james fitts vulnerabilities and exploits

(subscribe to this query)

5

CVSSv2

An issue exists in Advantech SUISAccess Server Version 3.0 and prior. An attacker could traverse the file system and extract files that can result in information disclosure.

Advantech Susiaccess

2 EDB exploits1 Github repository

10

CVSSv2

The server in Brocade Network Advisor prior to 12.1.0, as used in EMC Connectrix Manager Converged Network Edition (CMCNE), HP B-series SAN Network Advisor, and possibly other products, allows remote malicious users to execute arbitrary code by using a servlet to upload an execut...

Emc Connectrix Manager 11.2.1 Emc Connectrix Manager 12.0.1 Emc Connectrix Manager 12.0.3

2 EDB exploits

6

CVSSv2

An issue exists in Advantech SUISAccess Server Version 3.0 and prior. The directory traversal/file upload error allows an malicious user to upload and unpack a zip file.

Advantech Susiaccess

1 EDB exploit

6

CVSSv2

An issue exists in Fatek Automation PLC WinProladder Version 3.11 Build 14701. A stack-based buffer overflow vulnerability exists when the software application connects to a malicious server, resulting in a stack buffer overflow. This causes an exploitable Structured Exception Ha...

Fatek Plc Winproladder Firmware 3.11

1 EDB exploit

5

CVSSv2

A Stack Buffer Overflow issue exists in VIPA Controls WinPLC7 5.0.45.5921 and prior. A stack-based buffer overflow vulnerability has been identified, where an attacker with a specially crafted packet could overflow the fixed length buffer. This could allow remote code execution.

Vipa Controls Winplc7 Firmware

1 EDB exploit

7.5

CVSSv2

Directory traversal vulnerability in NTWebServer in InduSoft Web Studio 7.1 before SP2 Patch 4 allows remote malicious users to read administrative passwords in APP files, and consequently execute arbitrary code, via unspecified web requests.

Indusoft Web Studio Indusoft Web Studio 7.1

1 EDB exploit

10

CVSSv2

Stack-based buffer overflow in WellinTech KingSCADA prior to 3.1.2.13 allows remote malicious users to execute arbitrary code via a crafted packet.

Wellintech Kingscada 3.1 Wellintech Kingscada

1 EDB exploit

10

CVSSv2

The av-centerd SOAP service in AlienVault OSSIM prior to 4.7.0 allows remote malicious users to execute arbitrary commands via a crafted (1) remote_task or (2) get_license request, a different vulnerability than CVE-2014-3804 and CVE-2014-3805.

Alienvault Open Source Security Information Management Alienvault Open Source Security Information Management 4.5 Alienvault Open Source Security Information Management 4.3 Alienvault Open Source Security Information Management 4.2.2 Alienvault Open Source Security Information Management 4.0 Alienvault Open Source Security Information Management 3.1.12 Alienvault Open Source Security Information Management 2.1.2 Alienvault Open Source Security Information Management 1.0.6 Alienvault Open Source Security Information Management 4.1.3 Alienvault Open Source Security Information Management 4.1.2 Alienvault Open Source Security Information Management 4.1 Alienvault Open Source Security Information Management 4.0.4 Alienvault Open Source Security Information Management 4.0.3 Alienvault Open Source Security Information Management 1.0.4 Alienvault Open Source Security Information Management 4.4 Alienvault Open Source Security Information Management 4.3.3 Alienvault Open Source Security Information Management 4.3.2 Alienvault Open Source Security Information Management 4.3.1 Alienvault Open Source Security Information Management 3.1 Alienvault Open Source Security Information Management 2.1.5-3 Alienvault Open Source Security Information Management 2.1.5-2 Alienvault Open Source Security Information Management 2.1.5-1

1 EDB exploit

4

CVSSv2

Leao Consultoria e Desenvolvimento de Sistemas (LCDS) LTDA ME LAquis SCADA software versions prior to version 4.1.0.3237 do not neutralize external input to ensure that users are not calling for absolute path sequences outside of their privilege level.

Lcds Laquis Scada

1 EDB exploit

9.3

CVSSv2

Buffer overflow in the Library Control Program (LCP) in EMC AlphaStor 4.0 before build 910 allows remote malicious users to execute arbitrary code via crafted commands.

Emc Alphastor 4.0

1 EDB exploit

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook