3593 matches found
PT-2020-13370
Name of the Vulnerable Software and Affected Versions SolarWinds Orion Platform versions prior to 2020.2.1 Description A Stored XSS issue exists in multiple forms and pages, potentially leading to Information Disclosure and Escalation of Privileges, such as the takeover of an administrator accoun...
CVE-2020-13169: Improper Neutralization of Input During Web Page Generation
Stored XSS Cross-Site Scripting exists in the SolarWinds Orion Platform before before 2020.2.1 on multiple forms and pages. This vulnerability may lead to the Information Disclosure and Escalation of Privileges takeover of administrator account...
SolarWinds DameWare Mini Remote Control < 12.1.1 Denial of Service
The remote host is running a version of SolarWinds DameWare Mini Remote Control prior to 12.1.1. It is, therefore, affected by a denial of service vulnerability. A classic buffer overflow allows a remote, unauthenticated attacker to cause a denial of service by sending a large 'SigPubkeyLen' duri...
PT-2020-5339
Name of the Vulnerable Software and Affected Versions D-Link DSR-250 version 3.17 SolarWinds Database Performance Analyzer DPA affected versions not specified Description An issue with insufficient validation of configuration file checksums could allow a remote, authenticated attacker to inject...
Exploit for Origin Validation Error in Solarwinds Dameware_Mini_Remote_Control
CVE-2019-3980 This repo was created to utilize the Nessus POC...
SolarWinds Serv-U File Server Cross-Site Scripting Vulnerability
SolarWinds Serv-U File Server is a file transfer server from SolarWinds USA. A cross-site scripting vulnerability exists in SolarWinds Serv-U File Server versions prior to 15.2.1. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can...
SolarWinds Serv-U File Server Cross-Site Scripting Vulnerability (CNVD-2020-51523)
SolarWinds Serv-U File Server is a file transfer server from SolarWinds USA. A cross-site scripting vulnerability exists in SolarWinds Serv-U File Server versions prior to 15.2.1. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can...
Unspecified Vulnerability in SolarWinds Serv-U FTP Server (CNVD-2021-17779)
SolarWinds Serv-U File Server is a file transfer server from SolarWinds USA. A security vulnerability exists in SolarWinds Serv-U File Server versions prior to 15.2.1, which stems from the program's failure to properly handle the Same-Site cookie attribute. The vulnerability can be exploited by a...
CVE-2020-15575
SolarWinds Serv-U File Server before 15.2.1 allows XSS as demonstrated by Tenable Scan, aka Case Number 00484194...
CVE-2020-15576
SolarWinds Serv-U File Server before 15.2.1 allows information disclosure via an HTTP response...
CVE-2020-15574
SolarWinds Serv-U File Server before 15.2.1 mishandles the Same-Site cookie attribute, aka Case Number 00331893...
CVE-2020-15573
SolarWinds Serv-U File Server before 15.2.1 has a "Cross-script vulnerability," aka Case Numbers 00041778 and 00306421...
CVE-2020-15573
SolarWinds Serv-U File Server before 15.2.1 has a "Cross-script vulnerability," aka Case Numbers 00041778 and 00306421...
CVE-2020-15574
SolarWinds Serv-U File Server before 15.2.1 mishandles the Same-Site cookie attribute, aka Case Number 00331893...
CVE-2020-15575
SolarWinds Serv-U File Server before 15.2.1 allows XSS as demonstrated by Tenable Scan, aka Case Number 00484194...
CVE-2020-15576
SolarWinds Serv-U File Server before 15.2.1 allows information disclosure via an HTTP response...
Design/Logic Flaw
SolarWinds Serv-U File Server before 15.2.1 mishandles the Same-Site cookie attribute, aka Case Number 00331893...
Information disclosure
SolarWinds Serv-U File Server before 15.2.1 allows information disclosure via an HTTP response...