Lucene search
+L

3135 matches found

Zero Day Initiative
Zero Day Initiative
added 2023/02/24 12:00 a.m.36 views

SolarWinds Network Performance Monitor CredentialInitializer Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Network Performance Monitor. Authentication is required to exploit this vulnerability. The specific flaw exists within the CredentialInitializer function. The issue results from the lack o...

8.8CVSS7.6AI score0.80298EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/02/24 12:00 a.m.36 views

SolarWinds Orion Platform BytesToMessage Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Orion Platform. Authentication is required to exploit this vulnerability. The specific flaw exists within the BytesToMessage function. The issue results from the lack of proper validation ...

7.2CVSS3.7AI score0.84803EPSS
SaveExploits0References1
OSV
OSV
added 2023/02/15 7:15 p.m.11 views

CVE-2023-23836

SolarWinds Platform version 2022.4.1 was found to be susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with Orion admin-level account access to the SolarWinds Web Console to execute arbitrary commands...

7.2CVSS6AI score0.80298EPSS
SaveExploits0References2
NVD
NVD
added 2023/02/15 7:15 p.m.28 views

CVE-2023-23836

SolarWinds Platform version 2022.4.1 was found to be susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with Orion admin-level account access to the SolarWinds Web Console to execute arbitrary commands...

7.2CVSS7.2AI score0.80298EPSS
SaveExploits0References2
NVD
NVD
added 2023/02/15 7:15 p.m.42 views

CVE-2022-47506

SolarWinds Platform was susceptible to the Directory Traversal Vulnerability. This vulnerability allows a local adversary with authenticated account access to edit the default configuration, enabling the execution of arbitrary commands...

7.8CVSS7.5AI score0.00627EPSS
SaveExploits0References2
OSV
OSV
added 2023/02/15 7:15 p.m.11 views

CVE-2022-47506

SolarWinds Platform was susceptible to the Directory Traversal Vulnerability. This vulnerability allows a local adversary with authenticated account access to edit the default configuration, enabling the execution of arbitrary commands...

7.8CVSS6AI score0.00627EPSS
SaveExploits0References2
OSV
OSV
added 2023/02/15 7:15 p.m.15 views

CVE-2022-47507

SolarWinds Platform was susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with Orion admin-level account access to SolarWinds Web Console to execute arbitrary commands...

7.2CVSS6AI score0.07175EPSS
SaveExploits0References2
NVD
NVD
added 2023/02/15 7:15 p.m.26 views

CVE-2022-47507

SolarWinds Platform was susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with Orion admin-level account access to SolarWinds Web Console to execute arbitrary commands...

7.2CVSS7.2AI score0.07175EPSS
SaveExploits0References2
OSV
OSV
added 2023/02/15 7:15 p.m.14 views

CVE-2022-38111

SolarWinds Platform was susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with Orion admin-level account access to SolarWinds Web Console to execute arbitrary commands...

7.2CVSS6AI score0.84803EPSS
SaveExploits0References2
NVD
NVD
added 2023/02/15 7:15 p.m.32 views

CVE-2022-38111

SolarWinds Platform was susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with Orion admin-level account access to SolarWinds Web Console to execute arbitrary commands...

7.2CVSS7.2AI score0.84803EPSS
SaveExploits0References2
OSV
OSV
added 2023/02/15 7:15 p.m.11 views

CVE-2022-47504

SolarWinds Platform was susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with Orion admin-level account access to SolarWinds Web Console to execute arbitrary commands...

7.2CVSS6AI score0.25061EPSS
SaveExploits0References2
OSV
OSV
added 2023/02/15 7:15 p.m.11 views

CVE-2022-47503

SolarWinds Platform was susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with Orion admin-level account access to SolarWinds Web Console to execute arbitrary commands...

7.2CVSS6AI score0.24439EPSS
SaveExploits0References2
NVD
NVD
added 2023/02/15 7:15 p.m.22 views

CVE-2022-47503

SolarWinds Platform was susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with Orion admin-level account access to SolarWinds Web Console to execute arbitrary commands...

7.2CVSS7.2AI score0.24439EPSS
SaveExploits0References2
NVD
NVD
added 2023/02/15 7:15 p.m.24 views

CVE-2022-47504

SolarWinds Platform was susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with Orion admin-level account access to SolarWinds Web Console to execute arbitrary commands...

7.2CVSS7.2AI score0.25061EPSS
SaveExploits0References2
Prion
Prion
added 2023/02/15 7:15 p.m.23 views

Deserialization of untrusted data

SolarWinds Platform was susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with Orion admin-level account access to SolarWinds Web Console to execute arbitrary commands...

5.8CVSS7.2AI score0.25061EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2023/02/15 7:15 p.m.30 views

Deserialization of untrusted data

SolarWinds Platform version 2022.4.1 was found to be susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with Orion admin-level account access to the SolarWinds Web Console to execute arbitrary commands...

5.8CVSS7.2AI score0.80298EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2023/02/15 7:15 p.m.25 views

Deserialization of untrusted data

SolarWinds Platform was susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with Orion admin-level account access to SolarWinds Web Console to execute arbitrary commands...

5.8CVSS7.2AI score0.84803EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2023/02/15 7:15 p.m.21 views

Deserialization of untrusted data

SolarWinds Platform was susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with Orion admin-level account access to SolarWinds Web Console to execute arbitrary commands...

5.8CVSS7.2AI score0.24439EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2023/02/15 7:15 p.m.29 views

Directory traversal

SolarWinds Platform was susceptible to the Directory Traversal Vulnerability. This vulnerability allows a local adversary with authenticated account access to edit the default configuration, enabling the execution of arbitrary commands...

4.3CVSS7.4AI score0.00627EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2023/02/15 7:15 p.m.34 views

Deserialization of untrusted data

SolarWinds Platform was susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with Orion admin-level account access to SolarWinds Web Console to execute arbitrary commands...

5.8CVSS7.2AI score0.07175EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder