Vulnerabilities > Orpak > Siteomat > 6.4.414.084

DATE CVE VULNERABILITY TITLE RISK
2019-06-03 CVE-2017-14854 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Orpak Siteomat 6.4.414.084
A stack buffer overflow exists in one of the Orpak SiteOmat CGI components, allowing for remote code execution.
network
low complexity
orpak CWE-119
critical
 9.8
9.8
2019-06-03 CVE-2017-14853 Code Injection vulnerability in Orpak Siteomat 6.4.414.084
The Orpak SiteOmat OrCU component is vulnerable to code injection, for all versions prior to 2017-09-25, due to a search query that uses a direct shell command.
network
low complexity
orpak CWE-94
critical
 9.8
9.8