Lucene search
+L

2704 matches found

Cvelist
Cvelist
added 2021/11/15 2:0 p.m.25 views

CVE-2021-42706 AzeoTech DAQFactory

This vulnerability could allow an attacker to disclose information and execute arbitrary code on affected installations of WebAccess/MHI Designer...

7.8CVSS7.9AI score0.00273EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/11/15 12:0 a.m.8 views

Advantech WebAccess HMI Designer 跨站脚本漏洞

Advantech WebAccess HMI Designer is an integrated HMI development tool from Advantech, Taiwan, China. The product is equipped with features such as data transfer, menu editing and text editing. A cross-site scripting vulnerability exists in Advantech WebAccess HMI Designer versions prior to...

6.1CVSS5.3AI score0.00603EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/11/15 12:0 a.m.9 views

Advantech WebAccess HMI Designer 资源管理错误漏洞

Advantech WebAccess HMI Designer is an integrated HMI development tool from Advantech, Taiwan, China. The product is equipped with features such as data transfer, menu editing and text editing. A resource management error vulnerability exists in Advantech WebAccess HMI Designer versions prior to...

7.8CVSS6.1AI score0.00273EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2021/11/10 12:0 a.m.9 views

The vulnerability of the Advantech WebAccess remote monitoring software arises from buffer overflows in the stack, allowing a hacker to execute arbitrary code.

The vulnerability of Advantech WebAccess remote monitoring software arises due to buffer overflow in the stack. Exploiting this vulnerability allows a malicious actor operating remotely to execute arbitrary code...

10CVSS8.5AI score0.11569EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/11/09 7:12 p.m.4 views

CVE-2021-42706

This vulnerability could allow an attacker to disclose information and execute arbitrary code on affected installations of WebAccess/MHI Designer...

7.8CVSS7.3AI score0.00273EPSS
SaveExploits0References2
NVD
NVD
added 2021/10/27 1:15 a.m.12 views

CVE-2021-32951

WebAccess/NMS Versions prior to v3.0.3Build6299 has an improper authentication vulnerability, which may allow unauthorized users to view resources monitored and controlled by the WebAccess/NMS, as well as IP addresses and names of all the devices managed via WebAccess/NMS...

5.3CVSS0.0089EPSS
SaveExploits0References1
OSV
OSV
added 2021/10/27 1:15 a.m.5 views

CVE-2021-32951

WebAccess/NMS Versions prior to v3.0.3Build6299 has an improper authentication vulnerability, which may allow unauthorized users to view resources monitored and controlled by the WebAccess/NMS, as well as IP addresses and names of all the devices managed via WebAccess/NMS...

5.3CVSS5.8AI score0.0089EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/10/27 12:54 a.m.45 views

CVE-2021-32951 Advantech WebAccess/NMS Improper Authentication

WebAccess/NMS Versions prior to v3.0.3Build6299 has an improper authentication vulnerability, which may allow unauthorized users to view resources monitored and controlled by the WebAccess/NMS, as well as IP addresses and names of all the devices managed via WebAccess/NMS...

5.3CVSS5.7AI score0.0089EPSS
SaveExploits0References1
CVE
CVE
added 2021/10/27 12:54 a.m.59 views

CVE-2021-32951

CVE-2021-32951 affects Advantech WebAccess/NMS versions prior to 3.0.3_Build6299, exposing an improper authentication vulnerability that may allow an unauthenticated attacker to view resources monitored and controlled by WebAccess/NMS, including IP addresses and names of all managed devices. The ...

5.3CVSS5.3AI score0.0089EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2021/10/18 1:15 p.m.15 views

CVE-2021-38389

Advantech WebAccess versions 9.02 and prior are vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute code...

9.8CVSS0.10367EPSS
SaveExploits0References1
OSV
OSV
added 2021/10/18 1:15 p.m.9 views

CVE-2021-38389

Advantech WebAccess versions 9.02 and prior are vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute code...

9.8CVSS6.1AI score0.10367EPSS
SaveExploits0References1
NVD
NVD
added 2021/10/18 1:15 p.m.23 views

CVE-2021-33023

Advantech WebAccess versions 9.02 and prior are vulnerable to a heap-based buffer overflow, which may allow an attacker to remotely execute code...

9.8CVSS0.02206EPSS
SaveExploits0References1
OSV
OSV
added 2021/10/18 1:15 p.m.8 views

CVE-2021-33023

Advantech WebAccess versions 9.02 and prior are vulnerable to a heap-based buffer overflow, which may allow an attacker to remotely execute code...

9.8CVSS6AI score0.02206EPSS
SaveExploits0References1
Prion
Prion
added 2021/10/18 1:15 p.m.27 views

Stack overflow

Advantech WebAccess versions 9.02 and prior are vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute code...

7.5CVSS9.5AI score0.10367EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2021/10/18 1:15 p.m.23 views

Heap overflow

Advantech WebAccess versions 9.02 and prior are vulnerable to a heap-based buffer overflow, which may allow an attacker to remotely execute code...

7.5CVSS9.5AI score0.02206EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2021/10/18 12:41 p.m.65 views

CVE-2021-38389

This CVE affects Advantech WebAccess (versions 9.02 and earlier). A stack-based buffer overflow vulnerability exists in the handling of IOCTL 0x1138B, allowing remote code execution with no authentication required. ZDI reports that the flaw can be exploited by remote attackers to execute code in ...

9.8CVSS9.6AI score0.10367EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/10/18 12:41 p.m.34 views

CVE-2021-38389 Advantech WebAccess

Advantech WebAccess versions 9.02 and prior are vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute code...

9.8CVSS9.7AI score0.10367EPSS
SaveExploits0References1
CVE
CVE
added 2021/10/18 12:41 p.m.66 views

CVE-2021-33023

Advantech WebAccess (HMI/SCADA) is affected by CVE-2021-33023: a heap-based buffer overflow in handling IOCTL 0x2722 can enable remote code execution. Affected products are WebAccess versions 9.02 and earlier. The vulnerability allows code execution with high privileges and requires no authentica...

9.8CVSS9.6AI score0.02206EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/10/18 12:41 p.m.37 views

CVE-2021-33023 Advantech WebAccess

Advantech WebAccess versions 9.02 and prior are vulnerable to a heap-based buffer overflow, which may allow an attacker to remotely execute code...

9.8CVSS9.7AI score0.02206EPSS
SaveExploits0References1
OSV
OSV
added 2021/10/15 1:15 p.m.3 views

CVE-2021-38431

An authenticated user using Advantech WebAccess SCADA in versions 9.0.3 and prior can use API functions to disclose project names and paths from other users...

4.3CVSS5.7AI score
SaveExploits0References1
Rows per page
Query Builder