Tobesoft Nexacro
6 CVEs affecting Tobesoft Nexacro. Latest disclosed: 2022-04-19. Critical: 0, High: 6.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-26625 | High | 8.8 | 2022-04-19 | Insufficient Verification of input Data leading to arbitrary file download and execute was discovered in Nexacro platform. This vulnerability is caused by an a… |
CVE-2020-7874 | High | 8.8 | 2021-09-09 | Download of code without integrity check vulnerability in NEXACRO14 Runtime ActiveX control of tobesoft Co., Ltd allows the attacker to cause an arbitrary file… |
CVE-2021-26613 | High | 8.1 | 2022-02-09 | improper input validation vulnerability in nexacro permits copying file to the startup folder using rename method. |
CVE-2021-26612 | High | 8.1 | 2021-11-30 | An improper input validation leading to arbitrary file creation was discovered in copy method of Nexacro platform. Remote attackers use copy method to execute… |
CVE-2021-26607 | High | 8.1 | 2021-10-26 | An Improper input validation in execDefaultBrowser method of NEXACRO17 allows a remote attacker to execute arbitrary command on affected systems. |
CVE-2019-19167 | High | 7.8 | 2020-05-06 | Tobesoft Nexacro v2019.9.25.1 and earlier version have an arbitrary code execution vulnerability by using method supported by Nexacro14 ActiveX Control. It all… |