Lucene search
+L

4436 matches found

Zero Day Initiative
Zero Day Initiative
•added 2022/06/30 12:00 a.m.•25 views

Advantech iView performListSortUpdate DB_COLUMN SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Advantech iView. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NetworkServlet endpoint, which listens on TCP port 8080 by default. When...

7.5CVSS2.2AI score0.10506EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/06/30 12:00 a.m.•24 views

Advantech iView performZTPConfig SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech iView. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NetworkServlet endpoint, which listens on TCP port 8080 by default. When parsing any...

9.8CVSS4.4AI score0.10506EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/06/30 12:00 a.m.•38 views

Advantech iView NetworkServlet clearDatabase Missing Authentication Denial-of-Service Vulnerability

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Advantech iView. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NetworkServlet endpoint, which listens on TCP port 8080 by default. Th...

8.2CVSS2.1AI score0.11595EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/06/30 12:00 a.m.•23 views

Advantech iView getInventoryReportData sortname/sortorder SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Advantech iView. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NetworkServlet endpoint, which listens on TCP port 8080 by default. When...

7.5CVSS2.7AI score0.10506EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/06/30 12:00 a.m.•25 views

Advantech iView findCfgDeviceListDetailsExport filename Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech iView. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NetworkServlet endpoint, which listens on TCP port 8080 by default. When parsing the...

9.8CVSS5.4AI score0.16029EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/06/30 12:00 a.m.•26 views

Advantech iView removeSegment Missing Authentication Denial-of-Service Vulnerability

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Advantech iView. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NetworkServlet endpoint, which listens on TCP port 8080 by default. Th...

8.2CVSS2.9AI score0.11595EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/06/30 12:00 a.m.•29 views

Advantech iView removeDevices Missing Authentication Denial-of-Service Vulnerability

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Advantech iView. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NetworkServlet endpoint, which listens on TCP port 8080 by default. Th...

8.2CVSS3.2AI score0.11595EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/06/30 12:00 a.m.•40 views

Advantech iView runProViewUpgrade fwfilename Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech iView. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NetworkServlet endpoint, which listens on TCP port 8080 by default. When parsing the...

9.8CVSS5.8AI score0.60336EPSS
SaveExploits4References1
Zero Day Initiative
Zero Day Initiative
•added 2022/06/30 12:00 a.m.•37 views

Advantech iView exportDeviceList filename Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech iView. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NetworkServlet endpoint, which listens on TCP port 8080 by default. When parsing the...

9.8CVSS5.5AI score0.16029EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/06/30 12:00 a.m.•23 views

Advantech iView findSummaryUpdateDeviceList VALUE SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Advantech iView. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NetworkServlet endpoint, which listens on TCP port 8080 by default. When...

7.5CVSS2.9AI score0.10506EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/06/30 12:00 a.m.•23 views

Advantech iView getAllActiveTraps search_date_from/search_date_to SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech iView. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NetworkServlet endpoint, which listens on TCP port 8080 by default. When parsing the...

9.8CVSS5AI score0.10506EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/06/30 12:00 a.m.•26 views

Advantech iView findSummaryUpdateDeviceList COLUMN/VALUE SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech iView. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NetworkServlet endpoint, which listens on TCP port 8080 by default. When parsing the...

9.8CVSS5.6AI score0.10506EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/06/30 12:00 a.m.•35 views

Advantech iView findCfgDeviceListDetails segment/sort_field/sort_type SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Advantech iView. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NetworkServlet endpoint, which listens on TCP port 8080 by default. When...

7.5CVSS3.3AI score0.10506EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/06/30 12:00 a.m.•19 views

Advantech iView findCfgDeviceListDetailsExport segment SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Advantech iView. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NetworkServlet endpoint, which listens on TCP port 8080 by default. When...

7.5CVSS3.4AI score0.10506EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/06/30 12:00 a.m.•28 views

Advantech iView findCfgDeviceListExport segment SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Advantech iView. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NetworkServlet endpoint, which listens on TCP port 8080 by default. When...

7.5CVSS3.5AI score0.10506EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/06/30 12:00 a.m.•27 views

Advantech iView findCfgDeviceList VALUE SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Advantech iView. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NetworkServlet endpoint, which listens on TCP port 8080 by default. When...

7.5CVSS2.8AI score0.10506EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/06/30 12:00 a.m.•32 views

Advantech iView findTaskMgrItems sort_field/sort_type SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Advantech iView. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NetworkServlet endpoint, which listens on TCP port 8080 by default. When...

7.5CVSS2.5AI score0.10506EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/06/30 12:00 a.m.•21 views

Advantech iView getChassisList strIPAddress SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech iView. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NetworkServlet endpoint, which listens on TCP port 8080 by default. The issue result...

9.8CVSS2.2AI score0.10506EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/06/30 12:00 a.m.•28 views

Advantech iView findSummaryCfgDeviceList VALUE SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Advantech iView. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NetworkServlet endpoint, which listens on TCP port 8080 by default. When...

7.5CVSS3.1AI score0.10506EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/06/30 12:00 a.m.•29 views

Advantech iView getChassisList SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech iView. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NetworkServlet endpoint, which listens on TCP port 8080 by default. The issue result...

9.8CVSS2.2AI score0.10506EPSS
SaveExploits0References1
Rows per page
Query Builder