Show filters
211 Total Results
Displaying 201-210 of 211
Sort by:
Attacker Value
Unknown
CVE-2012-0243
Disclosure Date: February 21, 2012 (last updated October 04, 2023)
Buffer overflow in an ActiveX control in bwocxrun.ocx in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to execute arbitrary code by leveraging the ability to write arbitrary content to any pathname.
0
Attacker Value
Unknown
CVE-2012-0234
Disclosure Date: February 21, 2012 (last updated October 04, 2023)
SQL injection vulnerability in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to execute arbitrary SQL commands via a malformed URL.
0
Attacker Value
Unknown
CVE-2012-0241
Disclosure Date: February 21, 2012 (last updated October 04, 2023)
Advantech/BroadWin WebAccess before 7.0 allows remote attackers to cause a denial of service (memory corruption) via a modified stream identifier to a function.
0
Attacker Value
Unknown
CVE-2011-4041
Disclosure Date: February 06, 2012 (last updated October 04, 2023)
webvrpcs.exe in Advantech/BroadWin WebAccess allows remote attackers to execute arbitrary code or obtain a security-code value via a long string in an RPC request to TCP port 4592.
0
Attacker Value
Unknown
CVE-2007-4557
Disclosure Date: August 28, 2007 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in the webacc servlet in Novell GroupWise 6.5 WebAccess allows remote attackers to inject arbitrary web script or HTML via the User.Id parameter, as demonstrated by a URL within a url field in a STYLE element, possibly due to an incomplete fix for CVE-2004-2103.2.
0
Attacker Value
Unknown
CVE-2006-4220
Disclosure Date: December 31, 2006 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in webacc in Novell GroupWise WebAccess before 7 Support Pack 3 Public Beta allow remote attackers to inject arbitrary web script or HTML via the (1) User.html, (2) Error, (3) User.Theme.index, and (4) and User.lang parameters.
0
Attacker Value
Unknown
CVE-2006-3818
Disclosure Date: August 11, 2006 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in the login page in Novell GroupWise WebAccess 6.5 before 20060721 and WebAccess 7 before 20060727 allows remote attackers to inject arbitrary web script or HTML via the GWAP.version parameter.
0
Attacker Value
Unknown
CVE-2006-3817
Disclosure Date: August 11, 2006 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in Novell GroupWise WebAccess 6.5 and 7 before 20060727 allows remote attackers to inject arbitrary web script or HTML via an encoded SCRIPT element in an e-mail message with the UTF-7 character set, as demonstrated by the "+ADw-SCRIPT+AD4-" sequence.
0
Attacker Value
Unknown
CVE-2005-2276
Disclosure Date: July 26, 2005 (last updated February 22, 2025)
Cross-site scripting (XSS) vulnerability in Novell Groupwise WebAccess 6.5 before July 11, 2005 allows remote attackers to inject arbitrary web script or HTML via an e-mail message with an encoded javascript URI (e.g. "jAvascript" in an IMG tag.
0
Attacker Value
Unknown
CVE-2005-0296
Disclosure Date: January 17, 2005 (last updated February 22, 2025)
NOTE: this issue has been disputed by the vendor. The error module in Novell GroupWise WebAccess allows remote attackers who have not authenticated to read potentially sensitive information, such as the version, via an incorrect login and a modified (1) error or (2) modify parameter that returns template files or the "about" information page. NOTE: the vendor has disputed this issue
0
