Vendors / HandySoft Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 2
Exploited now HandySoft records in CISA KEV No HandySoft vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 44
Improper input validation vulnerability in HANDY Groupware’s ActiveX moudle allows attackers to download or execute arbitrary files.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00813 · Published 2022-05-19 · No fix listed CWE-20
Priority MEDIUM 43
An arbitrary file download and execution vulnerability was found in the HShell.dll of handysoft Co., Ltd groupware ActiveX module.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00595 · Published 2021-09-09 · No fix listed CWE-353
Priority LOW 38
hslogin2.dll ActiveX Control in Groupware contains a vulnerability that could allow remote files to be downloaded and executed by setting the arguments to the activex method.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00439 · Published 2020-08-07 · No fix listed CWE-353
Priority LOW 34
ActiveX Control(HShell.dll) in Handy Groupware 1.7.3.1 for Windows 7, 8, and 10 allows an attacker to execute arbitrary command via the ShellExec method.
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00966 · Published 2020-04-29 · No fix listed CWE-78
Open these records in search → All records by CVSS severity
2 2 0 0 0
THREATIST.IORead the docs