Lucene search
+L

3517 matches found

CNVD
CNVD
added 2016/05/18 12:00 a.m.32 views

WSO2 SOA Enablement Server for Java Cross-Site Scripting Vulnerability

WSO2 SOA Enablement Server for Java is a set of enterprise Web services platform of the U.S. WSO2 company . The platform supports the creation, publishing and use of Web services and other functions. A cross-site scripting vulnerability exists in WSO2 SOA Enablement Server for Java version 6.6...

6.1CVSS6.2AI score0.01774EPSS
SaveExploits2References1
CNVD
CNVD
added 2016/05/10 12:00 a.m.7 views

SolarWinds Storage Resource Monitor Profiler SQL Injection Vulnerability

SolarWinds Storage Resource Monitor SRM Profiler formerly known as Storage Manager, STM is a set of Web-based data storage management software from SolarWinds Inc. that integrates storage monitoring, reporting, alarming, and predictive analytics. A SQL injection vulnerability exists in the Web...

10CVSS8.6AI score0.70167EPSS
SaveExploits0References1
NVD
NVD
added 2016/05/09 8:59 p.m.30 views

CVE-2016-4350

Multiple SQL injection vulnerabilities in the Web Services web server in SolarWinds Storage Resource Monitor SRM Profiler formerly Storage Manager STM before 6.2.3 allow remote attackers to execute arbitrary SQL commands via the 1 ScriptSchedule parameter in the ScriptServlet servlet; the 2...

10CVSS7AI score0.70167EPSS
SaveExploits0References25
CVE
CVE
added 2016/05/09 8:00 p.m.71 views

CVE-2016-4350

CVE-2016-4350 affects SolarWinds SRM Profiler (formerly STM) Web Services before 6.2.3. Multiple SQL injection vulnerabilities exist across numerous servlets (e.g., ScriptServlet, WindowsEventLogsServlet, ProcessesServlet, BackupExceptionsServlet, BackupAssociationServlet, HostStorageServlet, Dup...

10CVSS10AI score0.70167EPSS
SaveExploits0References25Affected Software1
Cvelist
Cvelist
added 2016/05/09 8:00 p.m.44 views

CVE-2016-4350

Multiple SQL injection vulnerabilities in the Web Services web server in SolarWinds Storage Resource Monitor SRM Profiler formerly Storage Manager STM before 6.2.3 allow remote attackers to execute arbitrary SQL commands via the 1 ScriptSchedule parameter in the ScriptServlet servlet; the 2...

8.2AI score0.70167EPSS
SaveExploits0References25
Zero Day Initiative
Zero Day Initiative
added 2016/04/28 12:00 a.m.32 views

SolarWinds Storage Resource Monitor Profiler Module HostStorageServlet SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SolarWinds Storage Resource Monitor Profiler Module. Authentication is not required to exploit this vulnerability. The specific flaw exists within processing of the HostStorageServlet servlet in th...

10CVSS6.1AI score0.70167EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2016/04/28 12:00 a.m.40 views

SolarWinds Storage Resource Monitor Profiler Module QuantumMonitorServlet SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SolarWinds Storage Resource Monitor Profiler Module. Authentication is not required to exploit this vulnerability. The specific flaw exists within processing of the QuantumMonitorServlet servlet in...

10CVSS6.8AI score0.70167EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2016/04/28 12:00 a.m.28 views

SolarWinds Storage Resource Monitor Profiler Module UserDefinedFieldConfigServlet SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SolarWinds Storage Resource Monitor Profiler Module. Authentication is not required to exploit this vulnerability. The specific flaw exists within processing of the UserDefinedFieldConfigServlet...

10CVSS4.3AI score0.70167EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2016/04/28 12:00 a.m.26 views

SolarWinds Storage Resource Monitor Profiler Module XiotechMonitorServlet SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SolarWinds Storage Resource Monitor Profiler Module. Authentication is not required to exploit this vulnerability. The specific flaw exists within processing of the XiotechMonitorServlet servlet in...

10CVSS6.7AI score0.70167EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2016/04/28 12:00 a.m.32 views

SolarWinds Storage Resource Monitor Profiler Module ScriptServlet SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SolarWinds Storage Resource Monitor Profiler Module. Authentication is not required to exploit this vulnerability. The specific flaw exists within processing of the ScriptServlet servlet in the...

10CVSS3.8AI score0.70167EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2016/04/28 12:00 a.m.34 views

SolarWinds Storage Resource Monitor Profiler Module BackupAssociationServlet SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SolarWinds Storage Resource Monitor Profiler Module. Authentication is not required to exploit this vulnerability. The specific flaw exists within processing of the BackupAssociationServlet servlet...

10CVSS7.4AI score0.70167EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2016/04/28 12:00 a.m.33 views

SolarWinds Storage Resource Monitor Profiler Module WindowsEventLogsServlet SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SolarWinds Storage Resource Monitor Profiler Module. Authentication is not required to exploit this vulnerability. The specific flaw exists within processing of the WindowsEventLogsServlet servlet ...

10CVSS4.2AI score0.70167EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2016/04/28 12:00 a.m.26 views

SolarWinds Storage Resource Monitor Profiler Module XiotechMonitorServlet SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SolarWinds Storage Resource Monitor Profiler Module. Authentication is not required to exploit this vulnerability. The specific flaw exists within processing of the XiotechMonitorServlet servlet in...

10CVSS6.2AI score0.70167EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2016/04/28 12:00 a.m.38 views

SolarWinds Storage Resource Monitor Profiler Module XiotechMonitorServlet SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SolarWinds Storage Resource Monitor Profiler Module. Authentication is not required to exploit this vulnerability. The specific flaw exists within processing of the XiotechMonitorServlet servlet in...

10CVSS6.1AI score0.70167EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2016/04/28 12:00 a.m.31 views

SolarWinds Storage Resource Monitor Profiler Module HostStorageServlet SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SolarWinds Storage Resource Monitor Profiler Module. Authentication is not required to exploit this vulnerability. The specific flaw exists within processing of the HostStorageServlet servlet in th...

10CVSS5.9AI score0.70167EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2016/04/28 12:00 a.m.34 views

SolarWinds Storage Resource Monitor Profiler Module BackupExceptionsServlet SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SolarWinds Storage Resource Monitor Profiler Module. Authentication is not required to exploit this vulnerability. The specific flaw exists within processing of the BackupExceptionsServlet servlet ...

10CVSS5.8AI score0.70167EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2016/04/28 12:00 a.m.25 views

SolarWinds Storage Resource Monitor Profiler Module NbuErrorMessageServlet SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SolarWinds Storage Resource Monitor Profiler Module. Authentication is not required to exploit this vulnerability. The specific flaw exists within processing of the NbuErrorMessageServlet servlet i...

10CVSS4.7AI score0.70167EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2016/04/28 12:00 a.m.24 views

SolarWinds Storage Resource Monitor Profiler Module BackupAssociationServlet SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SolarWinds Storage Resource Monitor Profiler Module. Authentication is not required to exploit this vulnerability. The specific flaw exists within processing of the BackupAssociationServlet servlet...

10CVSS5.3AI score0.70167EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2016/04/28 12:00 a.m.22 views

SolarWinds Storage Resource Monitor Profiler Module UserDefinedFieldConfigServlet SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SolarWinds Storage Resource Monitor Profiler Module. Authentication is not required to exploit this vulnerability. The specific flaw exists within processing of the UserDefinedFieldConfigServlet...

10CVSS4.5AI score0.70167EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2016/04/28 12:00 a.m.24 views

SolarWinds Storage Resource Monitor Profiler Module HostStorageServlet SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SolarWinds Storage Resource Monitor Profiler Module. Authentication is not required to exploit this vulnerability. The specific flaw exists within processing of the HostStorageServlet servlet in th...

10CVSS6AI score0.70167EPSS
SaveExploits0References1
Rows per page
Query Builder