3135 matches found
PT-2024-4875 · Solarwinds · Solarwinds Access Rights Manager
Name of the Vulnerable Software and Affected Versions: SolarWinds Access Rights Manager affected versions not specified Description: The issue is related to the createGlobalServerChannelInternal method in SolarWinds Access Rights Manager, which has weaknesses in its deserialization mechanism. Thi...
Microsoft Executives’ Emails Breached by Russia Hackers
By Waqas The SolarWinds-infamous hackers, Nobelium, have struck again. This is a post from HackRead.com Read the original post: Microsoft Executives Emails Breached by Russia Hackers...
PT-2024-4877 · Solarwinds · Solarwinds Access Rights Manager
Name of the Vulnerable Software and Affected Versions: SolarWinds Access Rights Manager ARM affected versions not specified Description: The issue is related to a Directory Traversal Remote Code Execution vulnerability in the Connect method of SolarWinds Access Rights Manager ARM. This...
PT-2024-1932
Name of the Vulnerable Software and Affected Versions SolarWinds Security Event Manager affected versions not specified Description The SolarWinds Security Event Manager is susceptible to a Remote Code Execution vulnerability. This issue allows an unauthenticated user to abuse SolarWinds' service...
PT-2024-4873 · Solarwinds · Solarwinds Access Rights Manager
Name of the Vulnerable Software and Affected Versions: SolarWinds Access Rights Manager affected versions not specified Description: The issue is related to a Directory Traversal and Information Disclosure vulnerability in the SolarWinds Access Rights Manager. This vulnerability allows an...
PT-2024-4874 · Solarwinds · Solarwinds Access Rights Manager
Name of the Vulnerable Software and Affected Versions: SolarWinds Access Rights Manager affected versions not specified Description: The issue is related to the use of dangerous methods or functions in the UserScriptHumster class of the SolarWinds Access Rights Manager. This allows an...
PT-2024-5112 · Solarwinds · Solarwinds Access Rights Manager
Name of the Vulnerable Software and Affected Versions: SolarWinds Access Rights Manager ARM affected versions not specified Description: The issue is related to a Directory Traversal vulnerability, which allows an authenticated user to arbitrarily read and delete files in ARM. This is due to...
PT-2024-4876 · Solarwinds · Solarwinds Access Rights Manager
Name of the Vulnerable Software and Affected Versions: SolarWinds Access Rights Manager ARM affected versions not specified Description: The issue is related to a Remote Code Execution vulnerability in the SolarWinds Access Rights Manager ARM. If exploited, this vulnerability allows an...
PT-2024-5109 · Solarwinds · Solarwinds Access Rights Manager
Name of the Vulnerable Software and Affected Versions: SolarWinds Access Rights Manager affected versions not specified Description: The issue is related to an Arbitrary File Deletion and Information Disclosure vulnerability in the SolarWinds Access Rights Manager. This vulnerability is associate...
SolarWinds Access Rights Manager Hardcoded Credentials Authentication Bypass Vulnerability
This vulnerability allows remote attackers to bypass authentication on affected installations of SolarWinds Access Rights Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the configuration of a RabbitMQ instance. The issue results from the use...
PT-2023-27242 · Solarwinds · Solarwinds Access Rights Manager
Name of the Vulnerable Software and Affected Versions: SolarWinds Access Rights Manager affected versions not specified Description: Sensitive data was added to a public-facing knowledgebase, which could be exploited to access components of Access Rights Manager ARM if the threat actor is in the...
SolarWinds Access Rights Manager Information Disclosure Vulnerability
SolarWinds Access Rights Manager is a lightweight review management system from SolarWinds, Inc. An information disclosure vulnerability exists in SolarWinds Access Rights Manager ARM versions 2023.2.1 and earlier, which stems from the presence of an information disclosure vulnerability...
Russian Foreign Intelligence Service (SVR) Exploiting JetBrains TeamCity CVE Globally
SUMMARY The U.S. Federal Bureau of Investigation FBI, U.S. Cybersecurity & Infrastructure Security Agency CISA, U.S. National Security Agency NSA, Polish Military Counterintelligence Service SKW, CERT Polska CERT.PL, and the UK’s National Cyber Security Centre NCSC assess Russian Foreign...
The vulnerability of the BlacklistedFilesChecker software module in SolarWinds Orion Platform allows a hacker to execute arbitrary code.
The vulnerability of the BlacklistedFilesChecker software for network monitoring on the SolarWinds Orion Platform exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code within the SYSTEM conte...
SolarWinds Serv-U FTP Server Input Validation Error Vulnerability
SolarWinds Serv-U FTP Server is a suite of FTP and MFT file transfer software from the US-based SolarWinds Corporation. An input validation error vulnerability exists in SolarWinds Serv-U FTP Server version 15.4, which originates from allowing an authenticated attacker to insert content on the fi...
SolarWinds Serv-U 15.4 < 15.4.1
The version of SolarWinds Serv-U installed on the remote host is prior to 15.4.1. It is, therefore, affected by a vulnerability as referenced in the serv-u1541 advisory. - A vulnerability has been identified within Serv-U 15.4 that allows an authenticated actor to insert content on the file share...
SolarWinds Platform 2023.3.x < 2023.3.1 Multiple Vulnerabilities
The version of SolarWinds Platform installed on the remote host is prior to 2023.3. It is, therefore, affected by multiple vulnerabilities as referenced in the security advisory. - The SolarWinds Platform was susceptible to the Incorrect Comparison Vulnerability. This vulnerability allows users...
SolarWinds Platform 2023.3.0 < 2023.4.2 SQLi
The version of SolarWinds Platform installed on the remote host is prior to 2023.4.2. It is, therefore, affected by a sql injection vulnerability as referenced in the solarwindsplatform202342 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application...
