TOBESOFT Nexacro14/17 ExtCommonApiV13 Library Input Validation Error Vulnerability

Tobesoft Nexacro is an OSMU Single Source Multipurpose application development solution based on a unified framework. An input validation error vulnerability exists in TOBESOFT Nexacro 14/17 ExtCommonApiV13 Library versions prior to 2019.9.6, which allows a remote attacker to execute arbitrary co...

TOBESOFT Nexacro14/17 ExtCommonApiV13 Library Input Validation Error Vulnerability (CNVD-2021-18237)

Tobesoft Nexacro is an OSMU Single Source Multipurpose application development solution based on a unified framework. An input validation error vulnerability exists in TOBESOFT Nexacro 14/17 ExtCommonApiV13 Library versions prior to 2019.9.6, which allows remote attackers to exploit the...

CVE-2020-7821

Nexacro14/17 ExtCommonApiV13 Library under 2019.9.6 version contain a vulnerability that could allow remote attacker to execute arbitrary code by modifying the value of registry path. This can be leveraged for code execution by rebooting the victim’s PC...

CVE-2020-7820

Nexacro14/17 ExtCommonApiV13 Library under 2019.9.6 version contain a vulnerability that could allow remote attacker to execute arbitrary code by setting the arguments to the vulnerable API. This can be leveraged for code execution by rebooting the victim’s PC...

CVE-2020-7821

Nexacro14/17 ExtCommonApiV13 Library under 2019.9.6 version contain a vulnerability that could allow remote attacker to execute arbitrary code by modifying the value of registry path. This can be leveraged for code execution by rebooting the victim’s PC...

CVE-2020-7820

Nexacro14/17 ExtCommonApiV13 Library under 2019.9.6 version contain a vulnerability that could allow remote attacker to execute arbitrary code by setting the arguments to the vulnerable API. This can be leveraged for code execution by rebooting the victim’s PC...

Tobesoft Nexacro Code Execution Vulnerability

Tobesoft Nexacro is a unified framework based OSMU single-source multi-purpose application development solution from Tobesoft Korea. A security vulnerability exists in Tobesoft Nexacro 2019.9.25.1 and earlier versions. A remote attacker can exploit the vulnerability to execute code...

CVE-2019-19167

Tobesoft Nexacro v2019.9.25.1 and earlier version have an arbitrary code execution vulnerability by using method supported by Nexacro14 ActiveX Control. It allows attacker to cause remote code execution...

CVE-2019-19167

Tobesoft Nexacro v2019.9.25.1 and earlier version have an arbitrary code execution vulnerability by using method supported by Nexacro14 ActiveX Control. It allows attacker to cause remote code execution...

Remote code execution

Tobesoft Nexacro v2019.9.25.1 and earlier version have an arbitrary code execution vulnerability by using method supported by Nexacro14 ActiveX Control. It allows attacker to cause remote code execution...

CVE-2019-19167

CVE-2019-19167 affects Tobesoft Nexacro v2019.9.25.1 and earlier. The vulnerability is an arbitrary code execution flaw that can be triggered by using a method supported by the Nexacro14 ActiveX Control, enabling remote code execution. Affected component is Nexacro14 ActiveX within Nexacro, with ...

PT-2020-10072

Name of the Vulnerable Software and Affected Versions Tobesoft Nexacro versions 2019.9.25.1 and earlier Description The issue allows for arbitrary code execution by utilizing a method supported by the Nexacro14 ActiveX Control, enabling an attacker to cause remote code execution. Recommendations...

CVE-2019-19167: Download of Code Without Integrity Check

Tobesoft Nexacro v2019.9.25.1 and earlier version have an arbitrary code execution vulnerability by using method supported by Nexacro14 ActiveX Control. It allows attacker to cause remote code execution...