Show filters
211 Total Results
Displaying 181-190 of 211
Sort by:
Attacker Value
Unknown
CVE-2014-0772
Disclosure Date: April 12, 2014 (last updated October 05, 2023)
The OpenUrlToBufferTimeout method in the BWOCXRUN.BwocxrunCtrl.1 ActiveX control in bwocxrun.ocx in Advantech WebAccess before 7.2 allows remote attackers to read arbitrary files via a file: URL.
0
Attacker Value
Unknown
CVE-2014-0773
Disclosure Date: April 12, 2014 (last updated October 05, 2023)
The CreateProcess method in the BWOCXRUN.BwocxrunCtrl.1 ActiveX control in bwocxrun.ocx in Advantech WebAccess before 7.2 allows remote attackers to execute (1) setup.exe, (2) bwvbprt.exe, and (3) bwvbprtl.exe programs from arbitrary pathnames via a crafted argument, as demonstrated by a UNC share pathname.
0
Attacker Value
Unknown
CVE-2013-2299
Disclosure Date: August 22, 2013 (last updated October 05, 2023)
Cross-site scripting (XSS) vulnerability in Advantech WebAccess (formerly BroadWin WebAccess) before 7.1 2013.05.30 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
0
Attacker Value
Unknown
CVE-2012-0236
Disclosure Date: February 21, 2012 (last updated October 04, 2023)
Advantech/BroadWin WebAccess 7.0 and earlier allows remote attackers to obtain sensitive information via a direct request to a URL. NOTE: the vendor reportedly "does not consider it to be a security risk."
0
Attacker Value
Unknown
CVE-2012-0235
Disclosure Date: February 21, 2012 (last updated October 04, 2023)
Cross-site request forgery (CSRF) vulnerability in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
0
Attacker Value
Unknown
CVE-2012-0242
Disclosure Date: February 21, 2012 (last updated October 04, 2023)
Format string vulnerability in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to execute arbitrary code via format string specifiers in a message string.
0
Attacker Value
Unknown
CVE-2011-4526
Disclosure Date: February 21, 2012 (last updated October 04, 2023)
Buffer overflow in an ActiveX control in Advantech/BroadWin WebAccess before 7.0 might allow remote attackers to execute arbitrary code via a long string value in unspecified parameters.
0
Attacker Value
Unknown
CVE-2011-4522
Disclosure Date: February 21, 2012 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in bwerrdn.asp in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.
0
Attacker Value
Unknown
CVE-2012-0238
Disclosure Date: February 21, 2012 (last updated October 04, 2023)
Stack-based buffer overflow in opcImg.asp in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to execute arbitrary code via unspecified vectors.
0
Attacker Value
Unknown
CVE-2012-0239
Disclosure Date: February 21, 2012 (last updated October 04, 2023)
uaddUpAdmin.asp in Advantech/BroadWin WebAccess before 7.0 does not properly perform authentication, which allows remote attackers to modify an administrative password via a password-change request.
0
