CVE-2021-26629 | High | 8.8 | 2022-04-26 | A path traversal vulnerability in XPLATFORM's runtime archive function could lead to arbitrary file creation. When the .xzip archive file is decompressed, an a… |
CVE-2021-26626 | High | 8.1 | 2022-04-19 | Improper input validation vulnerability in XPLATFORM's execBrowser method can cause execute arbitrary commands. IF the second parameter value of the execBrowse… |
CVE-2021-26625 | High | 8.8 | 2022-04-19 | Insufficient Verification of input Data leading to arbitrary file download and execute was discovered in Nexacro platform. This vulnerability is caused by an a… |
CVE-2021-26613 | High | 8.1 | 2022-02-09 | improper input validation vulnerability in nexacro permits copying file to the startup folder using rename method. |
CVE-2021-26612 | High | 8.1 | 2021-11-30 | An improper input validation leading to arbitrary file creation was discovered in copy method of Nexacro platform. Remote attackers use copy method to execute… |
CVE-2021-26607 | High | 8.1 | 2021-10-26 | An Improper input validation in execDefaultBrowser method of NEXACRO17 allows a remote attacker to execute arbitrary command on affected systems. |
CVE-2020-7874 | High | 8.8 | 2021-09-09 | Download of code without integrity check vulnerability in NEXACRO14 Runtime ActiveX control of tobesoft Co., Ltd allows the attacker to cause an arbitrary file… |
CVE-2020-7866 | High | 8.8 | 2021-07-20 | When using XPLATFORM 9.2.2.270 or earlier versions ActiveX component, arbitrary commands can be executed due to improper input validation |
CVE-2020-7857 | High | 7.5 | 2021-04-20 | A vulnerability of XPlatform could allow an unauthenticated attacker to execute arbitrary command. This vulnerability exists due to insufficient validation of… |
CVE-2020-7853 | Medium | 5.5 | 2021-03-24 | An outbound read/write vulnerability exists in XPLATFORM that does not check offset input ranges, allowing out-of-range data to be read. An attacker can exploi… |
CVE-2020-7841 | High | 8.8 | 2020-11-17 | Improper input validation vulnerability exists in TOBESOFT XPLATFORM which could cause arbitrary .hta file execution when the command string is begun with http… |
CVE-2020-7825 | High | 8.8 | 2020-07-17 | A vulnerability exists that could allow the execution of operating system commands on systems running MiPlatform 2019.05.16 and earlier. An attacker could exec… |
CVE-2020-7815 | High | 7.8 | 2020-07-10 | XPLATFORM v9.2.260 and eariler versions contain a vulnerability that could allow remote files to be downloaded by setting the arguments to the vulnerable metho… |
CVE-2020-7821 | High | 7.8 | 2020-07-02 | Nexacro14/17 ExtCommonApiV13 Library under 2019.9.6 version contain a vulnerability that could allow remote attacker to execute arbitrary code by modifying the… |
CVE-2020-7820 | High | 7.8 | 2020-07-02 | Nexacro14/17 ExtCommonApiV13 Library under 2019.9.6 version contain a vulnerability that could allow remote attacker to execute arbitrary code by setting the a… |
CVE-2019-19162 | High | 7.8 | 2020-05-11 | A use-after-free vulnerability in the TOBESOFT XPLATFORM versions 9.1 to 9.2.2 may lead to code execution on a system running it. |
CVE-2020-7806 | High | 7.8 | 2020-05-06 | Tobesoft Xplatform 9.2.2.250 and earlier version have an arbitrary code execution vulnerability by using method supported by Xplatform ActiveX Control. It allo… |
CVE-2019-19167 | High | 7.8 | 2020-05-06 | Tobesoft Nexacro v2019.9.25.1 and earlier version have an arbitrary code execution vulnerability by using method supported by Nexacro14 ActiveX Control. It all… |
CVE-2019-19166 | High | 7.8 | 2020-05-06 | Tobesoft XPlatform v9.1, 9.2.0, 9.2.1 and 9.2.2 have a vulnerability that can load unauthorized DLL files. It allows attacker to cause remote code execution. |
CVE-2018-5197 | High | 7.8 | 2019-01-02 | A vulnerability in the ExtCommon.dll user extension module version 9.2, 9.2.1, 9.2.2 of Xplatform ActiveX could allow attacker to perform a command injection a… |