Lucene search
+L

69 matches found

Vulnrichment
Vulnrichment
•added 2025/08/12 8:10 a.m.•9 views

CVE-2025-26398 SolarWinds Database Performance Analyzer Hard-coded Cryptographic Key Vulnerability

SolarWinds Database Performance Analyzer was found to contain a hard-coded cryptographic key. If exploited, this vulnerability could lead to a machine-in-the-middle MITM attack against users. This vulnerability requires additional software not installed by default, local access to the server and...

5.6CVSS7AI score0.00189EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/08/12 12:00 a.m.•17 views

PT-2025-32636

Name of the Vulnerable Software and Affected Versions: SolarWinds Database Performance Analyzer affected versions not specified Description: SolarWinds Database Performance Analyzer contains a hard-coded cryptographic key. Exploitation of this issue could lead to a machine-in-the-middle MITM atta...

6.4CVSS6.8AI score0.00189EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/12 12:00 a.m.•8 views

CVE-2025-26398: Use of Hard-coded Credentials

SolarWinds Database Performance Analyzer was found to contain a hard-coded cryptographic key. If exploited, this vulnerability could lead to a machine-in-the-middle MITM attack against users. This vulnerability requires additional software not installed by default, local access to the server and...

6.4CVSS5.8AI score0.00189EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 10:04 a.m.•15 views

CVE-2019-0158

Insufficient path checking in the installation package for IntelR Graphics Performance Analyzer for Linux version 18.4 and before may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS7.1AI score0.00392EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 7:02 a.m.•18 views

CVE-2018-16243

SolarWinds Database Performance Analyzer DPA 11.1.468 and 12.0.3074 have several persistent XSS vulnerabilities, related to logViewer.iwc, centralManage.cen, userAdministration.iwc, database.iwc, alertManagement.iwc, eventAnnotations.iwc, and central.cen...

5.4CVSS6.1AI score0.01376EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/03/15 12:00 a.m.•16 views

The vulnerability of the Intel Graphics Performance Analyzer (Intel GPA)’s set of utilities is related to an uncontrolled search path element, which allows a malicious actor to escalate their privileges.

The vulnerability of the Intel Graphics Performance Analyzer Intel GPA utility is related to an uncontrolled search path element. Exploiting this vulnerability can allow attackers to enhance their privileges...

6.7CVSS5.5AI score0.00139EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/03/06 12:00 a.m.•19 views

The vulnerability of the Intel Graphics Performance Analyzer (Intel GPA) tool, related to deficiencies in access control, allows a malicious actor to trigger a service failure.

The vulnerability of the Intel Graphics Performance Analyzer Intel GPA lies in its lack of access control mechanisms. Exploiting this vulnerability could allow an attacker to trigger a service failure...

5.9CVSS5.5AI score0.00178EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/03/04 12:00 a.m.•18 views

The vulnerability of the Intel GPA Framework installer and the Intel Graphics Performance Analyzer tool set allows a perpetrator to enhance their privileges.

The vulnerability of Intel GPA Framework installer and the Intel Graphics Performance Analyzer tool set is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

6.7CVSS5.5AI score0.00162EPSS
SaveExploits0References2Affected Software2
Positive Technologies
Positive Technologies
•added 2025/02/11 12:00 a.m.•22 views

PT-2025-6682 · Intel · Intel Gpa +1

Name of the Vulnerable Software and Affected Versions: IntelR GPA and IntelR GPA Framework affected versions not specified Description: The issue concerns incorrect default permissions for some software installers, potentially allowing an authenticated user to enable escalation of privilege via...

6.7CVSS7.1AI score0.00162EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2023/07/18 4:50 p.m.•17 views

CVE-2023-33231 XSS in SolarWinds Database Performance Analyzer 2023.2

XSS attack was possible in DPA 2023.2 due to insufficient input validation...

6.1CVSS6.1AI score0.00502EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/04/25 12:00 a.m.•41 views

SolarWinds Database Performance Analyzer 路径遍历漏洞

SolarWinds Database Performance Analyzer is a set of database performance analyzers from SolarWinds Inc. in the United States. The product is used for SQL query performance monitoring, analysis and tuning, etc. A security vulnerability exists in SolarWinds Database Performance Analyzer version...

6.5CVSS6.8AI score0.01272EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2023/04/25 12:00 a.m.•23 views

PT-2023-19245 · Solarwinds · Database Performance Analyzer

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: A directory traversal and file enumeration issue allows users to enumerate different folders of the server. Recommendations: At the moment, there is no information about a newer version...

6.5CVSS6.4AI score0.01272EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2023/04/25 12:00 a.m.•13 views

CVE-2023-23837 No Exception Handling Vulnerability: Database Performance Analyzer (DPA) 2023.1

No exception handling vulnerability which revealed sensitive or excessive information to users...

7.5CVSS7.4AI score0.00809EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2023/04/25 12:00 a.m.•11 views

CVE-2023-23838 Directory traversal and file enumeration vulnerability: Database Performance Analyzer (DPA) 2023.1

Directory traversal and file enumeration vulnerability which allowed users to enumerate to different folders of the server...

6.5CVSS6.5AI score0.01272EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2023/04/25 12:00 a.m.•45 views

CVE-2023-23837 No Exception Handling Vulnerability: Database Performance Analyzer (DPA) 2023.1

No exception handling vulnerability which revealed sensitive or excessive information to users...

7.5CVSS7.6AI score0.00809EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2023/04/25 12:00 a.m.•55 views

CVE-2023-23838 Directory traversal and file enumeration vulnerability: Database Performance Analyzer (DPA) 2023.1

Directory traversal and file enumeration vulnerability which allowed users to enumerate to different folders of the server...

6.5CVSS6.7AI score0.01272EPSS
SaveExploits0References2
NCSC
NCSC
•added 2023/04/20 12:00 a.m.•55 views

Vulnerabilities fixed in SolarWinds Platform

Solarwinds has fixed vulnerabilities in Solarwinds Platform and the Database Performance Analyzer DPA. A pre-authenticated malicious person can exploit the vulnerabilities exploit them for attacks that can result in the following categories of damage: Cross-Site Scripting XSS. Remote code executi...

7.8CVSS7.1AI score0.08153EPSS
SaveExploits0
NCSC
NCSC
•added 2023/01/24 12:00 a.m.•22 views

Vulnerabilities fixed in SolarWinds Database Performance Analyzer

SolarWinds has fixed vulnerabilities in Database Performance Analyzer DPA. An authenticated malicious party can exploit the exploit the vulnerabilities to gain access to sensitive data or perform a cross-site scripting attack. SolarWinds has released updates to address the vulnerabilities fixes i...

7.5CVSS6.9AI score0.00416EPSS
SaveExploits0
OSV
OSV
•added 2023/01/20 6:15 p.m.•15 views

CVE-2022-38110

In Database Performance Analyzer DPA 2022.4 and older releases, certain URL vectors are susceptible to authenticated reflected cross-site scripting...

5.4CVSS5.7AI score0.00401EPSS
SaveExploits0References2
Prion
Prion
•added 2023/01/20 6:15 p.m.•33 views

Cross site scripting

In Database Performance Analyzer DPA 2022.4 and older releases, certain URL vectors are susceptible to authenticated reflected cross-site scripting...

4.9CVSS5.2AI score0.00401EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder