Tobesoft
Tobesoft Nexacro: vulnerabilidades y CVE
Tobesoft Nexacro tiene 6 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 3 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE6
Últimos 12 meses0
Críticas3
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2021-26625 | Alta (8.8) | 0.63% | — | 19 abr 2022 | Insufficient Verification of input Data leading to arbitrary file download and execute was discovered in Nexacro platform. This vulnerability is caused by an automatic update function that does not verify input data… |
| CVE-2021-26613 | Alta (7.5) | 0.83% | — | 9 feb 2022 | improper input validation vulnerability in nexacro permits copying file to the startup folder using rename method. |
| CVE-2021-26612 | Crítica (9.8) | 1.2% | — | 30 nov 2021 | An improper input validation leading to arbitrary file creation was discovered in copy method of Nexacro platform. Remote attackers use copy method to execute arbitrary command after the file creation included malicious… |
| CVE-2021-26607 | Crítica (9.8) | 1.9% | — | 26 oct 2021 | An Improper input validation in execDefaultBrowser method of NEXACRO17 allows a remote attacker to execute arbitrary command on affected systems. |
| CVE-2020-7874 | Alta (8.8) | 0.58% | — | 9 sept 2021 | Download of code without integrity check vulnerability in NEXACRO14 Runtime ActiveX control of tobesoft Co., Ltd allows the attacker to cause an arbitrary file download and execution. This vulnerability is due to… |
| CVE-2019-19167 | Crítica (9.8) | 0.75% | — | 6 may 2020 | Tobesoft Nexacro v2019.9.25.1 and earlier version have an arbitrary code execution vulnerability by using method supported by Nexacro14 ActiveX Control. It allows attacker to cause remote code execution. |