CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 21/03/2019 |
| CVE-2018-18396 | CRITICAL9.8 | Remote Code Execution in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1. | 19/10/2018 |
| CVE-2018-18395 | CRITICAL9.8 | Hidden Token Access in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1. | 19/10/2018 |
| CVE-2018-18394 | CRITICAL9.8 | Sensitive Information Stored in Clear Text in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1. | 19/10/2018 |
| CVE-2018-18393 | CRITICAL9.8 | Password Management Issue in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1. | 19/10/2018 |
| CVE-2018-18392 | HIGH8.8 | Privilege Escalation via Broken Access Control in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1. | 19/10/2018 |
| CVE-2018-18391 | HIGH8.8 | User Privilege Escalation in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1. | 19/10/2018 |
| CVE-2018-18390 | HIGH7.5 | User Enumeration in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1. | 19/10/2018 |
| CVE-2018-7506 | HIGH7.5 | The private key of the web server in Moxa MXview versions 2.8 and prior is able to be read and accessed via an HTTP GET request, which may allow a remote attacker to decrypt encrypted information. | 06/04/2018 |
| CVE-2017-5170 | HIGH7.2 | An Uncontrolled Search Path Element issue was discovered in Moxa SoftNVR-IA Live Viewer, Version 3.30.3122 and prior versions. An uncontrolled search path element (DLL Hijacking) vulnerability has been identified. To exploit this vulnerability, an attacker could rename a malicious DLL to meet the criteria of the applic | 18/01/2018 |
| CVE-2017-12729 | CRITICAL9.8 | A SQL Injection issue was discovered in Moxa SoftCMS Live Viewer through 1.6. An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability has been identified. Attackers can exploit this vulnerability to access SoftCMS without knowing the user's password. | 18/01/2018 |
| CVE-2017-14030 | HIGH7.8 | An issue was discovered in Moxa MXview v2.8 and prior. The unquoted service path escalation vulnerability could allow an authorized user with file access to escalate privileges by inserting arbitrary code into the unquoted service path. | 12/01/2018 |
| CVE-2017-7457 | MEDIUM5.0 | XML External Entity via ".AOP" files used by Moxa MX-AOPC Server 1.5 result in remote file disclosure. | 14/04/2017 |
| CVE-2017-7456 | HIGH7.5 | Moxa MXView 2.8 allows remote attackers to cause a Denial of Service by sending overly long junk payload for the MXView client login credentials. | 14/04/2017 |
| CVE-2017-7455 | HIGH7.5 | Moxa MXView 2.8 allows remote attackers to read web server's private key file, no access control. | 14/04/2017 |
| CVE-2016-9356 | HIGH7.8 | An issue was discovered in Moxa DACenter Versions 1.4 and older. The application may suffer from an unquoted search path issue. | 13/02/2017 |
| CVE-2016-9354 | MEDIUM5.5 | An issue was discovered in Moxa DACenter Versions 1.4 and older. A specially crafted project file may cause the program to crash because of Uncontrolled Resource Consumption. | 13/02/2017 |
| CVE-2016-9333 | CRITICAL9.8 | An issue was discovered in Moxa SoftCMS versions prior to Version 1.6. The SoftCMS Application does not properly sanitize input that may allow a remote attacker access to SoftCMS with administrator's privilege through specially crafted input (SQL INJECTION). | 13/02/2017 |