cve.bz

ininet solutions scada web server vulnerabilities, newest first

Filter
  1. –CVE-2015-1005EPSS 0.4%

    IniNet embeddedWebServer (aka eWebServer) before 2.02 for Windows CE uses cleartext for password storage, which allows context-dependent attackers to obtain sensitive information via unspecified vectors.

  2. –CVE-2015-1003EPSS 2.1%

    Directory traversal vulnerability in IniNet embeddedWebServer (aka eWebServer) before 2.02 allows remote attackers to read arbitrary files via a crafted pathname.

  3. –CVE-2015-1002EPSS 1.4%

    IniNet embeddedWebServer (aka eWebServer) before 2.02 mishandles URL encoding, which allows remote attackers to write to or delete files via a crafted string.

  4. –CVE-2015-1001EPSS 4.1%

    Multiple stack-based buffer overflows in IniNet embeddedWebServer (aka eWebServer) before 2.02 allow remote attackers to execute arbitrary code via a long field in an HTTP request.