|
212621
|
7.8 |
HIGH
Local
|
rockwellautomation
|
rslinx_classic
|
In Rockwell Automation RSLinx Classic versions 4.11.00 and prior, an authenticated local attacker could modify a registry key, which could lead to the execution of malicious code using system privile…
|
-
|
CVE-2020-10642
|
2024-11-21 13:55 |
2020-04-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212622
|
9.8 |
CRITICAL
Network
|
advantech
|
webaccess\/nms
|
An attacker could use a specially crafted URL to delete or read files outside the WebAccess/NMS's (versions prior to 3.0.2) control.
|
CWE-22
Path Traversal
|
CVE-2020-10631
|
2024-11-21 13:55 |
2020-04-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212623
|
7.5 |
HIGH
Network
|
advantech
|
webaccess\/nms
|
WebAccess/NMS (versions prior to 3.0.2) does not sanitize XML input. Specially crafted XML input could allow an attacker to read sensitive files.
|
CWE-611
XXE
|
CVE-2020-10629
|
2024-11-21 13:55 |
2020-04-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212624
|
9.8 |
CRITICAL
Network
|
advantech
|
webaccess\/nms
|
WebAccess/NMS (versions prior to 3.0.2) allows an unauthenticated remote user to create a new admin account.
|
CWE-306
Missing Authentication for Critical Function
|
CVE-2020-10625
|
2024-11-21 13:55 |
2020-04-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212625
|
6.5 |
MEDIUM
Network
|
advantech
|
webaccess\/nms
|
Multiple vulnerabilities could allow an attacker with low privileges to perform SQL injection on WebAccess/NMS (versions prior to 3.0.2) to gain access to sensitive information.
|
CWE-89
SQL Injection
|
CVE-2020-10623
|
2024-11-21 13:55 |
2020-04-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212626
|
9.1 |
CRITICAL
Network
|
advantech
|
webaccess\/nms
|
An attacker could use a specially crafted URL to delete files outside the WebAccess/NMS's (versions prior to 3.0.2) control.
|
CWE-22
Path Traversal
|
CVE-2020-10619
|
2024-11-21 13:55 |
2020-04-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212627
|
7.5 |
HIGH
Network
|
advantech
|
webaccess\/nms
|
There are multiple ways an unauthenticated attacker could perform SQL injection on WebAccess/NMS (versions prior to 3.0.2) to gain access to sensitive information.
|
CWE-89
SQL Injection
|
CVE-2020-10617
|
2024-11-21 13:55 |
2020-04-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212628
|
8.8 |
HIGH
Network
|
advantech
|
webaccess\/nms
|
WebAccess/NMS (versions prior to 3.0.2) does not properly sanitize user input and may allow an attacker to inject system commands remotely.
|
CWE-78
OS Command
|
CVE-2020-10603
|
2024-11-21 13:55 |
2020-04-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212629
|
9.8 |
CRITICAL
Network
|
advantech
|
webaccess\/nms
|
Multiple issues exist that allow files to be uploaded and executed on the WebAccess/NMS (versions prior to 3.0.2).
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2020-10621
|
2024-11-21 13:55 |
2020-04-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212630
|
7.8 |
HIGH
Local
|
tencent
|
qqbrowser
|
QQBrowser before 10.5.3870.400 installs a Windows service TsService.exe. This file is writable by anyone belonging to the NT AUTHORITY\Authenticated Users group, which includes all local and remote u…
|
CWE-732
Incorrect Permission Assignment for Critical Resource
|
CVE-2020-10551
|
2024-11-21 13:55 |
2020-04-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|