CVE-2021-35247 Improper Input Validation Vulnerability in Serv-U

Serv-U web login screen to LDAP authentication was allowing characters that were not sufficiently sanitized. SolarWinds has updated the input mechanism to perform additional validation and sanitization. Please Note: No downstream affect has been detected as the LDAP servers ignored improper...

CVE-2021-35247 Improper Input Validation Vulnerability in Serv-U

Serv-U web login screen to LDAP authentication was allowing characters that were not sufficiently sanitized. SolarWinds has updated the input mechanism to perform additional validation and sanitization. Please Note: No downstream affect has been detected as the LDAP servers ignored improper...

CVE-2021-35247

Serv-U web login screen to LDAP authentication was allowing characters that were not sufficiently sanitized. SolarWinds has updated the input mechanism to perform additional validation and sanitization. Please Note: No downstream affect has been detected as the LDAP servers ignored improper...

n-e-r-v-o-u-s.com Cross Site Scripting vulnerability OBB-2322536

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2020-23026

A NULL pointer dereference in the main function dhry1.c of dhrystone 2.1 causes a denial of service DoS...

u-movie.com.tw Cross Site Scripting vulnerability OBB-2319233

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

u-case.eu Cross Site Scripting vulnerability OBB-2315663

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2021-45462

In Open5GS 2.4.0, a crafted packet from UE can crash SGW-U/UPF...

CVE-2021-45462

In Open5GS 2.4.0, a crafted packet from UE can crash SGW-U/UPF...

Design/Logic Flaw

In Open5GS 2.4.0, a crafted packet from UE can crash SGW-U/UPF...

CVE-2021-45462

In Open5GS 2.4.0, a crafted packet from UE can crash SGW-U/UPF...

CVE-2021-45462

CVE-2021-45462 affects Open5GS 2.4.0, where a crafted packet from a UE can crash the SGW-U/UPF, potentially enabling DoS on private 5G networks. The issue is linked to the SGW-U/UPF component and is described across multiple sources (Open5GS commit reference; Red Hat entry; Trend Micro noting a D...

CVE-2021-35242

Serv-U server responds with valid CSRFToken when the request contains only Session...

CVE-2021-35245

When a user has admin rights in Serv-U Console, the user can move, create and delete any files are able to be accessed on the Serv-U host machine...

CVE-2021-35242

Serv-U server responds with valid CSRFToken when the request contains only Session...

CVE-2021-35245

When a user has admin rights in Serv-U Console, the user can move, create and delete any files are able to be accessed on the Serv-U host machine...

CVE-2021-35242

Serv-U server responds with valid CSRFToken when the request contains only Session...

Session fixation

Serv-U server responds with valid CSRFToken when the request contains only Session...

Code injection

When a user has admin rights in Serv-U Console, the user can move, create and delete any files are able to be accessed on the Serv-U host machine...

CVE-2021-35242

CVE-2021-35242 affects SolarWinds Serv-U: the vulnerability arises because the Serv-U server responds with a valid CSRF token even when a request contains only a Session, enabling CSRF-like abuse. The public records show CVSS data indicating network attack vector with high impact on confidentiali...