16 matches found
EUVD-2015-0998
Malware in sbrugna...
CVE-2012-4700
Multiple buffer overflows in an ActiveX control in PE3DO32A.ocx in IntegraXor SCADA Server 4.00 build 4250.0 and earlier allow remote attackers to execute arbitrary code via a crafted HTML document...
PT-2015-5008
Name of the Vulnerable Software and Affected Versions Ecava IntegraXor SCADA Server versions prior to 4.2.4488 Description The issue allows local users to gain privileges via a renamed DLL in the default install directory due to an untrusted search path vulnerability. Recommendations For versions...
CVE-2015-0990: Undefined Security Weakness
Untrusted search path vulnerability in Ecava IntegraXor SCADA Server before 4.2.4488 allows local users to gain privileges via a renamed DLL in the default install directory...
Code injection
Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remote attackers to discover full pathnames via an application tag...
PT-2014-4663
Name of the Vulnerable Software and Affected Versions Ecava IntegraXor SCADA Server versions 4.1.4360 and earlier Ecava IntegraXor SCADA Server Beta versions 4.1.4392 and earlier Description The issue allows remote attackers to discover full pathnames via an application tag. Recommendations For...
PT-2014-4661
Name of the Vulnerable Software and Affected Versions Ecava IntegraXor SCADA Server versions 4.1.4360 and earlier Ecava IntegraXor SCADA Server Beta versions 4.1.4392 and earlier Description The issue allows remote attackers to read or write to arbitrary files, and obtain sensitive information or...
PT-2014-4662
Name of the Vulnerable Software and Affected Versions Ecava IntegraXor SCADA Server versions 4.1.4360 and earlier Ecava IntegraXor SCADA Server Beta versions 4.1.4392 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. Recommendations For Ecava IntegraXor...
CVE-2014-2375: External Control of File Name or Path
Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remote attackers to read or write to arbitrary files, and obtain sensitive information or cause a denial of service disk consumption, via the CSV export feature...
CVE-2014-2376: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2014-2377: Cleartext Storage of Sensitive Information in an Environment Variable
Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remote attackers to discover full pathnames via an application tag...
CVE-2012-4700
Multiple buffer overflows in an ActiveX control in PE3DO32A.ocx in IntegraXor SCADA Server 4.00 build 4250.0 and earlier allow remote attackers to execute arbitrary code via a crafted HTML document...
Buffer overflow
Multiple buffer overflows in an ActiveX control in PE3DO32A.ocx in IntegraXor SCADA Server 4.00 build 4250.0 and earlier allow remote attackers to execute arbitrary code via a crafted HTML document...
CVE-2012-4700
CVE-2012-4700: A buffer overflow in the PE3DO32A.ocx ActiveX control of IntegraXor SCADA Server (version 4.00 build 4250.0 and earlier) allows remote code execution via a crafted HTML page. The vulnerability originates in buffer overflows within the ActiveX component, with CVSS v2 base score 9.3 ...
PT-2013-1699
Name of the Vulnerable Software and Affected Versions IntegraXor SCADA Server versions 4.00 build 4250.0 and earlier Description The issue is related to multiple buffer overflows in an ActiveX control. This allows remote attackers to execute arbitrary code via a crafted HTML document...
CVE-2012-4700: Improper Restriction of Operations within the Bounds of a Memory Buffer
Multiple buffer overflows in an ActiveX control in PE3DO32A.ocx in IntegraXor SCADA Server 4.00 build 4250.0 and earlier allow remote attackers to execute arbitrary code via a crafted HTML document...