Xarrow
xArrow · 7 CVEs
CVE-2021-33025
HIGH
xArrow SCADA Path Traversal
May 16, 2022
CVE-2021-33021
MEDIUM
xArrow SCADA Cross-site Scripting
May 16, 2022
CVE-2021-33001
MEDIUM
xArrow SCADA Cross-site Scripting
May 16, 2022
CVE-2012-2429
HIGH
The server in xArrow before 3.4.1 performs an invalid read operation, which allows remote attackers to execute arbitrar…
May 25, 2012
CVE-2012-2428
HIGH
Integer overflow in the server in xArrow before 3.4.1 allows remote attackers to execute arbitrary code via a crafted p…
May 25, 2012
CVE-2012-2427
HIGH
Heap-based buffer overflow in the server in xArrow before 3.4.1 allows remote attackers to execute arbitrary code via p…
May 25, 2012
CVE-2012-2426
HIGH
The server in xArrow before 3.4.1 does not properly allocate memory, which allows remote attackers to cause a denial of…
May 25, 2012
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2021-33025 | xArrow SCADA Path Traversal | HIGH | 0.26% | May 16, 2022 |
| CVE-2021-33021 | xArrow SCADA Cross-site Scripting | MEDIUM | 0.82% | May 16, 2022 |
| CVE-2021-33001 | xArrow SCADA Cross-site Scripting | MEDIUM | 0.82% | May 16, 2022 |
| CVE-2012-2429 | The server in xArrow before 3.4.1 performs an invalid read operation, which allows remote attackers to execute arbitrary code via unspecified vectors. | HIGH | 3.76% | May 25, 2012 |
| CVE-2012-2428 | Integer overflow in the server in xArrow before 3.4.1 allows remote attackers to execute arbitrary code via a crafted packet that triggers an out-of-bounds rea… | HIGH | 4.54% | May 25, 2012 |
| CVE-2012-2427 | Heap-based buffer overflow in the server in xArrow before 3.4.1 allows remote attackers to execute arbitrary code via packets that trigger an invalid free oper… | HIGH | 3.92% | May 25, 2012 |
| CVE-2012-2426 | The server in xArrow before 3.4.1 does not properly allocate memory, which allows remote attackers to cause a denial of service (NULL pointer dereference and d… | HIGH | 2.21% | May 25, 2012 |
Showing 1 to 7 of 7 CVEs