Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
AdvantechR-seenet2.4.15

26 matches found

CVE
CVE•added 2021/12/22 7:15 p.m.•60 views

CVE-2021-21937

A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger this vulnerability at ‘host_alt_filter’ parameter. This can be done as any authenticated user or through cross-site request forgery.

7.7CVSS6.8AI score0.01194EPSS
CVE
CVE•added 2021/12/22 7:15 p.m.•57 views

CVE-2021-21934

A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger this at ‘imei_filter’ parameter. This can be done as any authenticated user or through cross-site request forgery.

7.7CVSS6.8AI score0.01194EPSS
CVE
CVE•added 2021/12/22 7:15 p.m.•56 views

CVE-2021-21927

A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger these vulnerabilities. This can be done as any authenticated user or through cross-site request forgery at ‘loc_filter’ parameter.

7.7CVSS6.9AI score0.01194EPSS
CVE
CVE•added 2021/12/22 7:15 p.m.•54 views

CVE-2021-21926

A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger these vulnerabilities. This can be done as any authenticated user or through cross-site request forgery at ‘health_filter’ parameter.

7.7CVSS6.9AI score0.01194EPSS
CVE
CVE•added 2021/12/22 7:15 p.m.•54 views

CVE-2021-21933

A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger this at ‘esn_filter’ parameter. This can be done as any authenticated user or through cross-site request forgery.

7.7CVSS6.8AI score0.01194EPSS
CVE
CVE•added 2021/12/22 7:15 p.m.•53 views

CVE-2021-21916

An exploitable SQL injection vulnerability exist in the ‘group_list’ page of the Advantech R-SeeNet 2.4.15 (30.07.2021). A specially-crafted HTTP request at 'description_filter’ parameter. An attacker can make authenticated HTTP requests to trigger this vulnerability. This can be done as any authen...

8.8CVSS8.7AI score0.0125EPSS
CVE
CVE•added 2021/12/22 7:15 p.m.•51 views

CVE-2021-21924

A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger these vulnerabilities. This can be done as any authenticated user or through cross-site request forgery at ‘desc_filter’ parameter.

7.7CVSS6.9AI score0.05291EPSS
CVE
CVE•added 2021/12/22 7:15 p.m.•51 views

CVE-2021-21932

A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger this at ‘name_filter’ parameter. This can be done as any authenticated user or through cross-site request forgery.

7.7CVSS6.8AI score0.01194EPSS
CVE
CVE•added 2021/12/22 7:15 p.m.•50 views

CVE-2021-21918

A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger this vulnerability at ‘name_filter’ parameter. However, the high privilege super-administrator account needs to be used to achieve exploitation without cross-site request forgery ...

7.7CVSS5.3AI score0.01337EPSS
CVE
CVE•added 2021/12/22 7:15 p.m.•49 views

CVE-2021-21923

A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger this vulnerability at ‘company_filter’ parameter with the administrative account or through cross-site request forgery.

7.7CVSS5.5AI score0.01337EPSS
CVE
CVE•added 2021/12/22 7:15 p.m.•48 views

CVE-2021-21917

An exploitable SQL injection vulnerability exist in the ‘group_list’ page of the Advantech R-SeeNet 2.4.15 (30.07.2021). A specially-crafted HTTP request at '‘ord’ parameter. An attacker can make authenticated HTTP requests to trigger this vulnerability. This can be done as any authenticated user o...

8.8CVSS8.7AI score0.0125EPSS
CVE
CVE•added 2021/12/22 7:15 p.m.•48 views

CVE-2021-21929

A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests at ‘prod_filter’ parameter to trigger this vulnerability. This can be done as any authenticated user or through cross-site request forgery.

7.7CVSS6.8AI score0.01194EPSS
CVE
CVE•added 2021/12/22 7:15 p.m.•47 views

CVE-2021-21910

A privilege escalation vulnerability exists in the Windows version of installation for Advantech R-SeeNet Advantech R-SeeNet 2.4.15 (30.07.2021). A specially-crafted file can be replaced in the system to escalate privileges to NT SYSTEM authority. An attacker can provide a malicious file to trigger...

8.8CVSS7.8AI score0.00038EPSS
CVE
CVE•added 2021/12/22 7:15 p.m.•47 views

CVE-2021-21925

A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger these vulnerabilities. This can be done as any authenticated user or through cross-site request forgery at ‘firm_filter’ parameter.

7.7CVSS6.9AI score0.01194EPSS
CVE
CVE•added 2021/12/22 7:15 p.m.•46 views

CVE-2021-21928

A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests at ‘mac_filter’ parameter to trigger this vulnerability. This can be done as any authenticated user or through cross-site request forgery.

7.7CVSS6.8AI score0.01194EPSS
CVE
CVE•added 2021/12/22 7:15 p.m.•45 views

CVE-2021-21915

An exploitable SQL injection vulnerability exist in the ‘group_list’ page of the Advantech R-SeeNet 2.4.15 (30.07.2021). A specially-crafted HTTP request at ‘company_filter’ parameter. An attacker can make authenticated HTTP requests to trigger this vulnerability. This can be done as any authentica...

8.8CVSS8.7AI score0.0125EPSS
CVE
CVE•added 2021/12/22 7:15 p.m.•44 views

CVE-2021-21936

A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger this vulnerability at ‘health_alt_filter’ parameter. This can be done as any authenticated user or through cross-site request forgery.

8.8CVSS8.7AI score0.0112EPSS
CVE
CVE•added 2021/12/22 7:15 p.m.•42 views

CVE-2021-21911

A privilege escalation vulnerability exists in the Windows version of installation for Advantech R-SeeNet Advantech R-SeeNet 2.4.15 (30.07.2021). A specially-crafted file can be replaced in the system to escalate privileges to NT SYSTEM authority. An attacker can provide a malicious file to trigger...

8.8CVSS7.8AI score0.00038EPSS
CVE
CVE•added 2021/12/22 7:15 p.m.•42 views

CVE-2021-21919

A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger this vulnerability at ord’ parameter. However, the high privilege super-administrator account needs to be used to achieve exploitation without cross-site request forgery attack.

7.7CVSS5.3AI score0.01337EPSS
CVE
CVE•added 2021/12/22 7:15 p.m.•42 views

CVE-2021-21922

A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger this vulnerability at ‘username_filter’ parameter with the administrative account or through cross-site request forgery.

7.7CVSS6.6AI score0.01194EPSS
CVE
CVE•added 2021/12/22 7:15 p.m.•42 views

CVE-2021-21930

A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests at ‘sn_filter’ parameter to trigger this vulnerability. This can be done as any authenticated user or through cross-site request forgery.

7.7CVSS6.8AI score0.01194EPSS
CVE
CVE•added 2021/12/22 7:15 p.m.•42 views

CVE-2021-21935

A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger this vulnerability at ‘host_alt_filter2’ parameter. This can be done as any authenticated user or through cross-site request forgery.

7.7CVSS6.8AI score0.01194EPSS
CVE
CVE•added 2021/12/22 7:15 p.m.•41 views

CVE-2021-21920

A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger this vulnerability at ‘surname_filter’ parameter with the administrative account or through cross-site request forgery.

7.7CVSS5.5AI score0.01337EPSS
CVE
CVE•added 2021/12/22 7:15 p.m.•41 views

CVE-2021-21931

A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests at‘ stat_filter’ parameter to trigger this vulnerability. This can be done as any authenticated user or through cross-site request forgery.

7.7CVSS6.8AI score0.01194EPSS
CVE
CVE•added 2021/12/22 7:15 p.m.•40 views

CVE-2021-21912

A privilege escalation vulnerability exists in the Windows version of installation for Advantech R-SeeNet Advantech R-SeeNet 2.4.15 (30.07.2021). A specially-crafted file can be replaced in the system to escalate privileges to NT SYSTEM authority. An attacker can provide a malicious file to trigger...

8.8CVSS7.8AI score0.00108EPSS
CVE
CVE•added 2021/12/22 7:15 p.m.•39 views

CVE-2021-21921

A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger this vulnerability at ‘name_filter’ parameter with the administrative account or through cross-site request forgery.

7.7CVSS5.5AI score0.01337EPSS