Show filters
461 Total Results
Displaying 281-290 of 461
Sort by:
Attacker Value
Unknown
CVE-2014-0753
Disclosure Date: January 21, 2014 (last updated October 05, 2023)
Stack-based buffer overflow in the SCADA server in Ecava IntegraXor before 4.1.4390 allows remote attackers to cause a denial of service (system crash) by triggering access to DLL code located in the IntegraXor directory.
0
Attacker Value
Unknown
CVE-2014-0752
Disclosure Date: January 09, 2014 (last updated October 05, 2023)
The SCADA server in Ecava IntegraXor before 4.1.4369 allows remote attackers to read arbitrary project backup files via a crafted URL.
0
Attacker Value
Unknown
CVE-2013-0122
Disclosure Date: April 22, 2013 (last updated October 05, 2023)
The avast! Mobile Security application before 2.0.4400 for Android allows attackers to cause a denial of service (application crash) via a crafted application that sends an intent to com.avast.android.mobilesecurity.app.scanner.DeleteFileActivity with zero arguments.
0
Attacker Value
Unknown
CVE-2012-4700
Disclosure Date: February 08, 2013 (last updated October 05, 2023)
Multiple buffer overflows in an ActiveX control in PE3DO32A.ocx in IntegraXor SCADA Server 4.00 build 4250.0 and earlier allow remote attackers to execute arbitrary code via a crafted HTML document.
0
Attacker Value
Unknown
CVE-2012-6427
Disclosure Date: December 23, 2012 (last updated October 05, 2023)
Multiple SQL injection vulnerabilities in Carlo Gavazzi EOS-Box with firmware before 1.0.0.1080_2.1.10 allow remote attackers to execute arbitrary SQL commands via unspecified vectors, a similar issue to CVE-2012-5861.
0
Attacker Value
Unknown
CVE-2012-6428
Disclosure Date: December 23, 2012 (last updated October 05, 2023)
Carlo Gavazzi EOS-Box with firmware before 1.0.0.1080_2.1.10 establishes multiple hardcoded accounts, which makes it easier for remote attackers to obtain administrative access by reading a password in a PHP script, a similar issue to CVE-2012-5862.
0
Attacker Value
Unknown
CVE-2012-5919
Disclosure Date: November 19, 2012 (last updated October 05, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in Havalite 1.0.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) find or (2) replace fields to havalite/findReplace.php; (3) username parameter to havalite/hava_login.php, (4) the Edit Article module, or (5) hava_post.php in the postAuthor module; (6) postId parameter to hava_post.php; (7) userId parameter to hava_user.php; or (8) linkId parameter to hava_link.php.
0
Attacker Value
Unknown
CVE-2012-5892
Disclosure Date: November 17, 2012 (last updated October 05, 2023)
Havalite CMS 1.1.0 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the configuration database via a direct request for data/havalite.db3.
0
Attacker Value
Unknown
CVE-2012-5893
Disclosure Date: November 17, 2012 (last updated October 05, 2023)
Unrestricted file upload vulnerability in hava_upload.php in Havalite CMS 1.1.0 and earlier allows remote attackers to execute arbitrary code by uploading a file with a .php;.gif extension, then accessing it via a direct request to the file in tmp/files/.
0
Attacker Value
Unknown
CVE-2012-5894
Disclosure Date: November 17, 2012 (last updated October 05, 2023)
SQL injection vulnerability in hava_post.php in Havalite CMS 1.1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the postId parameter.
0
