Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
AdvantechR-seenet

8 matches found

CVE
CVE•added 2021/12/22 7:15 p.m.•53 views

CVE-2021-21916

An exploitable SQL injection vulnerability exist in the ‘group_list’ page of the Advantech R-SeeNet 2.4.15 (30.07.2021). A specially-crafted HTTP request at 'description_filter’ parameter. An attacker can make authenticated HTTP requests to trigger this vulnerability. This can be done as any authen...

8.8CVSS8.7AI score0.0125EPSS
CVE
CVE•added 2023/06/22 5:15 p.m.•52 views

CVE-2023-3256

Advantech R-SeeNetversions 2.4.22allows low-level users to access and load the content of local files.

8.8CVSS8AI score0.00066EPSS
CVE
CVE•added 2021/12/22 7:15 p.m.•48 views

CVE-2021-21917

An exploitable SQL injection vulnerability exist in the ‘group_list’ page of the Advantech R-SeeNet 2.4.15 (30.07.2021). A specially-crafted HTTP request at '‘ord’ parameter. An attacker can make authenticated HTTP requests to trigger this vulnerability. This can be done as any authenticated user o...

8.8CVSS8.7AI score0.0125EPSS
CVE
CVE•added 2021/12/22 7:15 p.m.•47 views

CVE-2021-21910

A privilege escalation vulnerability exists in the Windows version of installation for Advantech R-SeeNet Advantech R-SeeNet 2.4.15 (30.07.2021). A specially-crafted file can be replaced in the system to escalate privileges to NT SYSTEM authority. An attacker can provide a malicious file to trigger...

8.8CVSS7.8AI score0.00038EPSS
CVE
CVE•added 2021/12/22 7:15 p.m.•45 views

CVE-2021-21915

An exploitable SQL injection vulnerability exist in the ‘group_list’ page of the Advantech R-SeeNet 2.4.15 (30.07.2021). A specially-crafted HTTP request at ‘company_filter’ parameter. An attacker can make authenticated HTTP requests to trigger this vulnerability. This can be done as any authentica...

8.8CVSS8.7AI score0.0125EPSS
CVE
CVE•added 2021/12/22 7:15 p.m.•44 views

CVE-2021-21936

A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger this vulnerability at ‘health_alt_filter’ parameter. This can be done as any authenticated user or through cross-site request forgery.

8.8CVSS8.7AI score0.0112EPSS
CVE
CVE•added 2021/12/22 7:15 p.m.•42 views

CVE-2021-21911

A privilege escalation vulnerability exists in the Windows version of installation for Advantech R-SeeNet Advantech R-SeeNet 2.4.15 (30.07.2021). A specially-crafted file can be replaced in the system to escalate privileges to NT SYSTEM authority. An attacker can provide a malicious file to trigger...

8.8CVSS7.8AI score0.00038EPSS
CVE
CVE•added 2021/12/22 7:15 p.m.•40 views

CVE-2021-21912

A privilege escalation vulnerability exists in the Windows version of installation for Advantech R-SeeNet Advantech R-SeeNet 2.4.15 (30.07.2021). A specially-crafted file can be replaced in the system to escalate privileges to NT SYSTEM authority. An attacker can provide a malicious file to trigger...

8.8CVSS7.8AI score0.00108EPSS