3086 matches found
CVE-2024-23474
CVE-2024-23474 affects SolarWinds Access Rights Manager (ARM). The issue is a Directory Traversal/Arbitrary File Deletion vulnerability in ARM that could leak information and allow deletion of arbitrary files. Exploitation could impact confidentiality, integrity, and availability (per NVD and acc...
CVE-2024-23474 SolarWinds Access Rights Manager (ARM) deleteTransferFile Directory Traversal Arbitrary File Deletion and Information Disclosure Vulnerability
The SolarWinds Access Rights Manager was found to be susceptible to an Arbitrary File Deletion and Information Disclosure vulnerability...
CVE-2024-23474 SolarWinds Access Rights Manager (ARM) deleteTransferFile Directory Traversal Arbitrary File Deletion and Information Disclosure Vulnerability
The SolarWinds Access Rights Manager was found to be susceptible to an Arbitrary File Deletion and Information Disclosure vulnerability...
CISA Adds Three Known Exploited Vulnerabilities to Catalog
CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-34102 Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference XXE Vulnerability CVE-2024-28995 SolarWinds Serv-U Path...
SolarWinds Access Rights Manager 授权问题漏洞
SolarWinds Access Rights Manager is a lightweight review management system from SolarWinds. An authorization issue vulnerability exists in SolarWinds Access Rights Manager, which can be exploited by an attacker to abuse the SolarWinds service to remotely execute code...
SolarWinds Access Rights Manager 路径遍历漏洞
SolarWinds Access Rights Manager is a lightweight review management system from SolarWinds. A path traversal vulnerability exists in SolarWinds Access Rights Manager, which can be exploited by an attacker to delete arbitrary files and disclose sensitive information...
SolarWinds Access Rights Manager 授权问题漏洞
SolarWinds Access Rights Manager is a lightweight review management system from SolarWinds. An authorization issue vulnerability exists in SolarWinds Access Rights Manager, which can be exploited by an attacker to delete arbitrary files and obtain sensitive information...
SolarWinds Access Rights Manager 路径遍历漏洞
SolarWinds Access Rights Manager is a tool for managing and monitoring user access rights. A path traversal vulnerability exists in SolarWinds Access Rights Manager, which can be exploited by an attacker to delete arbitrary files and cause information disclosure...
SolarWinds Access Rights Manager 路径遍历漏洞
SolarWinds Access Rights Manager is a tool for managing and securing user access rights in an enterprise network. A path traversal vulnerability exists in SolarWinds Access Rights Manager, which can be exploited by an attacker to delete arbitrary files and obtain sensitive information...
SolarWinds Access Rights Manager 路径遍历漏洞
SolarWinds Access Rights Manager is a tool for managing and auditing user access rights. The product helps organizations monitor and manage user access rights to files, folders and shared resources. A path traversal vulnerability exists in SolarWinds Access Rights Manager that can be exploited by...
SolarWinds Access Rights Manager 路径遍历漏洞
SolarWinds Access Rights Manager is a tool for managing and auditing user access rights. A path traversal vulnerability exists in SolarWinds Access Rights Manager, which can be exploited by an attacker to delete critical files or access sensitive data...
SolarWinds Access Rights Manager 授权问题漏洞
SolarWinds Access Rights Manager is a lightweight review management system from SolarWinds. An authorization issue vulnerability exists in SolarWinds Access Rights Manager, which can be exploited by an attacker to gain domain administrator access...
SolarWinds Access Rights Manager 授权问题漏洞
SolarWinds Access Rights Manager ARM is a tool for managing and monitoring user access rights. It helps organizations streamline the rights management process and improve security and compliance. An authorization issue vulnerability exists in SolarWinds Access Rights Manager, which can be exploit...
SolarWinds Access Rights Manager 代码问题漏洞
SolarWinds Access Rights Manager is a lightweight review management system from SolarWinds. A deserialization vulnerability exists in versions of SolarWinds Access Rights Manager prior to 2024.3, which arises from unsafe deserialization processing of serialized data received by the application fr...
SolarWinds Serv-U Path Traversal Vulnerability
SolarWinds Serv-U contains a path traversal vulnerability that allows an attacker access to read sensitive files on the host machine...
The vulnerability in the software for network monitoring and IT infrastructure management consoles of the SolarWinds Platform allows a hacker to perform cross-site scripting attacks.
The vulnerability of the software for network monitoring and IT infrastructure management solutions developed by SolarWinds exists due to the lack of protective measures taken to secure the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting...
On the CSRB’s Non-Investigation of the SolarWinds Attack
ProPublica has a long investigative article on how the Cyber Safety Review Board failed to investigate the SolarWinds attack, and specifically Microsofts culpability, even though they were directed by President Biden to do so...
The vulnerability of the Orion Login.aspx page of the SolarWinds Platform’s network monitoring and IT infrastructure management software allows a perpetrator to carry out a brute-force attack.
The vulnerability of the Orion Login.aspx page of the SolarWinds IT infrastructure monitoring and management software is related to synchronization errors when using a common resource. Exploiting this vulnerability could allow a malicious actor to carry out a brute-force attack...
