3593 matches found
SolarWinds Network Performance Monitor 代码问题漏洞
Solarwinds SolarWinds Network Performance Monitor NPM is a network performance monitor from SolarWinds USA that provides routers, virtualized environments, and other devices with features such as monitoring and reporting, tracking of up/down status, real-time analysis and network performance...
CISA Publishes Eviction Guidance for Networks Affected by SolarWinds and AD/M365 Compromise
CISA has released an analysis report, AR21-134A Eviction Guidance for Networks Affected by the SolarWinds and Active Directory/M365 Compromise. The report provides detailed steps for affected organizations to evict the adversary from compromised on-premises and cloud environments. Additionally,...
CVE-2021-32604
Share/IncomingWizard.htm in SolarWinds Serv-U before 15.2.3 mishandles the user-supplied SenderEmail parameter, aka "Share URL XSS."...
CVE-2021-32604
Share/IncomingWizard.htm in SolarWinds Serv-U before 15.2.3 mishandles the user-supplied SenderEmail parameter, aka "Share URL XSS."...
Cross site scripting
Share/IncomingWizard.htm in SolarWinds Serv-U before 15.2.3 mishandles the user-supplied SenderEmail parameter, aka "Share URL XSS."...
CVE-2021-32604
Share/IncomingWizard.htm in SolarWinds Serv-U before 15.2.3 mishandles the user-supplied SenderEmail parameter, aka "Share URL XSS."...
CVE-2021-32604
Share/IncomingWizard.htm in SolarWinds Serv-U before 15.2.3 mishandles the user-supplied SenderEmail parameter, aka "Share URL XSS."...
CVE-2021-32604
SolarWinds Serv-U is affected by a cross-site scripting (XSS) vulnerability in Share/IncomingWizard.htm, caused by improper handling of the SenderEmail parameter. Affected version: Serv-U
PT-2021-19802
Name of the Vulnerable Software and Affected Versions SolarWinds Serv-U versions prior to 15.2.3 Description The issue concerns the mishandling of the user-supplied SenderEmail parameter in the Share/IncomingWizard.htm page, leading to a potential security issue. Recommendations For versions prio...
SolarWinds Serv-U FTP Server 跨站脚本漏洞
SolarWinds Serv-U FTP Server is a suite of FTP and MFT file transfer software from the US company SolarWinds. A cross-site scripting vulnerability exists in SolarWinds Serv-U FTP Server prior to version 15.2.3. The vulnerability stems from the program incorrectly handling the user-supplied...
CVE-2021-32604: Improper Neutralization of Input During Web Page Generation
Share/IncomingWizard.htm in SolarWinds Serv-U before 15.2.3 mishandles the user-supplied SenderEmail parameter, aka "Share URL XSS."...
Top 12 Security Flaws Russian Spy Hackers Are Exploiting in the Wild
Cyber operatives affiliated with the Russian Foreign Intelligence Service SVR have switched up their tactics in response to previous public disclosures of their attack methods, according to a new advisory jointly published by intelligence agencies from the U.K. and U.S. Friday. "SVR cyber operato...
Joint NCSC-CISA-FBI-NSA Cybersecurity Advisory on Russian SVR Activity
CISA has joined with the United Kingdom's National Cyber Security Centre NCSC, the Federal Bureau of Investigation FBI, and the National Security Agency NSA, in releasing a Joint Cybersecurity Advisory on Russian Foreign Intelligence Service SVR tactics, techniques, and procedures. Further TTPs...
SolarWinds Orion Platform Path Traversal Vulnerability (CNVD-2021-33043)
SolarWinds Orion Platform is a network fault and network performance management platform from SolarWinds, Inc. The platform provides real-time monitoring and analysis of network devices and supports a customizable web interface, multiple user opinions, and a mapped view of the entire network. A...
SolarWinds Orion Platform Path Traversal Vulnerability
SolarWinds Orion Platform is a network fault and network performance management platform from SolarWinds, Inc. The platform provides real-time monitoring and analysis of network devices and supports a customizable web interface, multiple user opinions, and a mapped view of the entire network. A...
CVE-2020-22428
SolarWinds Serv-U before 15.1.6 Hotfix 3 is affected by Cross Site Scripting XSS via a directory name entered by an admin containing a JavaScript payload...
CVE-2021-25179
SolarWinds Serv-U before 15.2 is affected by Cross Site Scripting XSS via the HTTP Host header...
CVE-2020-22428
SolarWinds Serv-U before 15.1.6 Hotfix 3 is affected by Cross Site Scripting XSS via a directory name entered by an admin containing a JavaScript payload...