İçeriğe atla
Noroxi

Ecava kayıtları

ecava üreticisine ait 26 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
7
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

26 kayıt
  • CVE-2010-4597
    46Planlayın

    Stack-based buffer overflow in the save method in the IntegraXor.Project ActiveX control in igcomm.dll in Ecava IntegraXor Human-Machine Int

    KritikCVSS 10,0Kavram kanıtıEPSS %19

    ecava · integraxor23 Ara 2010

  • CVE-2017-6050
    40Planlayın

    A SQL Injection issue was discovered in Ecava IntegraXor Versions 5.2.1231.0 and prior.

    KritikCVSS 9,8İstismar yokEPSS %4

    ecava · integraxor21 Haz 2017

  • CVE-2012-0246
    39İzleyin

    Directory traversal vulnerability in an unspecified ActiveX control in Ecava IntegraXor before 3.71.4200 allows remote attackers to execute

    KritikCVSS 9,3İstismar yokEPSS %6

    ecava · integraxor2 Nis 2012

  • CVE-2016-8341
    39İzleyin

    An issue was discovered in Ecava IntegraXor Version 5.0.413.0.

    KritikCVSS 9,8İstismar yokEPSS %2

    ecava · integraxor13 Şub 2017

  • CVE-2012-4700
    38İzleyin

    Multiple buffer overflows in an ActiveX control in PE3DO32A.ocx in IntegraXor SCADA Server 4.00 build 4250.0 and earlier allow remote attack

    KritikCVSS 9,3İstismar yokEPSS %4

    ecava · integraxor8 Şub 2013

  • CVE-2014-2375
    37İzleyin

    Ecava IntegraXor SCADA Server External Control of File Name or Path

    KritikCVSS 9,0İstismar yokEPSS %2

    ecava · integraxor15 Eyl 2014

  • CVE-2014-0753
    32İzleyin

    Ecava IntegraXor Stack-based Buffer Overflow

    YüksekCVSS 7,8İstismar yokEPSS %3

    ecava · integraxor20 Oca 2014

  • CVE-2014-2376
    31İzleyin

    Ecava IntegraXor SCADA Server SQL Injection

    YüksekCVSS 7,5İstismar yokEPSS %2

    ecava · integraxor15 Eyl 2014

  • CVE-2016-2306
    31İzleyin

    The HMI web server in Ecava IntegraXor before 5.0 build 4522 allows remote attackers to obtain sensitive cleartext information by sniffing t

    YüksekCVSS 7,5İstismar yokEPSS %2

    ecava · integraxor21 Nis 2016

  • CVE-2011-1562
    31İzleyin

    Ecava IntegraXor HMI before n 3.60 (Build 4032) allows remote attackers to bypass authentication and execute arbitrary SQL statements via un

    YüksekCVSS 7,5İstismar yokEPSS %2

    ecava · integraxor5 Nis 2011

  • CVE-2016-2299
    29İzleyin

    SQL injection vulnerability in Ecava IntegraXor before 5.0 build 4522 allows remote attackers to execute arbitrary SQL commands via unspecif

    YüksekCVSS 7,3İstismar yokEPSS %1

    ecava · integraxor21 Nis 2016

  • CVE-2010-4598
    28İzleyin

    Directory traversal vulnerability in Ecava IntegraXor 3.6.4000.0 and earlier allows remote attackers to read arbitrary files via a ..

    OrtaCVSS 5,0Kavram kanıtıEPSS %26

    ecava · integraxor23 Ara 2010

  • CVE-2010-4599
    27İzleyin

    Untrusted search path vulnerability in Ecava IntegraXor 3.6.4000.0 allows local users to gain privileges via a Trojan horse dwmapi.dll file

    OrtaCVSS 6,9İstismar yokEPSS %0

    ecava · integraxor23 Ara 2010

  • CVE-2016-2300
    26İzleyin

    Ecava IntegraXor before 5.0 build 4522 allows remote attackers to bypass authentication and access unspecified web pages via unknown vectors

    OrtaCVSS 6,5İstismar yokEPSS %1

    ecava · integraxor21 Nis 2016

  • CVE-2016-2301
    25İzleyin

    SQL injection vulnerability in Ecava IntegraXor before 5.0 build 4522 allows remote authenticated users to execute arbitrary SQL commands vi

    OrtaCVSS 6,3İstismar yokEPSS %1

    ecava · integraxor21 Nis 2016

  • CVE-2016-2305
    24İzleyin

    Cross-site scripting (XSS) vulnerability in Ecava IntegraXor before 5.0 build 4522 allows remote attackers to inject arbitrary web script or

    OrtaCVSS 6,1İstismar yokEPSS %1

    ecava · integraxor21 Nis 2016

  • CVE-2014-0786
    21İzleyin

    Ecava IntegraXor Information Exposure

    OrtaCVSS 5,0İstismar yokEPSS %3

    ecava · integraxor30 Nis 2014

  • CVE-2014-2377
    21İzleyin

    Ecava IntegraXor SCADA Server Information Exposure Through Environmental Variables

    OrtaCVSS 5,0İstismar yokEPSS %2

    ecava · integraxor15 Eyl 2014

  • CVE-2016-2302
    21İzleyin

    Ecava IntegraXor before 5.0 build 4522 allows remote attackers to obtain sensitive information by reading detailed error messages.

    OrtaCVSS 5,3İstismar yokEPSS %1

    ecava · integraxor21 Nis 2016

  • CVE-2016-2303
    21İzleyin

    CRLF injection vulnerability in Ecava IntegraXor before 5.0 build 4522 allows remote attackers to inject arbitrary HTTP headers and conduct

    OrtaCVSS 5,3İstismar yokEPSS %1

    ecava · integraxor21 Nis 2016

  • CVE-2017-16735
    21İzleyin

    A SQL Injection issue was discovered in Ecava IntegraXor v 6.1.1030.1 and prior.

    OrtaCVSS 5,3İstismar yokEPSS %1

    ecava · integraxor20 Ara 2017

  • CVE-2017-16733
    21İzleyin

    A SQL Injection issue was discovered in Ecava IntegraXor v 6.1.1030.1 and prior.

    OrtaCVSS 5,3İstismar yokEPSS %1

    ecava · integraxor20 Ara 2017

  • CVE-2014-0752
    20İzleyin

    Ecava IntegraXor Exposure of Access Control List Files to an Unauthorized Control Sphere

    OrtaCVSS 5,0İstismar yokEPSS %2

    ecava · integraxor9 Oca 2014

  • CVE-2011-2958
    17İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in Ecava IntegraXor before 3.60 (Build 4080) allow remote attackers to inject arbitrary

    OrtaCVSS 4,3İstismar yokEPSS %1

    ecava · integraxor28 Tem 2011

  • CVE-2016-2304
    17İzleyin

    Ecava IntegraXor before 5.0 build 4522 does not include the HTTPOnly flag in a Set-Cookie header for the session cookie, which makes it easi

    OrtaCVSS 4,3İstismar yokEPSS %1

    ecava · integraxor21 Nis 2016