Page 8 of 93 results (0.009 seconds)

CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 0

CVE-2016-5817

https://notcve.org/view.php?id=CVE-2016-5817

22 Aug 2016 — SQL injection vulnerability in news pages in Cargotec Navis WebAccess before 2016-08-10 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Vulnerabilidad de inyección SQL en páginas de noticias en Cargotec Navis WebAccess en versiones anteriores a 2016-08-10 permite a atacantes remotos ejecutar comandos SQL arbitrarios a través de vectores no especificados. • https://ics-cert.us-cert.gov/advisories/ICSA-16-231-01 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •

CVSS: 6.8EPSS: 25%CPEs: 1EXPL: 1

CVE-2016-5810 – Advantech WebAccess upAdminPg Information Disclosure Vulnerability

https://notcve.org/view.php?id=CVE-2016-5810

18 Jul 2016 — upAdminPg.asp in Advantech WebAccess before 8.1_20160519 allows remote authenticated administrators to obtain sensitive password information via unspecified vectors. UpAdminPg.asp en Advantech WebAccess versiones anteriores a 8.1_20160519 permite a los administradores autenticados remotos obtener información sensible de contraseñas a través de vectores no especificados. This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Advantech WebAccess. Authentica... • https://packetstorm.news/files/id/180697 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 6.6EPSS: 0%CPEs: 1EXPL: 0

CVE-2016-4525

https://notcve.org/view.php?id=CVE-2016-4525

25 Jun 2016 — Unspecified ActiveX controls in Advantech WebAccess before 8.1_20160519 allow remote authenticated users to obtain sensitive information or modify data via unknown vectors, related to the INTERFACESAFE_FOR_UNTRUSTED_CALLER (aka safe for scripting) flag. Controles ActiveX no especificados en Advantech WebAccess en versiones anteriores a 8.1_20160519 permiten a usuarios remotos autenticados obtener información sensible o modificar datos a través de vectores desconocidos, relacionado con el indicador INTERFACE... • https://ics-cert.us-cert.gov/advisories/ICSA-16-173-01 •

CVSS: 5.0EPSS: 0%CPEs: 1EXPL: 0

CVE-2016-4528

https://notcve.org/view.php?id=CVE-2016-4528

25 Jun 2016 — Buffer overflow in Advantech WebAccess before 8.1_20160519 allows local users to cause a denial of service via a crafted DLL file. Desbordamiento de buffer en Advantech WebAccess en versiones anteriores a 8.1_20160519 permite a usuarios locales provocar una denegación de servicio a través de un archivo DLL manipulado. • https://ics-cert.us-cert.gov/advisories/ICSA-16-173-01 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 9.3EPSS: 1%CPEs: 1EXPL: 0

CVE-2016-0858 – Advantech WebAccess datacore Service datacore.exe strcpy Shared Virtual Memory Overflow Remote Code Execution Vulnerability

https://notcve.org/view.php?id=CVE-2016-0858

15 Jan 2016 — Race condition in Advantech WebAccess before 8.1 allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow) via a crafted request. Condición de carrera en Advantech WebAccess en versiones anteriores a 8.1 permite a atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (desbordamiento de buffer) a través de una petición manipulada. This vulnerability allows remote attackers to execute arbitrary code on vulnerable instances of Advantech WebAcces... • http://www.zerodayinitiative.com/advisories/ZDI-16-105 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') •

CVSS: 10.0EPSS: 1%CPEs: 1EXPL: 0

CVE-2016-0859 – Advantech WebAccess datacore Service datacore.exe ExtDataSize Integer Overflow Remote Code Execution Vulnerability

https://notcve.org/view.php?id=CVE-2016-0859

15 Jan 2016 — Integer overflow in the Kernel service in Advantech WebAccess before 8.1 allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow) via a crafted RPC request. Desbordamiento de entero en el servicio Kernel en Advantech WebAccess en versiones anteriores a 8.1 permite a atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (desbordamiento de buffer basado en pila) a través de una petición RPC manipulada. This vulnerability allows rem... • http://www.zerodayinitiative.com/advisories/ZDI-16-104 • CWE-189: Numeric Errors •

CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 0

CVE-2015-3946

https://notcve.org/view.php?id=CVE-2015-3946

15 Jan 2016 — Cross-site request forgery (CSRF) vulnerability in Advantech WebAccess before 8.1 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. Vulnerabilidad de CSRF en Advantech WebAccess en versiones anteriores a 8.1 permite a atacantes remotos secuestrar la autenticación de víctimas no especificadas a través de vectores desconocidos. • https://ics-cert.us-cert.gov/advisories/ICSA-16-014-01 • CWE-352: Cross-Site Request Forgery (CSRF) •

CVSS: 9.3EPSS: 0%CPEs: 1EXPL: 0

CVE-2015-6467

https://notcve.org/view.php?id=CVE-2015-6467

15 Jan 2016 — Advantech WebAccess before 8.1 allows remote attackers to execute arbitrary code via vectors involving a browser plugin. Advantech WebAccess en versiones anteriores a 8.1 permite a atacantes remotos ejecutar código arbitrario a través de vectores involucrados con un plugin del navegador. • https://ics-cert.us-cert.gov/advisories/ICSA-16-014-01 •

CVSS: 7.8EPSS: 3%CPEs: 1EXPL: 0

CVE-2016-0855 – Advantech WebAccess Dashboard Viewer openWidget Directory Traversal Information Disclosure Vulnerability

https://notcve.org/view.php?id=CVE-2016-0855

15 Jan 2016 — Directory traversal vulnerability in Advantech WebAccess before 8.1 allows remote attackers to list arbitrary virtual-directory files via unspecified vectors. Vulnerabilidad de salto de directorio en Advantech WebAccess en versiones anteriores a 8.1 permite a atacantes remotos listar archivos virtuales del directorio virtual a través de vectores no especificados. This vulnerability allows remote attackers to disclose arbitrary file contents on vulnerable installations of Advantech WebAccess. Authentication ... • http://www.zerodayinitiative.com/advisories/ZDI-16-122 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •

CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0

CVE-2016-0852

https://notcve.org/view.php?id=CVE-2016-0852

15 Jan 2016 — Advantech WebAccess before 8.1 allows remote attackers to bypass an intended administrative requirement and obtain file or folder access via unspecified vectors. Advantech WebAccess en versiones anteriores a 8.1 permite a atacantes remotos eludir un requerimiento destinado a la administración y obtener acceso a archivos o carpetas a través de vectores no especificados. • https://ics-cert.us-cert.gov/advisories/ICSA-16-014-01 • CWE-264: Permissions, Privileges, and Access Controls •