Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
AdvantechAdvantech Webaccess

12 matches found

CVE
CVE•added 2014/04/12 4:37 a.m.•89 views

CVE-2014-0763

Multiple SQL injection vulnerabilities in DBVisitor.dll in Advantech WebAccess before 7.2 allow remote attackers to execute arbitrary SQL commands via SOAP requests to unspecified functions.

7.5CVSS8.6AI score0.31747EPSS
CVE
CVE•added 2014/04/12 4:37 a.m.•65 views

CVE-2014-0764

Stack-based buffer overflow in Advantech WebAccess before 7.2 allows remote attackers to execute arbitrary code via a long NodeName parameter.

7.5CVSS8AI score0.01493EPSS
CVE
CVE•added 2014/04/12 4:37 a.m.•59 views

CVE-2014-0767

Stack-based buffer overflow in Advantech WebAccess before 7.2 allows remote attackers to execute arbitrary code via a long AccessCode argument.

7.5CVSS8AI score0.01493EPSS
CVE
CVE•added 2014/04/12 4:37 a.m.•58 views

CVE-2014-0766

Stack-based buffer overflow in Advantech WebAccess before 7.2 allows remote attackers to execute arbitrary code via a long NodeName2 argument.

7.5CVSS8AI score0.01493EPSS
CVE
CVE•added 2014/04/12 4:37 a.m.•55 views

CVE-2014-0765

Stack-based buffer overflow in Advantech WebAccess before 7.2 allows remote attackers to execute arbitrary code via a long GotoCmd argument.

7.5CVSS8AI score0.01493EPSS
CVE
CVE•added 2014/04/12 4:37 a.m.•55 views

CVE-2014-0770

Stack-based buffer overflow in Advantech WebAccess before 7.2 allows remote attackers to execute arbitrary code via a long UserName parameter.

7.5CVSS8AI score0.00917EPSS
CVE
CVE•added 2014/04/12 4:37 a.m.•55 views

CVE-2014-0773

The CreateProcess method in the BWOCXRUN.BwocxrunCtrl.1 ActiveX control in bwocxrun.ocx in Advantech WebAccess before 7.2 allows remote attackers to execute (1) setup.exe, (2) bwvbprt.exe, and (3) bwvbprtl.exe programs from arbitrary pathnames via a crafted argument, as demonstrated by a UNC share ...

7.5CVSS6.9AI score0.00239EPSS
CVE
CVE•added 2014/07/19 5:9 a.m.•55 views

CVE-2014-2364

Multiple stack-based buffer overflows in Advantech WebAccess before 7.2 allow remote attackers to execute arbitrary code via a long string in the (1) ProjectName, (2) SetParameter, (3) NodeName, (4) CCDParameter, (5) SetColor, (6) AlarmImage, (7) GetParameter, (8) GetColor, (9) ServerResponse, (10)...

7.5CVSS7.6AI score0.39104EPSS
CVE
CVE•added 2014/04/12 4:37 a.m.•54 views

CVE-2014-0768

Stack-based buffer overflow in Advantech WebAccess before 7.2 allows remote attackers to execute arbitrary code via a long AccessCode2 argument.

7.5CVSS8AI score0.01493EPSS
CVE
CVE•added 2012/02/21 1:31 p.m.•51 views

CVE-2012-0234

SQL injection vulnerability in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to execute arbitrary SQL commands via a malformed URL.

7.5CVSS8.4AI score0.00163EPSS
CVE
CVE•added 2012/02/21 1:31 p.m.•48 views

CVE-2011-4521

SQL injection vulnerability in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to execute arbitrary SQL commands via crafted string input.

7.5CVSS8.6AI score0.00163EPSS
CVE
CVE•added 2012/02/21 1:31 p.m.•45 views

CVE-2012-0244

Multiple SQL injection vulnerabilities in Advantech/BroadWin WebAccess before 7.0 allow remote attackers to execute arbitrary SQL commands via crafted string input.

7.5CVSS8.7AI score0.00163EPSS