https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 18:32:41 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-08967 bdu:2025-08967 https://cve.radiocsirt.org/vuln/bdu:2025-08967 https://cve.radiocsirt.org/vuln/cnvd-2025-17830 cnvd-2025-17830 https://cve.radiocsirt.org/vuln/cnvd-2025-17830 https://cve.radiocsirt.org/vuln/euvd-2026-247369 EUVD-2026-247369 https://cve.radiocsirt.org/vuln/euvd-2026-247369 https://cve.radiocsirt.org/vuln/fkie_cve-2025-52577 <p>A vulnerability exists in Advantech iView that could allow SQL injection and remote code execution through NetworkServlet.archiveTrapRange(). This issue requires an authenticated attacker with at least user-level privileges. Certain input parameters are not properly sanitized, allowing an attacker to perform SQL injection and potentially execute code in the context of the &#39;nt authority\local service&#39; account.</p> <p>A vulnerability exists in Advantech iView that could allow SQL injection and remote code execution through NetworkServlet.archiveTrapRange(). This issue requires an authenticated attacker with at least user-level privileges. Certain input parameters are not properly sanitized, allowing an attacker to perform SQL injection and potentially execute code in the context of the &#39;nt authority\local service&#39; account.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-52577 https://cve.radiocsirt.org/vuln/ghsa-5fv5-hvwx-g2h9 <p>A vulnerability exists in Advantech iView that could allow SQL injection and remote code execution through NetworkServlet.archiveTrapRange(). This issue requires an authenticated attacker with at least user-level privileges. Certain input parameters are not properly sanitized, allowing an attacker to perform SQL injection and potentially execute code in the context of the &#39;nt authority\local service&#39; account.</p> <p>A vulnerability exists in Advantech iView that could allow SQL injection and remote code execution through NetworkServlet.archiveTrapRange(). This issue requires an authenticated attacker with at least user-level privileges. Certain input parameters are not properly sanitized, allowing an attacker to perform SQL injection and potentially execute code in the context of the &#39;nt authority\local service&#39; account.</p> https://cve.radiocsirt.org/vuln/ghsa-5fv5-hvwx-g2h9 https://cve.radiocsirt.org/vuln/icsa-25-191-08 <p>A vulnerability exists in Advantech iView versions prior to 5.7.05 build 7057, which could allow a reflected cross-site scripting (XSS) attack. By exploiting this flaw, an attacker could execute unauthorized scripts in the user&#39;s browser, potentially leading to information disclosure or other malicious activities. A vulnerability exists in Advantech iView versions prior to 5.7.05 build 7057, which could allow a reflected cross-site scripting (XSS) attack. By manipulating specific parameters, an attacker could execute unauthorized scripts in the user&#39;s browser, potentially leading to information disclosure or other malicious activities. A vulnerability exists in Advantech iView versions prior to 5.7.05 build 7057, which could allow a reflected cross-site scripting (XSS) attack. By manipulating certain input parameters, an attacker could execute unauthorized scripts in the user&#39;s browser, potentially leading to information disclosure or other malicious activities. A vulnerability exists in Advantech iView that could allow for SQL injection through the CUtils.checkSQLInjection() function. This vulnerability can be exploited by an authenticated attacker with at least user-level privileges, potentially leading to information disclosure or a denial-of-service condition. A vulnerability exists in Advantech iView in NetworkServlet.processImportRequest() that could allow for a directory traversal attack. This issue requires an authenticated attacker with at least user-level privilege…</p> <p>A vulnerability exists in Advantech iView versions prior to 5.7.05 build 7057, which could allow a reflected cross-site scripting (XSS) attack. By exploiting this flaw, an attacker could execute unauthorized scripts in the user&#39;s browser, potentially leading to information disclosure or other malicious activities. A vulnerability exists in Advantech iView versions prior to 5.7.05 build 7057, which could allow a reflected cross-site scripting (XSS) attack. By manipulating specific parameters, an attacker could execute unauthorized scripts in the user&#39;s browser, potentially leading to information disclosure or other malicious activities. A vulnerability exists in Advantech iView versions prior to 5.7.05 build 7057, which could allow a reflected cross-site scripting (XSS) attack. By manipulating certain input parameters, an attacker could execute unauthorized scripts in the user&#39;s browser, potentially leading to information disclosure or other malicious activities. A vulnerability exists in Advantech iView that could allow for SQL injection through the CUtils.checkSQLInjection() function. This vulnerability can be exploited by an authenticated attacker with at least user-level privileges, potentially leading to information disclosure or a denial-of-service condition. A vulnerability exists in Advantech iView in NetworkServlet.processImportRequest() that could allow for a directory traversal attack. This issue requires an authenticated attacker with at least user-level privilege…</p> https://cve.radiocsirt.org/vuln/icsa-25-191-08