Critical

DATE	CVE	VULNERABILITY TITLE	RISK
2020-07-10	CVE-2020-7814	Improper Input Validation vulnerability in Raonwiz Raon K Upload 2018.0.2.51 RAONWIZ v2018.0.2.50 and eariler versions contains a vulnerability that could allow remote files to be downloaded and excuted by lack of validation to file extension, witch can used as remote-code-excution attacks by hackers File download & execution vulnerability in ____COMPONENT____ of RAONWIZ RAON KUpload allows ____ATTACKER/ATTACK____ to cause ____IMPACT____. network low complexity raonwiz CWE-20 critical	9.8
2020-05-21	CVE-2020-7808	Argument Injection or Modification vulnerability in Raonwiz Raon K Upload 2018.0.2.51 In RAONWIZ K Upload v2018.0.2.51 and prior, automatic update processing without integrity check on update module(web.js) allows an attacker to modify arguments which causes downloading a random DLL and injection on it. network low complexity raonwiz CWE-88 critical	9.8