveX configuration-1 acquisition does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate t...

CVE-2021-28185

The specific function in ASUS BMC’s firmware Web management page ActiveX configuration-1 acquisition does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate t...

PT-2021-17802

Name of the Vulnerable Software and Affected Versions: ASUS BMC firmware affected versions not specified Description: The issue arises from a specific function in the ASUS BMC's firmware Web management page, specifically in the ActiveX configuration-2 acquisition, which fails to verify the string...

ActiveX Installer Service Privilege Escalation

The vulnerability of the ActiveX Installer Service component in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2020-7850

NBBDownloader.ocx ActiveX Control in Groupware contains a vulnerability that could allow remote files to be downloaded and executed by setting the arguments to the activex method. A remote attacker could induce a user to access a crafted web page, causing damage such as malicious code infection...

CVE-2020-7850

NBBDownloader.ocx ActiveX Control in Groupware contains a vulnerability that could allow remote files to be downloaded and executed by setting the arguments to the activex method. A remote attacker could induce a user to access a crafted web page, causing damage such as malicious code infection...

Design/Logic Flaw

NBBDownloader.ocx ActiveX Control in Groupware contains a vulnerability that could allow remote files to be downloaded and executed by setting the arguments to the activex method. A remote attacker could induce a user to access a crafted web page, causing damage such as malicious code infection...

CVE-2020-7850

NBBDownloader.ocx ActiveX Control in Groupware contains a vulnerability that could allow remote files to be downloaded and executed by setting the arguments to the activex method. A remote attacker could induce a user to access a crafted web page, causing damage such as malicious code infection...