EUVD-2015-0998

Malware in sbrugna...

CVE-2015-0990: Undefined Security Weakness

Untrusted search path vulnerability in Ecava IntegraXor SCADA Server before 4.2.4488 allows local users to gain privileges via a renamed DLL in the default install directory...

PT-2015-5008

Name of the Vulnerable Software and Affected Versions Ecava IntegraXor SCADA Server versions prior to 4.2.4488 Description The issue allows local users to gain privileges via a renamed DLL in the default install directory due to an untrusted search path vulnerability. Recommendations For versions...

Code injection

Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remote attackers to discover full pathnames via an application tag...

PT-2014-4663

Name of the Vulnerable Software and Affected Versions Ecava IntegraXor SCADA Server versions 4.1.4360 and earlier Ecava IntegraXor SCADA Server Beta versions 4.1.4392 and earlier Description The issue allows remote attackers to discover full pathnames via an application tag. Recommendations For...

PT-2014-4662

Name of the Vulnerable Software and Affected Versions Ecava IntegraXor SCADA Server versions 4.1.4360 and earlier Ecava IntegraXor SCADA Server Beta versions 4.1.4392 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. Recommendations For Ecava IntegraXor...

CVE-2014-2376: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-2375: External Control of File Name or Path

Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remote attackers to read or write to arbitrary files, and obtain sensitive information or cause a denial of service disk consumption, via the CSV export feature...

CVE-2014-2377: Cleartext Storage of Sensitive Information in an Environment Variable

Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remote attackers to discover full pathnames via an application tag...

PT-2014-4661

Name of the Vulnerable Software and Affected Versions Ecava IntegraXor SCADA Server versions 4.1.4360 and earlier Ecava IntegraXor SCADA Server Beta versions 4.1.4392 and earlier Description The issue allows remote attackers to read or write to arbitrary files, and obtain sensitive information or...