14.0.0.0

DATE	CVE	VULNERABILITY TITLE	RISK
2021-11-30	CVE-2021-26612	Improper Input Validation vulnerability in Tobesoft Nexacro 14.0.0.0/14.0.1.3600/17.1.2.500 An improper input validation leading to arbitrary file creation was discovered in copy method of Nexacro platform. network low complexity tobesoft CWE-20 critical	9.8
2021-10-26	CVE-2021-26607	Improper Input Validation vulnerability in Tobesoft Nexacro An Improper input validation in execDefaultBrowser method of NEXACRO17 allows a remote attacker to execute arbitrary command on affected systems. network low complexity tobesoft CWE-20 critical	9.8
2021-09-09	CVE-2020-7874	Download of Code Without Integrity Check vulnerability in Tobesoft Nexacro 14.0.0.0 Download of code without integrity check vulnerability in NEXACRO14 Runtime ActiveX control of tobesoft Co., Ltd allows the attacker to cause an arbitrary file download and execution. network low complexity tobesoft CWE-494	8.8
2020-05-06	CVE-2019-19167	Unspecified vulnerability in Tobesoft Nexacro Tobesoft Nexacro v2019.9.25.1 and earlier version have an arbitrary code execution vulnerability by using method supported by Nexacro14 ActiveX Control. network low complexity tobesoft critical	9.8