https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 08:25:53 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-08966 bdu:2025-08966 https://cve.radiocsirt.org/vuln/bdu:2025-08966 https://cve.radiocsirt.org/vuln/cnvd-2025-17829 cnvd-2025-17829 https://cve.radiocsirt.org/vuln/cnvd-2025-17829 https://cve.radiocsirt.org/vuln/euvd-2026-247356 EUVD-2026-247356 https://cve.radiocsirt.org/vuln/euvd-2026-247356 https://cve.radiocsirt.org/vuln/fkie_cve-2025-53509 <p>A vulnerability exists in Advantech iView that allows for argument injection in the NetworkServlet.restoreDatabase(). This issue requires an authenticated attacker with at least user-level privileges. An input parameter can be used directly in a command without proper sanitization, allowing arbitrary arguments to be injected. This can result in information disclosure, including sensitive database credentials.</p> <p>A vulnerability exists in Advantech iView that allows for argument injection in the NetworkServlet.restoreDatabase(). This issue requires an authenticated attacker with at least user-level privileges. An input parameter can be used directly in a command without proper sanitization, allowing arbitrary arguments to be injected. This can result in information disclosure, including sensitive database credentials.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-53509 https://cve.radiocsirt.org/vuln/ghsa-pw4m-7r53-w9mr <p>A vulnerability exists in Advantech iView that allows for argument injection in the NetworkServlet.restoreDatabase(). This issue requires an authenticated attacker with at least user-level privileges. An input parameter can be used directly in a command without proper sanitization, allowing arbitrary arguments to be injected. This can result in information disclosure, including sensitive database credentials.</p> <p>A vulnerability exists in Advantech iView that allows for argument injection in the NetworkServlet.restoreDatabase(). This issue requires an authenticated attacker with at least user-level privileges. An input parameter can be used directly in a command without proper sanitization, allowing arbitrary arguments to be injected. This can result in information disclosure, including sensitive database credentials.</p> https://cve.radiocsirt.org/vuln/ghsa-pw4m-7r53-w9mr https://cve.radiocsirt.org/vuln/icsa-25-191-08 <p>A vulnerability exists in Advantech iView versions prior to 5.7.05 build 7057, which could allow a reflected cross-site scripting (XSS) attack. By exploiting this flaw, an attacker could execute unauthorized scripts in the user&#39;s browser, potentially leading to information disclosure or other malicious activities. A vulnerability exists in Advantech iView versions prior to 5.7.05 build 7057, which could allow a reflected cross-site scripting (XSS) attack. By manipulating specific parameters, an attacker could execute unauthorized scripts in the user&#39;s browser, potentially leading to information disclosure or other malicious activities. A vulnerability exists in Advantech iView versions prior to 5.7.05 build 7057, which could allow a reflected cross-site scripting (XSS) attack. By manipulating certain input parameters, an attacker could execute unauthorized scripts in the user&#39;s browser, potentially leading to information disclosure or other malicious activities. A vulnerability exists in Advantech iView that could allow for SQL injection through the CUtils.checkSQLInjection() function. This vulnerability can be exploited by an authenticated attacker with at least user-level privileges, potentially leading to information disclosure or a denial-of-service condition. A vulnerability exists in Advantech iView in NetworkServlet.processImportRequest() that could allow for a directory traversal attack. This issue requires an authenticated attacker with at least user-level privilege…</p> <p>A vulnerability exists in Advantech iView versions prior to 5.7.05 build 7057, which could allow a reflected cross-site scripting (XSS) attack. By exploiting this flaw, an attacker could execute unauthorized scripts in the user&#39;s browser, potentially leading to information disclosure or other malicious activities. A vulnerability exists in Advantech iView versions prior to 5.7.05 build 7057, which could allow a reflected cross-site scripting (XSS) attack. By manipulating specific parameters, an attacker could execute unauthorized scripts in the user&#39;s browser, potentially leading to information disclosure or other malicious activities. A vulnerability exists in Advantech iView versions prior to 5.7.05 build 7057, which could allow a reflected cross-site scripting (XSS) attack. By manipulating certain input parameters, an attacker could execute unauthorized scripts in the user&#39;s browser, potentially leading to information disclosure or other malicious activities. A vulnerability exists in Advantech iView that could allow for SQL injection through the CUtils.checkSQLInjection() function. This vulnerability can be exploited by an authenticated attacker with at least user-level privileges, potentially leading to information disclosure or a denial-of-service condition. A vulnerability exists in Advantech iView in NetworkServlet.processImportRequest() that could allow for a directory traversal attack. This issue requires an authenticated attacker with at least user-level privilege…</p> https://cve.radiocsirt.org/vuln/icsa-25-191-08