11682 matches found
CVE-2020-7866
When using XPLATFORM 9.2.2.270 or earlier versions ActiveX component, arbitrary commands can be executed due to improper input validation...
CVE-2020-7866
When using XPLATFORM 9.2.2.270 or earlier versions ActiveX component, arbitrary commands can be executed due to improper input validation...
CVE-2020-7866
When using XPLATFORM 9.2.2.270 or earlier versions ActiveX component, arbitrary commands can be executed due to improper input validation...
Input validation
When using XPLATFORM 9.2.2.270 or earlier versions ActiveX component, arbitrary commands can be executed due to improper input validation...
CVE-2020-7866
CVE-2020-7866 affects XPLATFORM 9.2.2.270 and earlier, where an ActiveX component allows arbitrary command execution due to improper input validation. The vulnerability can be triggered remotely over the network with low attack complexity and no authentication, leading to high-severity impact on ...
CVE-2020-7866 Tobesoft XPLATFORM Arbitrary Command Execution Vulnerability
When using XPLATFORM 9.2.2.270 or earlier versions ActiveX component, arbitrary commands can be executed due to improper input validation...
CVE-2020-7866: Improper Input Validation
When using XPLATFORM 9.2.2.270 or earlier versions ActiveX component, arbitrary commands can be executed due to improper input validation...
PT-2021-12687
Name of the Vulnerable Software and Affected Versions: XPLATFORM versions 9.2.2.270 and earlier Description: The issue allows for the execution of arbitrary commands due to improper input validation in the ActiveX component. Recommendations: For XPLATFORM versions 9.2.2.270 and earlier, at the...
CVE-2021-26419
Scripting Engine Memory Corruption Vulnerability...
CVE-2021-28185
The specific function in ASUS BMC’s firmware Web management page ActiveX configuration-1 acquisition does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate t...
CVE-2021-28185 ASUS BMC's firmware: buffer overflow - ActiveX configuration-1 acquisition
The specific function in ASUS BMC’s firmware Web management page ActiveX configuration-1 acquisition does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate t...
CVE-2021-28185
The specific function in ASUS BMC’s firmware Web management page ActiveX configuration-1 acquisition does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate t...
PT-2021-17802
Name of the Vulnerable Software and Affected Versions: ASUS BMC firmware affected versions not specified Description: The issue arises from a specific function in the ASUS BMC's firmware Web management page, specifically in the ActiveX configuration-2 acquisition, which fails to verify the string...
The vulnerability of the ActiveX Installer Service on the Windows operating system, which allows a hacker to increase their privileges
The vulnerability of the ActiveX Installer Service component in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...
CVE-2020-7850
NBBDownloader.ocx ActiveX Control in Groupware contains a vulnerability that could allow remote files to be downloaded and executed by setting the arguments to the activex method. A remote attacker could induce a user to access a crafted web page, causing damage such as malicious code infection...
CVE-2020-7850
NBBDownloader.ocx ActiveX Control in Groupware contains a vulnerability that could allow remote files to be downloaded and executed by setting the arguments to the activex method. A remote attacker could induce a user to access a crafted web page, causing damage such as malicious code infection...
Design/Logic Flaw
NBBDownloader.ocx ActiveX Control in Groupware contains a vulnerability that could allow remote files to be downloaded and executed by setting the arguments to the activex method. A remote attacker could induce a user to access a crafted web page, causing damage such as malicious code infection...
CVE-2020-7850
NBBDownloader.ocx ActiveX Control in Groupware contains a vulnerability that could allow remote files to be downloaded and executed by setting the arguments to the activex method. A remote attacker could induce a user to access a crafted web page, causing damage such as malicious code infection...
CVE-2020-7850
The CVE-2020-7850 entry concerns the NBBDownloader.ocx ActiveX control in Groupware. Descriptions across sources indicate a vulnerability that allows remote files to be downloaded and executed by manipulating arguments to the ActiveX method, enabling a remote attacker to lure a user to a crafted ...
CVE-2020-7850 Douzone ActiveX File Download and Execution Vulnerability
NBBDownloader.ocx ActiveX Control in Groupware contains a vulnerability that could allow remote files to be downloaded and executed by setting the arguments to the activex method. A remote attacker could induce a user to access a crafted web page, causing damage such as malicious code infection...