Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
AdvantechAdvantech Webaccess7.0

15 matches found

CVE
CVE•added 2014/04/12 4:37 a.m.•130 views

CVE-2014-0772

The OpenUrlToBufferTimeout method in the BWOCXRUN.BwocxrunCtrl.1 ActiveX control in bwocxrun.ocx in Advantech WebAccess before 7.2 allows remote attackers to read arbitrary files via a file: URL.

5CVSS6.5AI score0.00183EPSS
CVE
CVE•added 2014/04/12 4:37 a.m.•88 views

CVE-2014-0763

Multiple SQL injection vulnerabilities in DBVisitor.dll in Advantech WebAccess before 7.2 allow remote attackers to execute arbitrary SQL commands via SOAP requests to unspecified functions.

7.5CVSS8.6AI score0.31747EPSS
CVE
CVE•added 2014/04/12 4:37 a.m.•64 views

CVE-2014-0764

Stack-based buffer overflow in Advantech WebAccess before 7.2 allows remote attackers to execute arbitrary code via a long NodeName parameter.

7.5CVSS8AI score0.01493EPSS
CVE
CVE•added 2014/07/19 5:9 a.m.•61 views

CVE-2014-2367

The ChkCookie subroutine in an ActiveX control in broadweb/include/gChkCook.asp in Advantech WebAccess before 7.2 allows remote attackers to read arbitrary files via a crafted call.

4.3CVSS6.7AI score0.00313EPSS
CVE
CVE•added 2014/04/12 4:37 a.m.•60 views

CVE-2014-0771

The OpenUrlToBuffer method in the BWOCXRUN.BwocxrunCtrl.1 ActiveX control in bwocxrun.ocx in Advantech WebAccess before 7.2 allows remote attackers to read arbitrary files via a file: URL.

5CVSS6.5AI score0.00183EPSS
CVE
CVE•added 2014/04/12 4:37 a.m.•58 views

CVE-2014-0767

Stack-based buffer overflow in Advantech WebAccess before 7.2 allows remote attackers to execute arbitrary code via a long AccessCode argument.

7.5CVSS8AI score0.01493EPSS
CVE
CVE•added 2014/04/12 4:37 a.m.•57 views

CVE-2014-0766

Stack-based buffer overflow in Advantech WebAccess before 7.2 allows remote attackers to execute arbitrary code via a long NodeName2 argument.

7.5CVSS8AI score0.01493EPSS
CVE
CVE•added 2014/07/19 5:9 a.m.•55 views

CVE-2014-2368

The BrowseFolder method in the bwocxrun ActiveX control in Advantech WebAccess before 7.2 allows remote attackers to read arbitrary files via a crafted call.

5CVSS6.7AI score0.00289EPSS
CVE
CVE•added 2014/04/12 4:37 a.m.•54 views

CVE-2014-0765

Stack-based buffer overflow in Advantech WebAccess before 7.2 allows remote attackers to execute arbitrary code via a long GotoCmd argument.

7.5CVSS8AI score0.01493EPSS
CVE
CVE•added 2014/04/12 4:37 a.m.•54 views

CVE-2014-0773

The CreateProcess method in the BWOCXRUN.BwocxrunCtrl.1 ActiveX control in bwocxrun.ocx in Advantech WebAccess before 7.2 allows remote attackers to execute (1) setup.exe, (2) bwvbprt.exe, and (3) bwvbprtl.exe programs from arbitrary pathnames via a crafted argument, as demonstrated by a UNC share ...

7.5CVSS6.9AI score0.00239EPSS
CVE
CVE•added 2014/07/19 5:9 a.m.•54 views

CVE-2014-2364

Multiple stack-based buffer overflows in Advantech WebAccess before 7.2 allow remote attackers to execute arbitrary code via a long string in the (1) ProjectName, (2) SetParameter, (3) NodeName, (4) CCDParameter, (5) SetColor, (6) AlarmImage, (7) GetParameter, (8) GetColor, (9) ServerResponse, (10)...

7.5CVSS7.6AI score0.39104EPSS
CVE
CVE•added 2014/04/12 4:37 a.m.•53 views

CVE-2014-0768

Stack-based buffer overflow in Advantech WebAccess before 7.2 allows remote attackers to execute arbitrary code via a long AccessCode2 argument.

7.5CVSS8AI score0.01493EPSS
CVE
CVE•added 2014/04/12 4:37 a.m.•53 views

CVE-2014-0770

Stack-based buffer overflow in Advantech WebAccess before 7.2 allows remote attackers to execute arbitrary code via a long UserName parameter.

7.5CVSS8AI score0.00917EPSS
CVE
CVE•added 2014/07/19 5:9 a.m.•50 views

CVE-2014-2366

upAdminPg.asp in Advantech WebAccess before 7.2 allows remote authenticated users to discover credentials by reading HTML source code.

4CVSS6.2AI score0.00246EPSS
CVE
CVE•added 2014/07/19 5:9 a.m.•45 views

CVE-2014-2365

Unspecified vulnerability in Advantech WebAccess before 7.2 allows remote authenticated users to create or delete arbitrary files via unknown vectors.

5.5CVSS6.4AI score0.00275EPSS