CVE-2015-3948: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Advantech WebAccess before 8.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-0852: Undefined Security Weakness

Advantech WebAccess before 8.1 allows remote attackers to bypass an intended administrative requirement and obtain file or folder access via unspecified vectors...

CVE-2016-0859: Undefined Security Weakness

Integer overflow in the Kernel service in Advantech WebAccess before 8.1 allows remote attackers to execute arbitrary code or cause a denial of service stack-based buffer overflow via a crafted RPC request...

CVE-2016-0855: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Advantech WebAccess before 8.1 allows remote attackers to list arbitrary virtual-directory files via unspecified vectors...

CVE-2015-6467: Undefined Security Weakness

Advantech WebAccess before 8.1 allows remote attackers to execute arbitrary code via vectors involving a browser plugin...

CVE-2016-0857: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple heap-based buffer overflows in Advantech WebAccess before 8.1 allow remote attackers to execute arbitrary code via unspecified vectors...

CVE-2016-0854: Undefined Security Weakness

Unrestricted file upload vulnerability in the uploadImageCommon function in the UploadAjaxAction script in the WebAccess Dashboard Viewer in Advantech WebAccess before 8.1 allows remote attackers to write to files of arbitrary types via unspecified vectors...

CVE-2015-3943: Exposure of Sensitive Information to an Unauthorized Actor

Advantech WebAccess before 8.1 allows remote attackers to read sensitive cleartext information about e-mail project accounts via unspecified vectors...

CVE-2016-0853: Exposure of Sensitive Information to an Unauthorized Actor

Advantech WebAccess before 8.1 allows remote attackers to obtain sensitive information via crafted input...

CVE-2016-0858: Improper Restriction of Operations within the Bounds of a Memory Buffer

Race condition in Advantech WebAccess before 8.1 allows remote attackers to execute arbitrary code or cause a denial of service buffer overflow via a crafted request...

PT-2016-1121

Name of the Vulnerable Software and Affected Versions Advantech WebAccess versions prior to 8.1 Description The issue is related to an unrestricted file upload vulnerability. This vulnerability can be exploited by a remote attacker to modify files of any type. The vulnerability is associated with...

PT-2016-1122

Name of the Vulnerable Software and Affected Versions Advantech WebAccess versions prior to 8.1 Description The issue is caused by multiple stack-based buffer overflows in Advantech WebAccess. Exploitation of these overflows may allow a remote attacker to execute arbitrary code. The overflows occ...

PT-2016-4423

Name of the Vulnerable Software and Affected Versions Advantech WebAccess versions prior to 8.1 Description The issue is related to a race condition that allows remote attackers to execute arbitrary code or cause a denial of service via a crafted request, potentially leading to a buffer overflow...

PT-2016-1123

Name of the Vulnerable Software and Affected Versions Advantech WebAccess versions prior to 8.1 Description The issue is caused by multiple heap-based buffer overflows, allowing remote attackers to execute arbitrary code via unspecified vectors. This can be exploited by a remote attacker to gain...

PT-2016-1124

Name of the Vulnerable Software and Affected Versions Advantech WebAccess versions prior to 8.1 Description The issue is caused by an integer overflow in the Kernel service of Advantech WebAccess. This can be exploited by a remote attacker using a specially crafted RPC request, potentially allowi...

PT-2016-1125

Name of the Vulnerable Software and Affected Versions Advantech WebAccess versions prior to 8.1 Description The issue is caused by a buffer overflow in the BwpAlarm subsystem, allowing remote attackers to cause a denial of service via a crafted RPC request. This can be exploited by sending a...

PT-2016-4419

Name of the Vulnerable Software and Affected Versions Advantech WebAccess versions prior to 8.1 Description The issue allows remote attackers to cause a denial of service due to out-of-bounds memory access. Additionally, there is a remote code execution vulnerability via an uncontrolled format...

PT-2016-4421

Name of the Vulnerable Software and Affected Versions Advantech WebAccess versions prior to 8.1 Description The issue allows remote attackers to obtain sensitive information via crafted input. Recommendations For versions prior to 8.1, update to version 8.1 or later to resolve the issue...

PT-2016-4422

Name of the Vulnerable Software and Affected Versions Advantech WebAccess versions prior to 8.1 Description The issue allows remote attackers to list arbitrary virtual-directory files via unspecified vectors. It also enables directory traversal, which can lead to arbitrary file deletion, denial o...

PT-2016-4420

Name of the Vulnerable Software and Affected Versions Advantech WebAccess versions prior to 8.1 Description The issue allows remote attackers to bypass an intended administrative requirement, which can lead to unauthorized access to files or folders. Recommendations For Advantech WebAccess versio...