Filtered by vendor Advantech
Subscribe
Total
281 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2015-6467 | 1 Advantech | 1 Webaccess | 2016-01-20 | 9.3 HIGH | 8.1 HIGH |
| Advantech WebAccess before 8.1 allows remote attackers to execute arbitrary code via vectors involving a browser plugin. | |||||
| CVE-2015-3948 | 1 Advantech | 1 Webaccess | 2016-01-19 | 3.5 LOW | 5.4 MEDIUM |
| Cross-site scripting (XSS) vulnerability in Advantech WebAccess before 8.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. | |||||
| CVE-2015-3947 | 1 Advantech | 1 Webaccess | 2016-01-18 | 6.5 MEDIUM | 8.1 HIGH |
| SQL injection vulnerability in Advantech WebAccess before 8.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. | |||||
| CVE-2015-3946 | 1 Advantech | 1 Webaccess | 2016-01-18 | 6.8 MEDIUM | 8.8 HIGH |
| Cross-site request forgery (CSRF) vulnerability in Advantech WebAccess before 8.1 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. | |||||
| CVE-2015-3943 | 1 Advantech | 1 Webaccess | 2016-01-18 | 5.0 MEDIUM | 5.3 MEDIUM |
| Advantech WebAccess before 8.1 allows remote attackers to read sensitive cleartext information about e-mail project accounts via unspecified vectors. | |||||
| CVE-2015-7938 | 1 Advantech | 4 Eki-1321, Eki-1321 Series Firmware, Eki-1322 and 1 more | 2016-01-18 | 10.0 HIGH | 9.8 CRITICAL |
| Advantech EKI-132x devices with firmware before 2015-12-31 allow remote attackers to bypass authentication via unspecified vectors. | |||||
| CVE-2015-6476 | 1 Advantech | 14 Eki-1221, Eki-1221d, Eki-1222 and 11 more | 2015-11-09 | 10.0 HIGH | N/A |
| Advantech EKI-122x-BE devices with firmware before 1.65, EKI-132x devices with firmware before 1.98, and EKI-136x devices with firmware before 1.27 have hardcoded SSH keys, which makes it easier for remote attackers to obtain access via an SSH session. | |||||
| CVE-2014-9202 | 1 Advantech | 1 Webaccess | 2015-09-29 | 6.9 MEDIUM | N/A |
| Multiple stack-based buffer overflows in an unspecified DLL file in Advantech WebAccess before 8.0_20150816 allow remote attackers to execute arbitrary code via a crafted file that triggers long string arguments to functions. | |||||
| CVE-2014-2364 | 1 Advantech | 1 Advantech Webaccess | 2015-08-11 | 7.5 HIGH | N/A |
| Multiple stack-based buffer overflows in Advantech WebAccess before 7.2 allow remote attackers to execute arbitrary code via a long string in the (1) ProjectName, (2) SetParameter, (3) NodeName, (4) CCDParameter, (5) SetColor, (6) AlarmImage, (7) GetParameter, (8) GetColor, (9) ServerResponse, (10) SetBaud, or (11) IPAddress parameter to an ActiveX control in (a) webvact.ocx, (b) dvs.ocx, or (c) webdact.ocx. | |||||
| CVE-2014-0991 | 1 Advantech | 1 Advantech Webaccess | 2015-08-05 | 6.8 MEDIUM | N/A |
| Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the projectname parameter. | |||||
| CVE-2014-0992 | 1 Advantech | 1 Advantech Webaccess | 2015-08-05 | 6.8 MEDIUM | N/A |
| Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the password parameter. | |||||
| CVE-2014-0989 | 1 Advantech | 1 Advantech Webaccess | 2015-08-05 | 6.8 MEDIUM | N/A |
| Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the AccessCode2 parameter. | |||||
| CVE-2014-0990 | 1 Advantech | 1 Advantech Webaccess | 2015-08-05 | 6.8 MEDIUM | N/A |
| Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the UserName parameter. | |||||
| CVE-2014-0988 | 1 Advantech | 1 Advantech Webaccess | 2015-08-05 | 6.8 MEDIUM | N/A |
| Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the AccessCode parameter. | |||||
| CVE-2014-0987 | 1 Advantech | 1 Advantech Webaccess | 2015-08-05 | 6.8 MEDIUM | N/A |
| Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the NodeName2 parameter. | |||||
| CVE-2014-0986 | 1 Advantech | 1 Advantech Webaccess | 2015-08-05 | 6.8 MEDIUM | N/A |
| Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the GotoCmd parameter. | |||||
| CVE-2014-0985 | 1 Advantech | 1 Advantech Webaccess | 2015-08-05 | 6.8 MEDIUM | N/A |
| Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allows remote attackers to execute arbitrary code via the NodeName parameter. | |||||
| CVE-2014-0763 | 1 Advantech | 1 Advantech Webaccess | 2015-07-24 | 7.5 HIGH | N/A |
| Multiple SQL injection vulnerabilities in DBVisitor.dll in Advantech WebAccess before 7.2 allow remote attackers to execute arbitrary SQL commands via SOAP requests to unspecified functions. | |||||
| CVE-2014-0765 | 1 Advantech | 1 Advantech Webaccess | 2015-07-09 | 7.5 HIGH | N/A |
| Stack-based buffer overflow in Advantech WebAccess before 7.2 allows remote attackers to execute arbitrary code via a long GotoCmd argument. | |||||
| CVE-2014-0766 | 1 Advantech | 1 Advantech Webaccess | 2015-07-09 | 7.5 HIGH | N/A |
| Stack-based buffer overflow in Advantech WebAccess before 7.2 allows remote attackers to execute arbitrary code via a long NodeName2 argument. | |||||