SolarWinds Network Performance Monitor SnmpTrap Exposed Dangerous Function Privilege Escalation Vulnerability

This vulnerability allows remote attackers to escalate privileges on affected installations of SolarWinds Network Performance Monitor. Authentication is required to exploit this vulnerability. The specific flaw exists within the SolarWinds.Orion.Core.Actions.dll module. A crafted request can...

SolarWinds Network Performance Monitor WriteToEventLog Exposed Dangerous Function Privilege Escalation Vulnerability

This vulnerability allows remote attackers to escalate privileges on affected installations of SolarWinds Network Performance Monitor. Authentication is required to exploit this vulnerability. The specific flaw exists within the SolarWinds.Orion.Core.Actions.dll module. A crafted request can...

Solarwinds Web Help Desk 安全漏洞

Solarwinds Web Help Desk is a suite of help desk and asset management software from Solarwinds USA. The software supports features such as centralized knowledge base, IT asset management, project and task management. A security vulnerability exists in Solarwinds Web Help Desk web server version...

SolarWinds Network Performance Monitor Email Exposed Dangerous Function Privilege Escalation Vulnerability

This vulnerability allows remote attackers to escalate privileges on affected installations of SolarWinds Network Performance Monitor. Authentication is required to exploit this vulnerability. The specific flaw exists within the Email class. A crafted request can trigger execution of SQL queries...

SolarWinds Network Performance Monitor CustomStatus Exposed Dangerous Function Privilege Escalation Vulnerability

This vulnerability allows remote attackers to escalate privileges on affected installations of SolarWinds Network Performance Monitor. Authentication is required to exploit this vulnerability. The specific flaw exists within the SolarWinds.Orion.Core.Actions.dll module. A crafted request can...

SolarWinds Network Performance Monitor TextToSpeech Exposed Dangerous Function Privilege Escalation Vulnerability

This vulnerability allows remote attackers to escalate privileges on affected installations of SolarWinds Network Performance Monitor. Authentication is required to exploit this vulnerability. The specific flaw exists within the TextToSpeech class. A crafted request can trigger execution of SQL...

SolarWinds Network Performance Monitor SendSyslog Exposed Dangerous Function Privilege Escalation Vulnerability

This vulnerability allows remote attackers to escalate privileges on affected installations of SolarWinds Network Performance Monitor. Authentication is required to exploit this vulnerability. The specific flaw exists within the SendSyslog class. This class allows a crafted user-supplied string t...

SolarWinds Network Performance Monitor PlaySound Exposed Dangerous Function Privilege Escalation Vulnerability

This vulnerability allows remote attackers to escalate privileges on affected installations of SolarWinds Network Performance Monitor. Authentication is required to exploit this vulnerability. The specific flaw exists within the PlaySound class. A crafted request can trigger execution of SQL...

SolarWinds Network Performance Monitor SendHttpRequest Exposed Dangerous Function Privilege Escalation Vulnerability

This vulnerability allows remote attackers to escalate privileges on affected installations of SolarWinds Network Performance Monitor. Authentication is required to exploit this vulnerability. The specific flaw exists within the SolarWinds.Orion.Core.Actions.dll module. A crafted request can...

Solarwinds Orion Platform 代码问题漏洞

Solarwinds Orion Platform is a network fault and network performance management platform from Solarwinds, Inc. The platform provides real-time monitoring and analysis of network devices and supports a customizable web interface, multiple user comments, and a mapped view of the entire network. The...

Solarwinds Orion Platform访问控制错误漏洞

Solarwinds Orion Platform is a network fault and network performance management platform from Solarwinds, Inc. The platform provides real-time monitoring and analysis of network devices, as well as support for customized web interfaces, multiple user opinions, and a mapped view of the entire...

The vulnerability of the WSAsyncExecuteTasks component in the SolarWinds Patch Manager software allows a hacker to execute arbitrary code.

The vulnerability of the WSAsyncExecuteTasks component in the SolarWinds Patch Manager software lies in the restoration of unreliable data in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

SolarWinds Orion SQL注入漏洞

SolarWinds Orion is the centerpiece of an IT management portfolio from SolarWinds. It provides a stable and scalable architecture that includes data collection, processing, storage, and representation. SolarWinds Orion suffers from a SQL injection vulnerability that can be exploited by an attacke...

PT-2021-20856 · Solarwinds · Solarwinds Network Performance Monitor

Name of the Vulnerable Software and Affected Versions: SolarWinds Network Performance Monitor affected versions not specified Description: The issue involves numerous exposed dangerous functions within Orion Core, allowing for read-only SQL injection and leading to privileged escalation. An...

PT-2021-20866 · Solarwinds · Solarwinds Orion

Name of the Vulnerable Software and Affected Versions: SolarWinds Orion affected versions not specified Description: It has been reported that any Orion user, including guest accounts, can query the Orion.UserSettings entity and enumerate users and their basic settings. Recommendations: At the...

SolarWinds Orion Platform 2020.2.6 < 2020.2.6 HF3 SQLI

The version of SolarWinds Orion Platform installed on the remote host is prior to 2020.2.6 HF3. It is, therefore, affected by a vulnerability as referenced in the orionplatform202026hf3 advisory. - Numerous exposed dangerous functions within Orion Core has allows for read-only SQL injection leadi...

Convergence Ahoy: Get Ready for Cloud-Based Ransomware

The two types of cyberattacks that have dominated the news over the past year have been ransomware, and software and service supply-chain attacks. The former have mainly been perpetrated by criminal enterprises looking to turn a quick profit. In contrast, the latter attacks have primarily been th...

The vulnerability of the EditResourceControls component in the SolarWinds Patch Manager software allows a hacker to execute arbitrary code.

The vulnerability of the EditResourceControls component in the SolarWinds Patch Manager software relates to the restoration of unreliable data in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the ActionPluginBaseView component in the SolarWinds Orion Platform software for network monitoring allows a hacker to execute arbitrary code.

The vulnerability of the ActionPluginBaseView component in SolarWinds Orion Platform’s network monitoring software lies in the ability to restore unreliable data in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the SaveUserSetting component in the SolarWinds Orion Platform software monitoring solution allows a hacker to elevate their privileges to the level of an administrator.

The vulnerability of the SaveUserSetting component in the SolarWinds Orion Platform software-related network monitoring system is related to deficiencies in access control and insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to elevate their privilege...