CVE-2016-0870

CVE-2016-0870 affects Trane Tracer SC web server (versions 4.2.1134 and earlier). A remote attacker can read sensitive configuration files via a direct request, exposing information from specific directories. NVD assigns CVSSv3 base score 5.3 (Network, Low complexity, No privileges, Confidentiali...

CVE-2016-4526

CVE-2016-4526 affects ABB DataManagerPro (1.x) prior to 1.7.1. The vulnerability arises from an Uncontrolled Search Path Element (CWE-427) that allows an authenticated local user to swap DLLs in the package directory to gain administrator privileges. Exploitation is local and requires user intera...