Advisories · Technology
Arcadia Technology, LLC Crafty Controller.
Every CVE that names Arcadia Technology, LLC Crafty Controller among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.6 CriticalCritical · CVSS 9+
Improper Encoding or Escaping of Output in Crafty Controller
- Arcadia Technology, LLC Crafty Controller
- CWE-116
- CVSS 5.4 Medium
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Crafty Controller
- Arcadia Technology, LLC Crafty Controller
- Cross-site scripting (XSS)
- CVSS 9.1 CriticalCritical · CVSS 9+
Path Traversal: '.../...//' in Crafty Controller
- Arcadia Technology, LLC Crafty Controller
- Path traversal
- CVSS 9.0 CriticalCritical · CVSS 9+
Authorization Bypass Through User-Controlled Key in Crafty Controller
- Arcadia Technology, LLC Crafty Controller
- Broken access control
- CVSS 8.2 High
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Crafty Controller
- Arcadia Technology, LLC Crafty Controller
- Path traversal
- CVSS 9.9 CriticalCritical · CVSS 9+
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Crafty Controller
- Arcadia Technology, LLC Crafty Controller
- Path traversal
- CVSS 9.9 CriticalCritical · CVSS 9+
Improper Neutralization of Special Elements Used in a Template Engine in Crafty Controller
- Arcadia Technology, LLC Crafty Controller
- Code injection
- CVSS 7.1 High
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Crafty Controller
- Arcadia Technology, LLC Crafty Controller
- Cross-site scripting (XSS)
- CVSS 7.6 High
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Crafty Controller
- Arcadia Technology, LLC Crafty Controller
- Cross-site scripting (XSS)
- CVSS 7.5 High
Improper Neutralization of HTTP Headers for Scripting Syntax in Crafty Controller 4
- Arcadia Technology, LLC Crafty Controller
- CWE-644