Lucene search
+L

274 matches found

OSV
OSV
added 2024/08/21 10:15 p.m.8 views

CVE-2024-28987

The SolarWinds Web Help Desk WHD software is affected by a hardcoded credential vulnerability, allowing remote unauthenticated user to access internal functionality and modify data...

9.1CVSS5.8AI score0.93208EPSS
SaveExploits6References4
Cvelist
Cvelist
added 2024/08/21 9:17 p.m.61 views

CVE-2024-28987 SolarWinds Web Help Desk Hardcoded Credential Vulnerability

The SolarWinds Web Help Desk WHD software is affected by a hardcoded credential vulnerability, allowing remote unauthenticated user to access internal functionality and modify data...

9.1CVSS0.93208EPSS
SaveExploits6References2
CNNVD
CNNVD
added 2024/08/21 12:0 a.m.10 views

SolarWinds Web Help Desk 信任管理问题漏洞

SolarWinds Web Help Desk is a suite of help desk and asset management software from SolarWinds USA. The software supports centralized knowledge base, IT asset management, project and task management, and other features. A trust management issue vulnerability exists in SolarWinds Web Help Desk tha...

9.1CVSS9.3AI score0.93208EPSS
SaveExploits6References3
ATTACKERKB
ATTACKERKB
added 2024/08/21 12:0 a.m.27 views

CVE-2024-28987

The SolarWinds Web Help Desk WHD software is affected by a hardcoded credential vulnerability, allowing remote unauthenticated user to access internal functionality and modify data. Recent assessments: sfewer-r7 at November 22, 2024 4:16pm UTC reported: SolarWinds Web Help Desk is described as an...

9.1CVSS9.7AI score0.93208EPSS
SaveIn wildExploits6References3
Positive Technologies
Positive Technologies
added 2024/08/21 12:0 a.m.8 views

PT-2024-5815

Name of the Vulnerable Software and Affected Versions SolarWinds Web Help Desk versions prior to 12.8.3 Hotfix 2 Description The SolarWinds Web Help Desk software is affected by a hardcoded credential vulnerability, allowing remote unauthenticated users to access internal functionality and modify...

9.1CVSS8.5AI score0.93208EPSS
SaveExploits6References170
The Hacker News
The Hacker News
added 2024/08/15 1:19 p.m.43 views

SolarWinds Releases Patch for Critical Flaw in Web Help Desk Software

SolarWinds has released patches to address a critical security vulnerability in its Web Help Desk software that could be exploited to execute arbitrary code on susceptible instances. The flaw, tracked as CVE-2024-28986 CVSS score: 9.8, has been described as a deserialization bug. "SolarWinds Web...

9.8CVSS10AI score0.84628EPSS
SaveExploits0
VulnCheck KEV
VulnCheck KEV
added 2024/08/15 12:0 a.m.4 views

VulnCheck KEV: CVE-2024-28986

SolarWinds Web Help Desk contains a deserialization of untrusted data vulnerability that could allow for remote code execution...

9.8CVSS6.1AI score0.84628EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2024/08/15 12:0 a.m.28 views

SolarWinds Web Help Desk < 12.8.3 HF 1 Deserialization RCE

The version of SolarWinds Web Help Desk installed on the remote host is prior to 12.8.3 HF1. It is, therefore, affected by a remote code execution vulnerability, that, if exploited, would allow an attacker to run commands on the host machine. Note that Nessus has not tested for these issues but h...

9.8CVSS7AI score0.84628EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/08/13 10:6 p.m.56 views

CVE-2024-28986 SolarWinds Web Help Desk Java Deserialization Remote Code Execution Vulnerability

SolarWinds Web Help Desk was found to be susceptible to a Java Deserialization Remote Code Execution vulnerability that, if exploited, would allow an attacker to run commands on the host machine. While it was reported as an unauthenticated vulnerability, SolarWinds has been unable to reproduce...

9.8CVSS0.84628EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/08/13 10:6 p.m.52 views

CVE-2024-28986 SolarWinds Web Help Desk Java Deserialization Remote Code Execution Vulnerability

SolarWinds Web Help Desk was found to be susceptible to a Java Deserialization Remote Code Execution vulnerability that, if exploited, would allow an attacker to run commands on the host machine. While it was reported as an unauthenticated vulnerability, SolarWinds has been unable to reproduce...

9.8CVSS7.7AI score0.84628EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/08/13 12:0 a.m.10 views

SolarWinds Web Help Desk 代码问题漏洞

SolarWinds Web Help Desk is a suite of help desk and asset management software from US-based SolarWinds. The software supports centralized knowledge base, IT asset management, project and task management, and other features. A code issue vulnerability exists in SolarWinds Web Help Desk 12.8.3 and...

9.8CVSS8.3AI score0.84628EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2024/08/13 12:0 a.m.22 views

CVE-2024-28986

SolarWinds Web Help Desk was found to be susceptible to a Java Deserialization Remote Code Execution vulnerability that, if exploited, would allow an attacker to run commands on the host machine. While it was reported as an unauthenticated vulnerability, SolarWinds has been unable to reproduce it...

9.8CVSS10AI score0.84628EPSS
SaveIn wildExploits0References3
Positive Technologies
Positive Technologies
added 2024/08/09 12:0 a.m.6 views

PT-2024-5811

Name of the Vulnerable Software and Affected Versions SolarWinds Web Help Desk versions prior to 12.8.3 Hotfix 2 Description SolarWinds Web Help Desk is susceptible to a Java deserialization remote code execution issue. Exploitation of this issue could allow a malicious actor to execute arbitrary...

10CVSS7.4AI score0.84628EPSS
SaveExploits0References140
Tenable Nessus
Tenable Nessus
added 2023/01/03 12:0 a.m.21 views

SolarWinds Web Help Desk <= 12.7.6 Arbitrary Code Execution

The version of SolarWinds Web Help Desk installed on the remote host is prior to or equal to 12.7.6. It is, therefore, affected by an arbitrary code execution vulnerability. Through hard coded credentials, an attacker with local access to the Web Help Desk host machine allows to execute arbitrary...

6.8CVSS7.2AI score0.003EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2022/03/29 12:0 a.m.13 views

SolarWinds Web Help Desk Installed (Windows)

Binary data solarwindswebhelpdeskinstalled.nbin...

7.3AI score
SaveExploits0References1
CNNVD
CNNVD
added 2022/03/25 12:0 a.m.12 views

Yonyou u8 跨站脚本漏洞

Yonyou u8 is an enterprise ERP system from China's Yonyou Network Technology Yonyou. A cross-site scripting vulnerability exists in the /u8sl/WebHelp component of Yonyou u8 v13.0, which stems from a DOM-based cross-site scripting vulnerability in /u8sl/WebHelp...

6.1CVSS5.8AI score0.41454EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2022/03/25 12:0 a.m.10 views

PT-2022-10456 · Solarwinds · Web Help Desk

Name of the Vulnerable Software and Affected Versions: WebHelpDesk affected versions not specified Description: The issue is related to an input that was not sanitized in WebHelpDesk. SolarWinds has removed this input field to prevent its misuse. Recommendations: At the moment, there is no...

8.8CVSS8.4AI score0.01014EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2022/03/25 12:0 a.m.12 views

Solarwinds Web Help Desk 安全漏洞

SolarWinds Web Help Desk is a suite of help desk and asset management software from SolarWinds USA. The software supports features such as centralized knowledge base, IT asset management, project and task management. A security vulnerability exists in SolarWinds Web Help Desk 12.7.8 and prior...

8.8CVSS7.9AI score0.01014EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2022/03/24 12:0 a.m.11 views

SolarWinds Web Help Desk - Web Detection

Binary data solarwindswebhelpdeskdetect.nbin...

7.3AI score
SaveExploits0References1
OSV
OSV
added 2022/03/10 5:42 p.m.7 views

CVE-2021-35251

Sensitive information could be displayed when a detailed technical error message is posted. This information could disclose environmental details about the Web Help Desk installation...

5.3CVSS5.7AI score0.00949EPSS
SaveExploits0References2
Rows per page
Query Builder