Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: HandySoft Clear all filters
TI-2021-08348 CVE-2021-26630 · GHSA-cqff-mxpr-46m2

HANDY Groupware file download and execute vulnerability

Priority MEDIUM 44

Improper input validation vulnerability in HANDY Groupware’s ActiveX moudle allows attackers to download or execute arbitrary files.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00813 Published 2022-05-19 No fix listed CWE-20
TI-2020-06324 CVE-2020-7810 · GHSA-h2gw-wr24-mgw2

HandySoft ActiveX File Download and Execution Vulnerability

Priority LOW 38

hslogin2.dll ActiveX Control in Groupware contains a vulnerability that could allow remote files to be downloaded and executed by setting the arguments to the activex method.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00439 Published 2020-08-07 No fix listed CWE-353
TI-2020-06318 CVE-2020-7804 · GHSA-ww69-xxhg-pc55

OS command injection in HandySoft Groupware for for Windows 7, 8, 10

Priority LOW 34

ActiveX Control(HShell.dll) in Handy Groupware 1.7.3.1 for Windows 7, 8, and 10 allows an attacker to execute arbitrary command via the ShellExec method.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00966 Published 2020-04-29 No fix listed CWE-78