CVE-2018-16792

SolarWinds SFTP/SCP server through 2018-09-10 is vulnerable to XXE via a world readable and writable configuration file that allows an attacker to exfiltrate data...

Design/Logic Flaw

In SolarWinds SFTP/SCP Server through 2018-09-10, the configuration file is world readable and writable, and stores user passwords in an insecure manner, allowing an attacker to determine passwords for potentially privileged accounts. This also grants the attacker an ability to backdoor the serve...

CVE-2018-16791

In SolarWinds SFTP/SCP Server through 2018-09-10, the configuration file is world readable and writable, and stores user passwords in an insecure manner, allowing an attacker to determine passwords for potentially privileged accounts. This also grants the attacker an ability to backdoor the serve...

CVE-2018-16791

In SolarWinds SFTP/SCP Server through 2018-09-10, the configuration file is world readable and writable, and stores user passwords in an insecure manner, allowing an attacker to determine passwords for potentially privileged accounts. This also grants the attacker an ability to backdoor the serve...

CVE-2018-16792

CVE-2018-16792 : SolarWinds SFTP/SCP server up to 2018-09-10 is vulnerable to XXE via a world-readable/writable configuration file, enabling data exfiltration. CVSS v3.1 base score 9.1 (CRITICAL), network attack, no authentication required. Connected documents corroborate the XXE description; no ...

CVE-2018-16792

SolarWinds SFTP/SCP server through 2018-09-10 is vulnerable to XXE via a world readable and writable configuration file that allows an attacker to exfiltrate data...

CVE-2018-16791

The CVE concerns SolarWinds SFTP/SCP Server (through 2018-09-10). The configuration file is world-readable and writable, and passwords are stored insecurely, enabling an attacker to determine passwords for privileged accounts and potentially backdoor the server. The connected references (NVD/CNVD...

SolarWinds DameWare Mini Remote Control < 12.0 Hotfix 1 Buffer Overflow Vulnerability

SolarWinds DameWare Mini Remote Control is prone to a local buffer overflow vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE ...

SolarWinds DameWare Mini Remote Control Detection (Windows SMB Login)

SMB login-based detection of SolarWinds DameWare Mini Remote Control. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

launch.solarwinds.com XSS vulnerability

Open Bug Bounty ID: OBB-695956 Description| Value ---|--- Affected Website:| launch.solarwinds.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-12897

SolarWinds DameWare Mini Remote Control before 12.1 has a Buffer Overflow...

Buffer overflow

SolarWinds DameWare Mini Remote Control before 12.1 has a Buffer Overflow...

CVE-2018-12897

SolarWinds DameWare Mini Remote Control before 12.1 has a Buffer Overflow...

CVE-2018-12897

SolarWinds DameWare Mini Remote Control before 12.1 has a Buffer Overflow...

CVE-2018-12897

The affected software is SolarWinds DameWare Mini Remote Control. CVE-2018-12897 describes a local SEH-based buffer overflow in DameWare Mini Remote Control before v12.1. The vulnerability targets the host component and arises from improper handling of input in the host/AMT dialog context, enabli...

SolarWinds Serv-U Denial of Service Vulnerability

SolarWinds Serv-U is the United States SolarWinds set of FTP server software. A denial of service vulnerability exists in SolarWinds Serv-U versions prior to 15.1.6 HFv1. The vulnerability can be exploited to cause an application crash null pointer backreference by means of a specially crafted UR...

SolarWinds Serv-U MFT Information Disclosure Vulnerability

SolarWinds Serv-U MFT is a set of U.S. SolarWinds FTP server software. A security vulnerability exists in SolarWinds Serv-U MFT versions prior to 15.1.6 HFv1, which stems from the program assigning session tokens with low entropy values to authenticated users, and the program requesting the token...

CVE-2018-10240

SolarWinds Serv-U MFT before 15.1.6 HFv1 assigns authenticated users a low-entropy session token that can be included in requests to the application as a URL parameter in lieu of a session cookie. This session token's value can be brute-forced by an attacker to obtain the corresponding session...

CVE-2018-10241

A denial of service vulnerability in SolarWinds Serv-U before 15.1.6 HFv1 allows an authenticated user to crash the application with a NULL pointer dereference via a specially crafted URL beginning with the /Web%20Client/ substring...

CVE-2018-10240

SolarWinds Serv-U MFT before 15.1.6 HFv1 assigns authenticated users a low-entropy session token that can be included in requests to the application as a URL parameter in lieu of a session cookie. This session token's value can be brute-forced by an attacker to obtain the corresponding session...