Lucene search
+L

6067 matches found

CNNVD
CNNVD
•added 2025/12/09 12:00 a.m.•18 views

COMMAX WebViewer ActiveX Control 缓冲区错误漏洞

COMMAX WebViewer ActiveX Control is a browser plug-in from the Korean company COMMAX. A buffer error vulnerability exists in COMMAX WebViewer ActiveX Control version 2.1.4.5, which stems from a buffer overflow issue in CommaxWebViewer.ocx that could lead to the execution of arbitrary code...

8.7CVSS7.3AI score0.00486EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2025/12/09 12:00 a.m.•51 views

PT-2025-50235

Name of the Vulnerable Software and Affected Versions COMMAX UMS Client ActiveX Control version 1.7.0.2 Description The COMMAX UMS Client ActiveX Control contains a heap-based buffer overflow issue. An attacker can execute arbitrary code by supplying overly long string arrays through multiple...

8.7CVSS8AI score0.00486EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/09 12:00 a.m.•3 views

CVE-2021-47719: Out-of-bounds Write

COMMAX WebViewer ActiveX Control 2.1.4.5 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by providing excessively long string arrays through multiple functions. Attackers can exploit boundary errors in CommaxWebViewer.ocx to cause buffer overflow condition...

8.7CVSS6.9AI score0.00486EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/09 12:00 a.m.•4 views

CVE-2021-47705: Out-of-bounds Write

COMMAX UMS Client ActiveX Control 1.7.0.2 contains a heap-based buffer overflow vulnerability that allows attackers to execute arbitrary code by providing excessively long string arrays through multiple functions. Attackers can exploit improper boundary validation in CNCCtrl.dll to cause heap...

8.7CVSS7.2AI score0.00486EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/11/13 11:08 p.m.•14 views

CVE-2022-4983

TEC-IT TBarCode version 11.15 contains a vulnerability in the TBarCode11.ocx ActiveX/OCX control's licensing handling INI-file based that can be abused to cause remote creation of files on the host filesystem. Depending on where files can be created and which filenames are allowed, this can allow...

6.9CVSS7.6AI score0.00381EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/11/13 11:08 p.m.•14 views

CVE-2017-20211

UCanCode E-XD++ Visualization Enterprise Suite contains an untrusted pointer dereference vulnerability via the TKDRAWCAD.TKDrawCADCtrl.1 ActiveX control. This is because it exposes a RotateShape method that dereferences a user-supplied pointer without sufficient validation. A crafted input may...

8.6CVSS7.9AI score0.00741EPSS
SaveExploits0References1
NVD
NVD
•added 2025/11/12 10:15 p.m.•15 views

CVE-2022-4983

TEC-IT TBarCode version 11.15 contains a vulnerability in the TBarCode11.ocx ActiveX/OCX control's licensing handling INI-file based that can be abused to cause remote creation of files on the host filesystem. Depending on where files can be created and which filenames are allowed, this can allow...

6.9CVSS0.00381EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/11/12 10:06 p.m.•10 views

CVE-2022-4983 TEC-IT TBarCode SDK 11.15 Remote File Create

TEC-IT TBarCode version 11.15 contains a vulnerability in the TBarCode11.ocx ActiveX/OCX control's licensing handling INI-file based that can be abused to cause remote creation of files on the host filesystem. Depending on where files can be created and which filenames are allowed, this can allow...

6.9CVSS6.2AI score0.00381EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/11/12 10:05 p.m.•12 views

CVE-2017-20211 UCanCode E-XD++ Visualization Enterprise Suite Untrusted Pointer Dereference RCE

UCanCode E-XD++ Visualization Enterprise Suite contains an untrusted pointer dereference vulnerability via the TKDRAWCAD.TKDrawCADCtrl.1 ActiveX control. This is because it exposes a RotateShape method that dereferences a user-supplied pointer without sufficient validation. A crafted input may...

8.6CVSS6.2AI score0.00741EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/12 12:00 a.m.•2 views

CVE-2017-20211: Use of Out-of-range Pointer Offset

UCanCode E-XD++ Visualization Enterprise Suite contains an untrusted pointer dereference vulnerability via the TKDRAWCAD.TKDrawCADCtrl.1 ActiveX control. This is because it exposes a RotateShape method that dereferences a user-supplied pointer without sufficient validation. A crafted input may...

8.6CVSS6.2AI score0.00741EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/11/12 12:00 a.m.•23 views

PT-2025-46731

Name of the Vulnerable Software and Affected Versions TEC-IT TBarCode version 11.15 Description The TBarCode11.ocx ActiveX/OCX control in version 11.15 has a flaw in its licensing handling, which relies on INI-files. This can be exploited to remotely create files on the host filesystem. Depending...

6.9CVSS7.1AI score0.00381EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2025/10/14 12:20 p.m.•11 views

CVE-2025-9063 Rockwell Automation PanelView Plus 7 Performance Series B Authentication Bypass

An authentication bypass security issue exists within FactoryTalk View Machine Edition Web Browser ActiveX control. Exploitation of this vulnerability allows unauthorized access to the PanelView Plus 7 Series B, including access to the file system, retrieval of diagnostic information, event logs,...

7CVSS6.5AI score0.00385EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/14 12:00 a.m.•4 views

CVE-2025-9063: Improper Authentication

An authentication bypass security issue exists within FactoryTalk View Machine Edition Web Browser ActiveX control. Exploitation of this vulnerability allows unauthorized access to the PanelView Plus 7 Series B, including access to the file system, retrieval of diagnostic information, event logs,...

9.8CVSS5.9AI score0.00385EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/10/14 12:00 a.m.•31 views

PT-2025-41913

Name of the Vulnerable Software and Affected Versions FactoryTalk View Machine Edition versions affected versions not specified Description An authentication bypass issue exists in the FactoryTalk View Machine Edition Web Browser ActiveX control. Successful exploitation can lead to unauthorized...

7CVSS6.5AI score0.00385EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2007-2819

Malware in sbrugna...

9.3CVSS6.3AI score0.0642EPSS
SaveExploits1References8
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2010-1927

Malware in sbrugna...

9.3CVSS6.4AI score0.02336EPSS
SaveExploits1References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2005-2859

Malware in sbrugna...

5CVSS6.4AI score0.01306EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2002-0691

Malware in sbrugna...

5CVSS6.4AI score0.06498EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•22 views

EUVD-2009-1667

Malware in sbrugna...

9.3CVSS6.4AI score0.09643EPSS
SaveExploits2References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2006-5486

Malware in sbrugna...

7.5CVSS6.4AI score0.03432EPSS
SaveExploits0References7
Rows per page
Query Builder