Lucene search
+L

160 matches found

NVD
NVD
•added 2021/05/21 3:15 p.m.•38 views

CVE-2021-31475

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Orion Job Scheduler 2020.2.1 HF 2. Authentication is required to exploit this vulnerability. The specific flaw exists within the JobRouterService WCF service. The issue is due to the WCF...

9CVSS0.06485EPSS
SaveExploits0References2
Prion
Prion
•added 2021/05/21 3:15 p.m.•29 views

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Orion Job Scheduler 2020.2.1 HF 2. Authentication is required to exploit this vulnerability. The specific flaw exists within the JobRouterService WCF service. The issue is due to the WCF...

9CVSS8.8AI score0.06485EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2021/05/21 3:15 p.m.•14 views

CVE-2021-31475

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Orion Job Scheduler 2020.2.1 HF 2. Authentication is required to exploit this vulnerability. The specific flaw exists within the JobRouterService WCF service. The issue is due to the WCF...

9CVSS7.4AI score0.06485EPSS
SaveExploits0References3
CVE
CVE
•added 2021/05/21 2:40 p.m.•82 views

CVE-2021-31475

CVE-2021-31475 affects SolarWinds Orion Job Scheduler 2020.2.1 HF 2. The flaw resides in the JobRouterService WCF configuration, which allows unprivileged users to access a critical resource, enabling remote code execution in the administrator context. Authentication is required to exploit, with ...

9CVSS8.8AI score0.06485EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/21 12:00 a.m.•4 views

CVE-2021-31475: Incorrect Permission Assignment for Critical Resource

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Orion Job Scheduler 2020.2.1 HF 2. Authentication is required to exploit this vulnerability. The specific flaw exists within the JobRouterService WCF service. The issue is due to the WCF...

9CVSS6.6AI score0.06485EPSS
SaveExploits0References2
NVD
NVD
•added 2021/04/22 6:15 p.m.•36 views

CVE-2021-27277

This vulnerability allows local attackers to escalate privileges on affected installations of SolarWinds Orion Virtual Infrastructure Monitor 2020.2. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific...

7.8CVSS0.01092EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2021/04/22 5:50 p.m.•41 views

CVE-2021-27277

This vulnerability allows local attackers to escalate privileges on affected installations of SolarWinds Orion Virtual Infrastructure Monitor 2020.2. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific...

7.8CVSS8AI score0.01092EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/22 12:00 a.m.•5 views

CVE-2021-27277: Deserialization of Untrusted Data

This vulnerability allows local attackers to escalate privileges on affected installations of SolarWinds Orion Virtual Infrastructure Monitor 2020.2. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific...

7.8CVSS6.6AI score0.01092EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2021/03/30 12:00 a.m.•32 views

SolarWinds Orion Virtual Infrastructure Monitor OneTimeJobSchedulerEventsService Deserialization of Untrusted Data Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of SolarWinds Orion Virtual Infrastructure Monitor. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw...

7.8CVSS5.3AI score0.01092EPSS
SaveExploits0References1
NVD
NVD
•added 2021/03/29 9:15 p.m.•37 views

CVE-2021-27240

This vulnerability allows local attackers to escalate privileges on affected installations of SolarWinds Patch Manager 2020.2.1. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within th...

7.8CVSS0.0042EPSS
SaveExploits0References1
Prion
Prion
•added 2021/03/29 9:15 p.m.•30 views

Deserialization of untrusted data

This vulnerability allows local attackers to escalate privileges on affected installations of SolarWinds Patch Manager 2020.2.1. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within th...

7.2CVSS7.8AI score0.0042EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/03/29 9:05 p.m.•46 views

CVE-2021-27240

This vulnerability allows local attackers to escalate privileges on affected installations of SolarWinds Patch Manager 2020.2.1. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within th...

7.8CVSS8AI score0.0042EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/29 12:00 a.m.•7 views

CVE-2021-27240: Deserialization of Untrusted Data

This vulnerability allows local attackers to escalate privileges on affected installations of SolarWinds Patch Manager 2020.2.1. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within th...

7.8CVSS6.6AI score0.0042EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2021/02/24 12:00 a.m.•52 views

SolarWinds Patch Manager DataGridService Deserialization of Untrusted Data Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of SolarWinds Patch Manager. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

7.8CVSS5.6AI score0.0042EPSS
SaveExploits0
Microsoft KB
Microsoft KB
•added 2020/10/13 7:00 a.m.•148 views

October 13, 2020-KB4578969 Cumulative Update for .NET Framework 4.8 for Windows 10, version 1607 and Windows Server, version 2016

None None...

7.8CVSS6.7AI score0.93966EPSS
SaveExploits10
Microsoft KB
Microsoft KB
•added 2020/10/13 7:00 a.m.•53 views

October 13, 2020-KB4578972 Cumulative Update for .NET Framework 4.8 for Windows 10 Version 1803

None None...

7.8CVSS6.7AI score0.93966EPSS
SaveExploits10
Microsoft KB
Microsoft KB
•added 2020/10/13 7:00 a.m.•93 views

October 13, 2020-KB4578971 Cumulative Update for .NET Framework 4.8 for Windows 10 Version 1709

None None...

7.8CVSS6.7AI score0.93966EPSS
SaveExploits10
Microsoft KB
Microsoft KB
•added 2020/10/13 12:00 a.m.•91 views

October 13, 2020-KB4578970 Cumulative Update for .NET Framework 4.8 for Windows 10 Version 1703

None None...

5.5CVSS5.7AI score0.03288EPSS
SaveExploits0
Microsoft KB
Microsoft KB
•added 2020/10/01 12:00 a.m.•18 views

October 1, 2020-KB4576945 Cumulative Update Preview for .NET Framework 3.5 and 4.8 for Windows 10, version 2004 and Windows Server, version 2004

None None...

6.1AI score
SaveExploits0
NVD
NVD
•added 2020/09/22 6:15 p.m.•28 views

CVE-2020-14023

Ozeki NG SMS Gateway through 4.17.6 allows SSRF via SMS WCF or RSS To SMS...

4.9CVSS0.00979EPSS
SaveExploits1References2
Rows per page
Query Builder