Skip to content
OpenAdvisories

Archive

12 April 2014

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Critical 10.0
    CVE-2014-0787 Public exploit EPSS 14%

    WellinTech KingSCADA Stack-based Buffer Overflow

    Stack-based buffer overflow in WellinTech KingSCADA before 3.1.2.13 allows remote attackers to execute arbitrary code via a crafted packet.

  • High 7.5
    CVE-2014-0763 Public exploit EPSS 16%

    Advantech WebAccess SQL Injection

    An attacker using SQL injection may use arguments to construct queries without proper sanitization. The DBVisitor.dll is exposed through SOAP interfaces, and the exposed functions are vulnerable to SOAP injection. This may allow unexpected SQL action and acce…