PT-2020-10074

Name of the Vulnerable Software and Affected Versions Dext5.ocx ActiveX versions 5.0.0.116 and earlier Description The issue allows a remote attacker to download arbitrary files by setting specific arguments to the ActiveX method, which can be leveraged for code execution. Recommendations For...

PT-2020-10073

Name of the Vulnerable Software and Affected Versions Dext5.ocx ActiveX versions 5.0.0.116 and earlier Description The issue allows a remote attacker to download and execute a remote arbitrary file by setting the arguments to the ActiveX method, which can be leveraged for code execution...

CVE-2019-19168: Undefined Security Weakness

Dext5.ocx ActiveX 5.0.0.116 and eariler versions contain a vulnerability, which could allow remote attacker to download and execute remote arbitrary file by setting the arguments to the activex method. This can be leveraged for code execution...

Inogard Ebiz4u Code Execution Vulnerability

Inogard Ebiz4u is an e-procurement system from Inogard Korea. A security vulnerability exists in AxECM.cab ActiveX Control in Inogard Ebiz4u, which stems from a lack of integrity checking in the program. The vulnerability can be exploited to download files and execute code by setting the paramete...

HANDYSOFT Handy Groupware Operating System Command Injection Vulnerability

HANDYSOFT Handy Groupware is an office collaboration solution from HANDYSOFT Korea. The product supports functions such as meeting management, attendance management and HR assessment. An operating system command injection vulnerability exists in ActiveX Control HShell.dll in HANDYSOFT Handy...

CVE-2019-19165

AxECM.cabActiveX Control in Inogard Ebiz4u contains a vulnerability that could allow remote files to be downloaded and executed by setting arguments to the activeX method. Download of Code Without Integrity Check vulnerability in ActiveX control of Inogard Co,,LTD Ebiz4u ActiveX of Inogard...

CVE-2019-19165

AxECM.cabActiveX Control in Inogard Ebiz4u contains a vulnerability that could allow remote files to be downloaded and executed by setting arguments to the activeX method. Download of Code Without Integrity Check vulnerability in ActiveX control of Inogard Co,,LTD Ebiz4u ActiveX of Inogard...

Design/Logic Flaw

AxECM.cabActiveX Control in Inogard Ebiz4u contains a vulnerability that could allow remote files to be downloaded and executed by setting arguments to the activeX method. Download of Code Without Integrity Check vulnerability in ActiveX control of Inogard Co,,LTD Ebiz4u ActiveX of Inogard...

CVE-2020-7804

ActiveX ControlHShell.dll in Handy Groupware 1.7.3.1 for Windows 7, 8, and 10 allows an attacker to execute arbitrary command via the ShellExec method...

CVE-2020-7804

ActiveX ControlHShell.dll in Handy Groupware 1.7.3.1 for Windows 7, 8, and 10 allows an attacker to execute arbitrary command via the ShellExec method...

Design/Logic Flaw

ActiveX ControlHShell.dll in Handy Groupware 1.7.3.1 for Windows 7, 8, and 10 allows an attacker to execute arbitrary command via the ShellExec method...

CVE-2020-7804

ActiveX ControlHShell.dll in Handy Groupware 1.7.3.1 for Windows 7, 8, and 10 allows an attacker to execute arbitrary command via the ShellExec method...

CVE-2019-19165

AxECM.cabActiveX Control in Inogard Ebiz4u contains a vulnerability that could allow remote files to be downloaded and executed by setting arguments to the activeX method. Download of Code Without Integrity Check vulnerability in ActiveX control of Inogard Co,,LTD Ebiz4u ActiveX of Inogard...

CVE-2019-19165

CVE-2019-19165 affects Inogard Ebiz4u AxECM.cab ActiveX control. Connected sources describe a remote code execution risk: by passing arguments to the ActiveX method, an attacker can cause a file to be downloaded to a Windows user’s folder and executed. Affected product: Inogard Ebiz4u ActiveX (Ax...

CVE-2020-7804

ActiveX ControlHShell.dll in Handy Groupware 1.7.3.1 for Windows 7, 8, and 10 allows an attacker to execute arbitrary command via the ShellExec method...

CVE-2020-7804

CVE-2020-7804 affects Handy Groupware 1.7.3.1 on Windows 7/8/10 via ActiveX Control (HShell.dll). The root cause described is an ability for an attacker to execute arbitrary commands through the ShellExec method. No explicit remediation is provided in the supplied materials. Exploitation status a...

CVE-2019-19165: Download of Code Without Integrity Check

AxECM.cabActiveX Control in Inogard Ebiz4u contains a vulnerability that could allow remote files to be downloaded and executed by setting arguments to the activeX method. Download of Code Without Integrity Check vulnerability in ActiveX control of Inogard Co,,LTD Ebiz4u ActiveX of Inogard...

PT-2020-10070

Name of the Vulnerable Software and Affected Versions Inogard Ebiz4u ActiveX versions 1.0.5.0 and later Description The issue allows remote files to be downloaded and executed by setting arguments to the ActiveX method, specifically in the AxECM.cab ActiveX control. This enables an attacker to...

Security Bulletin: SPSS Statistics ActiveX Control Code Execution Vulnerability Notification (CVE-2015-0140)

Summary SPSS Statistics ActiveX control on Windows 32 bit installations could allow a remote attacker to execute arbitrary code on the system. By persuading a victim to visit a specially-crafted Web page with Internet Explorer, a local attacker could exploit this vulnerability to execute arbitrar...

Security Bulletin: IBM SPSS Statistics ActiveX Control Buffer Overflow (CVE-2015-8530)

Summary An IBM SPSS Statistics ActiveX Control is vulnerable to a stack-based buffer overflow. By persuading a victim to visit a specially-crafted Web page that passes an overly long argument to the Initialize function, a remote attacker could overflow a buffer and execute arbitrary code on the...