Vulnerabilities (CVE)

Filtered by CWE-623
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2014-2368 1 Advantech 1 Advantech Webaccess 2025-10-06 7.5 HIGH N/A
The BrowseFolder method in the bwocxrun ActiveX control in Advantech WebAccess before 7.2 allows remote attackers to read arbitrary files via a crafted call.
CVE-2011-10028 2025-08-22 N/A N/A
The RealNetworks RealArcade platform includes an ActiveX control (InstallerDlg.dll, version 2.6.0.445) that exposes a method named Exec via the StubbyUtil.ProcessMgr COM object. This method allows remote attackers to execute arbitrary commands on a victim's Windows machine without proper validation or restrictions. This platform was sometimes referred to or otherwise known as RealArcade or Arcade Games and has since consolidated with RealNetworks' platform, GameHouse.