Lucene search
+L

2614 matches found

NVD
NVD
added 2021/12/22 7:15 p.m.30 views

CVE-2021-21917

An exploitable SQL injection vulnerability exist in the ‘grouplist’ page of the Advantech R-SeeNet 2.4.15 30.07.2021. A specially-crafted HTTP request at '‘ord’ parameter. An attacker can make authenticated HTTP requests to trigger this vulnerability. This can be done as any authenticated user or...

8.8CVSS0.0138EPSS
SaveExploits1References1
NVD
NVD
added 2021/12/22 7:15 p.m.37 views

CVE-2021-21911

A privilege escalation vulnerability exists in the Windows version of installation for Advantech R-SeeNet Advantech R-SeeNet 2.4.15 30.07.2021. A specially-crafted file can be replaced in the system to escalate privileges to NT SYSTEM authority. An attacker can provide a malicious file to trigger...

8.8CVSS0.00314EPSS
SaveExploits1References1
NVD
NVD
added 2021/12/22 7:15 p.m.28 views

CVE-2021-21915

An exploitable SQL injection vulnerability exist in the ‘grouplist’ page of the Advantech R-SeeNet 2.4.15 30.07.2021. A specially-crafted HTTP request at ‘companyfilter’ parameter. An attacker can make authenticated HTTP requests to trigger this vulnerability. This can be done as any authenticate...

8.8CVSS0.0138EPSS
SaveExploits1References1
OSV
OSV
added 2021/12/22 7:15 p.m.11 views

CVE-2021-21912

A privilege escalation vulnerability exists in the Windows version of installation for Advantech R-SeeNet Advantech R-SeeNet 2.4.15 30.07.2021. A specially-crafted file can be replaced in the system to escalate privileges to NT SYSTEM authority. An attacker can provide a malicious file to trigger...

7.8CVSS7.1AI score0.00378EPSS
SaveExploits1References1
OSV
OSV
added 2021/12/22 7:15 p.m.9 views

CVE-2021-21915

An exploitable SQL injection vulnerability exist in the ‘grouplist’ page of the Advantech R-SeeNet 2.4.15 30.07.2021. A specially-crafted HTTP request at ‘companyfilter’ parameter. An attacker can make authenticated HTTP requests to trigger this vulnerability. This can be done as any authenticate...

8.8CVSS7.1AI score0.0138EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2021/12/22 7:15 p.m.8 views

CVE-2021-21915

An exploitable SQL injection vulnerability exist in the ‘grouplist’ page of the Advantech R-SeeNet 2.4.15 30.07.2021. A specially-crafted HTTP request at ‘companyfilter’ parameter. An attacker can make authenticated HTTP requests to trigger this vulnerability. This can be done as any authenticate...

8.8CVSS7AI score0.0138EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2021/12/22 7:15 p.m.8 views

CVE-2021-21911

A privilege escalation vulnerability exists in the Windows version of installation for Advantech R-SeeNet Advantech R-SeeNet 2.4.15 30.07.2021. A specially-crafted file can be replaced in the system to escalate privileges to NT SYSTEM authority. An attacker can provide a malicious file to trigger...

8.8CVSS7.1AI score0.00314EPSS
SaveExploits1References2
OSV
OSV
added 2021/12/22 7:15 p.m.9 views

CVE-2021-21916

An exploitable SQL injection vulnerability exist in the ‘grouplist’ page of the Advantech R-SeeNet 2.4.15 30.07.2021. A specially-crafted HTTP request at 'descriptionfilter’ parameter. An attacker can make authenticated HTTP requests to trigger this vulnerability. This can be done as any...

8.8CVSS7.1AI score0.0138EPSS
SaveExploits1References1
OSV
OSV
added 2021/12/22 7:15 p.m.9 views

CVE-2021-21910

A privilege escalation vulnerability exists in the Windows version of installation for Advantech R-SeeNet Advantech R-SeeNet 2.4.15 30.07.2021. A specially-crafted file can be replaced in the system to escalate privileges to NT SYSTEM authority. An attacker can provide a malicious file to trigger...

7.8CVSS7.1AI score0.00314EPSS
SaveExploits1References1
NVD
NVD
added 2021/12/22 7:15 p.m.44 views

CVE-2021-21910

A privilege escalation vulnerability exists in the Windows version of installation for Advantech R-SeeNet Advantech R-SeeNet 2.4.15 30.07.2021. A specially-crafted file can be replaced in the system to escalate privileges to NT SYSTEM authority. An attacker can provide a malicious file to trigger...

8.8CVSS0.00314EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2021/12/22 7:15 p.m.7 views

CVE-2021-21910

A privilege escalation vulnerability exists in the Windows version of installation for Advantech R-SeeNet Advantech R-SeeNet 2.4.15 30.07.2021. A specially-crafted file can be replaced in the system to escalate privileges to NT SYSTEM authority. An attacker can provide a malicious file to trigger...

8.8CVSS7.1AI score0.00314EPSS
SaveExploits1References2
Prion
Prion
added 2021/12/22 7:15 p.m.24 views

Privilege escalation

A privilege escalation vulnerability exists in the Windows version of installation for Advantech R-SeeNet Advantech R-SeeNet 2.4.15 30.07.2021. A specially-crafted file can be replaced in the system to escalate privileges to NT SYSTEM authority. An attacker can provide a malicious file to trigger...

7.2CVSS8AI score0.00314EPSS
SaveExploits1References1Affected Software1
Prion
Prion
added 2021/12/22 7:15 p.m.25 views

Privilege escalation

A privilege escalation vulnerability exists in the Windows version of installation for Advantech R-SeeNet Advantech R-SeeNet 2.4.15 30.07.2021. A specially-crafted file can be replaced in the system to escalate privileges to NT SYSTEM authority. An attacker can provide a malicious file to trigger...

7.2CVSS8AI score0.00378EPSS
SaveExploits1References1Affected Software1
Prion
Prion
added 2021/12/22 7:15 p.m.22 views

Privilege escalation

A privilege escalation vulnerability exists in the Windows version of installation for Advantech R-SeeNet Advantech R-SeeNet 2.4.15 30.07.2021. A specially-crafted file can be replaced in the system to escalate privileges to NT SYSTEM authority. An attacker can provide a malicious file to trigger...

7.2CVSS8AI score0.00314EPSS
SaveExploits1References1Affected Software1
Prion
Prion
added 2021/12/22 7:15 p.m.22 views

Sql injection

An exploitable SQL injection vulnerability exist in the ‘grouplist’ page of the Advantech R-SeeNet 2.4.15 30.07.2021. A specially-crafted HTTP request at ‘companyfilter’ parameter. An attacker can make authenticated HTTP requests to trigger this vulnerability. This can be done as any authenticate...

6.5CVSS8.7AI score0.0138EPSS
SaveExploits1References1Affected Software1
Prion
Prion
added 2021/12/22 7:15 p.m.27 views

Sql injection

An exploitable SQL injection vulnerability exist in the ‘grouplist’ page of the Advantech R-SeeNet 2.4.15 30.07.2021. A specially-crafted HTTP request at '‘ord’ parameter. An attacker can make authenticated HTTP requests to trigger this vulnerability. This can be done as any authenticated user or...

6.5CVSS8.7AI score0.0138EPSS
SaveExploits1References1Affected Software1
Prion
Prion
added 2021/12/22 7:15 p.m.25 views

Sql injection

An exploitable SQL injection vulnerability exist in the ‘grouplist’ page of the Advantech R-SeeNet 2.4.15 30.07.2021. A specially-crafted HTTP request at 'descriptionfilter’ parameter. An attacker can make authenticated HTTP requests to trigger this vulnerability. This can be done as any...

6.5CVSS8.7AI score0.0138EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2021/12/22 6:06 p.m.35 views

CVE-2021-21916

An exploitable SQL injection vulnerability exist in the ‘grouplist’ page of the Advantech R-SeeNet 2.4.15 30.07.2021. A specially-crafted HTTP request at 'descriptionfilter’ parameter. An attacker can make authenticated HTTP requests to trigger this vulnerability. This can be done as any...

7.7CVSS9AI score0.0138EPSS
SaveExploits1References1
CVE
CVE
added 2021/12/22 6:06 p.m.76 views

CVE-2021-21917

CVE-2021-21917 highlights multiple SQL injection vulnerabilities in Advantech R-SeeNet, specifically in the group_list page of version 2.4.15 (and prior). The root cause is improper neutralization/handling of user-supplied input in several parameters used to build SQL queries (ord, company_filter...

8.8CVSS8.7AI score0.0138EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2021/12/22 6:06 p.m.49 views

CVE-2021-21917

An exploitable SQL injection vulnerability exist in the ‘grouplist’ page of the Advantech R-SeeNet 2.4.15 30.07.2021. A specially-crafted HTTP request at '‘ord’ parameter. An attacker can make authenticated HTTP requests to trigger this vulnerability. This can be done as any authenticated user or...

7.7CVSS9AI score0.0138EPSS
SaveExploits1References1
Rows per page
Query Builder