Search vulnerabilities

Results 2

Export CSV
CVE-2009-2386

Insecure method vulnerability in Awingsoft Awakening Winds3D Viewer plugin 3.5.0.0, 3.0.0.5, and possibly other versions allows remote attackers to force the download and execution of arbitrary files via the GetURL method.

CVSS 2.0 · 9.3 Critical EPSS 5.1% KEV · Not listed
Vendors
CVE-2009-4850

The Awingsoft Awakening Winds3D Viewer plugin 3.5.0.9 allows remote attackers to execute arbitrary programs via a SceneURL property value with a URL for a .exe file.

CVSS 2.0 · 9.3 Critical EPSS 24.7% KEV · Not listed
Vendors