Lucene search
+L

449 matches found

Zero Day Initiative
Zero Day Initiative
added 2022/06/30 12:0 a.m.10 views

Advantech iView findUpdateDeviceList sort_field/sort_type SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Advantech iView. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NetworkServlet endpoint, which listens on TCP port 8080 by default. When...

7.5CVSS2.7AI score0.10285EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/06/30 12:0 a.m.19 views

Advantech iView removeSegment Missing Authentication Denial-of-Service Vulnerability

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Advantech iView. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NetworkServlet endpoint, which listens on TCP port 8080 by default. Th...

8.2CVSS2.9AI score0.10924EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/06/30 12:0 a.m.30 views

Advantech iView NetworkServlet clearDatabase Missing Authentication Denial-of-Service Vulnerability

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Advantech iView. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NetworkServlet endpoint, which listens on TCP port 8080 by default. Th...

8.2CVSS2.1AI score0.10924EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/06/30 12:0 a.m.9 views

Advantech iView findSummaryCfgDeviceListExport VALUE SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Advantech iView. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NetworkServlet endpoint, which listens on TCP port 8080 by default. When...

7.5CVSS2.9AI score0.10285EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/06/30 12:0 a.m.18 views

Advantech iView findSummaryUpdateDeviceList COLUMN/VALUE SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech iView. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NetworkServlet endpoint, which listens on TCP port 8080 by default. When parsing the...

9.8CVSS5.6AI score0.10285EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/06/30 12:0 a.m.13 views

Advantech iView DeviceTreeTable addDeviceTreeItem SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Advantech iView. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NetworkServlet endpoint, which listens on TCP port 8080 by default. When...

7.5CVSS2.8AI score0.10285EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/06/30 12:0 a.m.26 views

Advantech iView setConfiguration column_value SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Advantech iView. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ConfigurationServlet endpoint, which listens on TCP port 8080 by default. Wh...

7.5CVSS2.4AI score0.10285EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/06/30 12:0 a.m.18 views

Advantech iView findUpdateDeviceListExport sort_type/search_json SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Advantech iView. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NetworkServlet endpoint, which listens on TCP port 8080 by default. When...

7.5CVSS2.6AI score0.10285EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/06/30 12:0 a.m.21 views

Advantech iView exportPSInventoryTable SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to create arbitrary files on affected installations of Advantech iView. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the NetworkServlet endpoint,...

8.8CVSS3.8AI score0.09181EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/06/30 12:0 a.m.28 views

Advantech iView findCfgDeviceList COLUMN/VALUE SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech iView. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NetworkServlet endpoint, which listens on TCP port 8080 by default. When parsing the...

9.8CVSS5.6AI score0.10285EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/06/30 12:0 a.m.20 views

Advantech iView findSummaryCfgDeviceList VALUE SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Advantech iView. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NetworkServlet endpoint, which listens on TCP port 8080 by default. When...

7.5CVSS3.1AI score0.10285EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/06/30 12:0 a.m.27 views

Advantech iView updateSystemSettings SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Advantech iView. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the NetworkServlet...

6.5CVSS1.5AI score0.09181EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/06/30 12:0 a.m.23 views

Advantech iView exportTaskMgrReport col_list2 SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to create arbitrary files on affected installations of Advantech iView. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the NetworkServlet endpoint,...

8.8CVSS4.4AI score0.09181EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/06/30 12:0 a.m.20 views

Advantech iView retrieveAllTaskMgrUpdateItems sort_field/sort_type SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Advantech iView. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NetworkServlet endpoint, which listens on TCP port 8080 by default. When...

7.5CVSS2.5AI score0.10285EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/06/30 12:0 a.m.23 views

Advantech iView runTaskEditorSearch sortname/sortorder SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Advantech iView. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NetworkServlet endpoint, which listens on TCP port 8080 by default. When...

7.5CVSS2.1AI score0.10285EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/06/30 12:0 a.m.17 views

Advantech iView setTaskMgrItem SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Advantech iView. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NetworkServlet endpoint, which listens on TCP port 8080 by default. When...

7.5CVSS2.2AI score0.10285EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/06/30 12:0 a.m.28 views

Advantech iView addDeviceTreeItem SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Advantech iView. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the NetworkServlet...

4.9CVSS2.5AI score0.00884EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/06/30 12:0 a.m.21 views

Advantech iView removeDevices Missing Authentication Denial-of-Service Vulnerability

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Advantech iView. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NetworkServlet endpoint, which listens on TCP port 8080 by default. Th...

8.2CVSS3.2AI score0.10924EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/06/30 12:0 a.m.26 views

Advantech iView findTaskMgrItems sort_field/sort_type SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Advantech iView. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NetworkServlet endpoint, which listens on TCP port 8080 by default. When...

7.5CVSS2.5AI score0.10285EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/06/30 12:0 a.m.21 views

Advantech iView findCfgDeviceList VALUE SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Advantech iView. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NetworkServlet endpoint, which listens on TCP port 8080 by default. When...

7.5CVSS2.8AI score0.10285EPSS
SaveExploits0References1
Rows per page
Query Builder