3593 matches found
CVE-2019-20002: Improper Neutralization of Formula Elements in a CSV File
Formula Injection exists in the export feature in SolarWinds WebHelpDesk 12.7.1 via a value provided by a low-privileged user in the Subject field of a help request form that is mishandled in a TicketActions/view?tab=group TSV export by an admin user...
CVE-2020-5734
Classic buffer overflow in SolarWinds Dameware allows a remote, unauthenticated attacker to cause a denial of service by sending a large 'SigPubkeyLen' during ECDH key exchange...
CVE-2020-5734
Classic buffer overflow in SolarWinds Dameware allows a remote, unauthenticated attacker to cause a denial of service by sending a large 'SigPubkeyLen' during ECDH key exchange...
Buffer overflow
Classic buffer overflow in SolarWinds Dameware allows a remote, unauthenticated attacker to cause a denial of service by sending a large 'SigPubkeyLen' during ECDH key exchange...
CVE-2020-5734
Classic buffer overflow in SolarWinds Dameware allows a remote, unauthenticated attacker to cause a denial of service by sending a large 'SigPubkeyLen' during ECDH key exchange...
CVE-2020-5734
CVE-2020-5734 describes a classic buffer overflow in SolarWinds Dameware. A remote, unauthenticated attacker can cause a denial of service by sending a large SigPubkeyLen during an ECDH key exchange. Multiple sources (Red Hat/CNVD/NVD entries; Nessus plugin) corroborate this, noting impact on Dam...
PT-2020-18657
Name of the Vulnerable Software and Affected Versions SolarWinds Dameware version 12.1 Hotfix 3 Description The issue is a classic buffer overflow that allows a remote, unauthenticated attacker to cause a denial of service. This is achieved by sending a large SigPubkeyLen during the ECDH key...
CVE-2020-5734: Buffer Copy without Checking Size of Input
Classic buffer overflow in SolarWinds Dameware allows a remote, unauthenticated attacker to cause a denial of service by sending a large 'SigPubkeyLen' during ECDH key exchange...
SolarWinds Serv-U Managed File Transfer Web client Cross-Site Request Forgery Vulnerability
SolarWinds Serv-U Managed File Transfer Web client MFT is a file transfer client application from the American company SolarWinds. A cross-site request forgery vulnerability exists in the file upload feature of the SolarWinds Serv-U MFT Web client prior to version 15.1.6 Hotfix 2. An attacker can...
CVE-2019-12769
SolarWinds Serv-U Managed File Transfer MFT Web client before 15.1.6 Hotfix 2 is vulnerable to Cross-Site Request Forgery in the file upload functionality via ?Command=Upload with the Dir and File parameters...
CVE-2019-12769
SolarWinds Serv-U Managed File Transfer MFT Web client before 15.1.6 Hotfix 2 is vulnerable to Cross-Site Request Forgery in the file upload functionality via ?Command=Upload with the Dir and File parameters...
Cross site request forgery (csrf)
SolarWinds Serv-U Managed File Transfer MFT Web client before 15.1.6 Hotfix 2 is vulnerable to Cross-Site Request Forgery in the file upload functionality via ?Command=Upload with the Dir and File parameters...
CVE-2019-12769
SolarWinds Serv-U Managed File Transfer MFT Web client before 15.1.6 Hotfix 2 is vulnerable to Cross-Site Request Forgery in the file upload functionality via ?Command=Upload with the Dir and File parameters...
CVE-2019-12769
CVE-2019-12769 affects SolarWinds Serv-U Managed File Transfer (MFT) Web client prior to 15.1.6 Hotfix 2. The vulnerability is a Cross-Site Request Forgery in the file upload function exercised via ?Command=Upload with Dir and File parameters. Public sources indicate an attacker could exploit thi...
CVE-2019-12769: Cross-Site Request Forgery (CSRF)
SolarWinds Serv-U Managed File Transfer MFT Web client before 15.1.6 Hotfix 2 is vulnerable to Cross-Site Request Forgery in the file upload functionality via ?Command=Upload with the Dir and File parameters...
PT-2020-9338
Name of the Vulnerable Software and Affected Versions: SolarWinds Serv-U Managed File Transfer MFT Web client versions prior to 15.1.6 Hotfix 2 Description: The issue concerns Cross-Site Request Forgery in the file upload functionality. This occurs via the API endpoint "?Command=Upload" with the...
Solarwinds Serv-U Ftp Server Cross-Site Scripting (CVE-2019-13182)
A cross-site scripting vulnerability exists in Solarwinds Serv-U Ftp server. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...
SolarWinds Orion Platform HTML Injection Vulnerability
SolarWinds Orion Platform is a network fault and network performance management platform from SolarWinds, Inc. The platform provides real-time monitoring and analysis of network devices and supports a customizable web interface, multiple user opinions, and a mapped view of the entire network. An...