3106 matches found
CVE-2021-31474
CVE-2021-31474 affects SolarWinds Network Performance Monitor 2020.2.1. The vulnerability stems from improper validation in the SolarWinds.Serialization library, enabling deserialization of untrusted data and remote code execution with SYSTEM privileges. Public sources in the connected data inclu...
CVE-2021-31475
CVE-2021-31475 affects SolarWinds Orion Job Scheduler 2020.2.1 HF 2. The flaw resides in the JobRouterService WCF configuration, which allows unprivileged users to access a critical resource, enabling remote code execution in the administrator context. Authentication is required to exploit, with ...
CVE-2021-31475
This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Orion Job Scheduler 2020.2.1 HF 2. Authentication is required to exploit this vulnerability. The specific flaw exists within the JobRouterService WCF service. The issue is due to the WCF...
SolarWinds Orion Job Scheduler 安全漏洞
SolarWinds Solarwinds Orion is the centerpiece of an IT management portfolio from SolarWinds. It provides a stable and scalable architecture that includes data collection, processing, storage and representation. A security vulnerability exists in SolarWinds Orion Job Scheduler 2020.2.1 HF 2, whic...
SolarWinds Orion Job Scheduler JobRouterService Improper Authorization Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Orion Job Scheduler. Authentication is required to exploit this vulnerability. The specific flaw exists within the JobRouterService WCF service. The issue is due to the WCF service...
2021 Attacker Dwell Time Trends and Best Defenses
Cyberattacks have shifted from the usual smash-and-grab type of heists to stealthier campaigns where hackers silently camp out on networks for long periods, stealing anything they can get their hands on. Called attacker dwell time, this is part of an adversarial approach that has become even more...
SolarWinds Network Performance Monitor 代码问题漏洞
Solarwinds SolarWinds Network Performance Monitor NPM is a network performance monitor from SolarWinds USA that provides routers, virtualized environments, and other devices with features such as monitoring and reporting, tracking of up/down status, real-time analysis and network performance...
CISA Publishes Eviction Guidance for Networks Affected by SolarWinds and AD/M365 Compromise
CISA has released an analysis report, AR21-134A Eviction Guidance for Networks Affected by the SolarWinds and Active Directory/M365 Compromise. The report provides detailed steps for affected organizations to evict the adversary from compromised on-premises and cloud environments. Additionally,...
CVE-2021-32604
Share/IncomingWizard.htm in SolarWinds Serv-U before 15.2.3 mishandles the user-supplied SenderEmail parameter, aka "Share URL XSS."...
CVE-2021-32604
Share/IncomingWizard.htm in SolarWinds Serv-U before 15.2.3 mishandles the user-supplied SenderEmail parameter, aka "Share URL XSS."...
CVE-2021-32604
Share/IncomingWizard.htm in SolarWinds Serv-U before 15.2.3 mishandles the user-supplied SenderEmail parameter, aka "Share URL XSS."...
Cross site scripting
Share/IncomingWizard.htm in SolarWinds Serv-U before 15.2.3 mishandles the user-supplied SenderEmail parameter, aka "Share URL XSS."...
CVE-2021-32604
Share/IncomingWizard.htm in SolarWinds Serv-U before 15.2.3 mishandles the user-supplied SenderEmail parameter, aka "Share URL XSS."...
CVE-2021-32604
SolarWinds Serv-U is affected by a cross-site scripting (XSS) vulnerability in Share/IncomingWizard.htm, caused by improper handling of the SenderEmail parameter. Affected version: Serv-U
SolarWinds Serv-U FTP Server 跨站脚本漏洞
SolarWinds Serv-U FTP Server is a suite of FTP and MFT file transfer software from the US company SolarWinds. A cross-site scripting vulnerability exists in SolarWinds Serv-U FTP Server prior to version 15.2.3. The vulnerability stems from the program incorrectly handling the user-supplied...
Top 12 Security Flaws Russian Spy Hackers Are Exploiting in the Wild
Cyber operatives affiliated with the Russian Foreign Intelligence Service SVR have switched up their tactics in response to previous public disclosures of their attack methods, according to a new advisory jointly published by intelligence agencies from the U.K. and U.S. Friday. "SVR cyber operato...
Joint NCSC-CISA-FBI-NSA Cybersecurity Advisory on Russian SVR Activity
CISA has joined with the United Kingdom's National Cyber Security Centre NCSC, the Federal Bureau of Investigation FBI, and the National Security Agency NSA, in releasing a Joint Cybersecurity Advisory on Russian Foreign Intelligence Service SVR tactics, techniques, and procedures. Further TTPs...
SolarWinds Orion Platform Path Traversal Vulnerability
SolarWinds Orion Platform is a network fault and network performance management platform from SolarWinds, Inc. The platform provides real-time monitoring and analysis of network devices and supports a customizable web interface, multiple user opinions, and a mapped view of the entire network. A...
SolarWinds Orion Platform Path Traversal Vulnerability (CNVD-2021-33043)
SolarWinds Orion Platform is a network fault and network performance management platform from SolarWinds, Inc. The platform provides real-time monitoring and analysis of network devices and supports a customizable web interface, multiple user opinions, and a mapped view of the entire network. A...