https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T17:29:34.540314+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-254245 EUVD-2026-254245 2026-10-02T17:29:34.545443+00:00 EUVD-2026-254245 https://cve.radiocsirt.org/vuln/fkie_cve-2014-2365 fkie_cve-2014-2365 2026-10-02T17:29:34.545485+00:00

Unspecified vulnerability in Advantech WebAccess before 7.2 allows remote authenticated users to create or delete arbitrary files via unknown vectors.

 https://cve.radiocsirt.org/vuln/ghsa-9mr9-64h6-hr92 GHSA-9mr9-64h6-hr92 2026-10-02T17:29:34.545525+00:00

Unspecified vulnerability in Advantech WebAccess before 7.2 allows remote authenticated users to create or delete arbitrary files via unknown vectors.

 https://cve.radiocsirt.org/vuln/gsd-2014-2365 gsd-2014-2365 2026-10-02T17:29:34.545551+00:00 gsd-2014-2365 https://cve.radiocsirt.org/vuln/icsa-14-198-02 ICSA-14-198-02 — Advantech WebAccess Vulnerabilities 2026-10-02T17:29:34.545570+00:00

Multiple stack-based buffer overflows in Advantech WebAccess before 7.2 allow remote attackers to execute arbitrary code via a long string in the (1) ProjectName, (2) SetParameter, (3) NodeName, (4) CCDParameter, (5) SetColor, (6) AlarmImage, (7) GetParameter, (8) GetColor, (9) ServerResponse, (10) SetBaud, or (11) IPAddress parameter to an ActiveX control in (a) webvact.ocx, (b) dvs.ocx, or (c) webdact.ocx. The BrowseFolder method in the bwocxrun ActiveX control in Advantech WebAccess before 7.2 allows remote attackers to read arbitrary files via a crafted call. The ChkCookie subroutine in an ActiveX control in broadweb/include/gChkCook.asp in Advantech WebAccess before 7.2 allows remote attackers to read arbitrary files via a crafted call. upAdminPg.asp in Advantech WebAccess before 7.2 allows remote authenticated users to discover credentials by reading HTML source code. Unspecified vulnerability in Advantech WebAccess before 7.2 allows remote authenticated users to create or delete arbitrary files via unknown vectors.