Vulnerabilities > Tobesoft > Nexacro
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2022-04-19 | CVE-2021-26625 | Insufficient Verification of Data Authenticity vulnerability in Tobesoft Nexacro 17.1.2.500/17.1.2.600/17.1.3.301 Insufficient Verification of input Data leading to arbitrary file download and execute was discovered in Nexacro platform. | 6.8 |
| 2022-02-09 | CVE-2021-26613 | Improper Input Validation vulnerability in Tobesoft Nexacro improper input validation vulnerability in nexacro permits copying file to the startup folder using rename method. | 5.0 |
| 2021-11-30 | CVE-2021-26612 | Improper Input Validation vulnerability in Tobesoft Nexacro 14.0.0.0/14.0.1.3600 An improper input validation leading to arbitrary file creation was discovered in copy method of Nexacro platform. | 7.5 |
| 2021-10-26 | CVE-2021-26607 | Improper Input Validation vulnerability in Tobesoft Nexacro An Improper input validation in execDefaultBrowser method of NEXACRO17 allows a remote attacker to execute arbitrary command on affected systems. | 10.0 |
| 2021-09-09 | CVE-2020-7874 | Download of Code Without Integrity Check vulnerability in Tobesoft Nexacro 14.0.0.0 Download of code without integrity check vulnerability in NEXACRO14 Runtime ActiveX control of tobesoft Co., Ltd allows the attacker to cause an arbitrary file download and execution. | 6.8 |
| 2020-05-06 | CVE-2019-19167 | Unspecified vulnerability in Tobesoft Nexacro 2019.9.25.1 Tobesoft Nexacro v2019.9.25.1 and earlier version have an arbitrary code execution vulnerability by using method supported by Nexacro14 ActiveX Control. | 7.5 |