CVE-2020-15573

SolarWinds Serv-U File Server prior to version 15.2.1 is affected by a cross-site scripting (XSS) vulnerability (Case Numbers 00041778 and 00306421). The root cause is the WEB application not adequately validating client-side data, enabling a potentially malicious script to be executed in a user’...

CVE-2020-15574

SolarWinds Serv-U File Server before 15.2.1 mishandles the Same-Site cookie attribute, aka Case Number 00331893...

CVE-2020-15574

CVE-2020-15574 affects SolarWinds Serv-U File Server prior to 15.2.1. The root cause is mishandling of the Same-Site cookie attribute, leading to potential exposure of sensitive information via crafted requests. Multiple sources (NVD, Red Hat advisory, CNVD) confirm the same issue and reference t...

CVE-2020-15575

SolarWinds Serv-U File Server before 15.2.1 is affected by a Cross‑Site Scripting (XSS) vulnerability. The root cause is a lack of proper validation of client‑side data by the WEB application, enabling XSS as noted by Tenable Scan (Case 00484194). Affected product/version: SolarWinds Serv-U File ...

CVE-2020-15575

SolarWinds Serv-U File Server before 15.2.1 allows XSS as demonstrated by Tenable Scan, aka Case Number 00484194...

CVE-2020-15576

SolarWinds Serv-U File Server before 15.2.1 allows information disclosure via an HTTP response...

CVE-2020-15576

CVE-2020-15576 affects SolarWinds Serv-U File Server prior to version 15.2.1. The vulnerability enables information disclosure via an HTTP response. The vulnerability is documented across multiple sources (including Red Hat and CNVD/CVE records) confirming the affected product as SolarWinds Serv-...

PT-2020-14503

Name of the Vulnerable Software and Affected Versions SolarWinds Serv-U File Server versions prior to 15.2.1 Description The issue allows for XSS, as demonstrated by Tenable Scan. Recommendations For versions prior to 15.2.1, update to version 15.2.1 or later to resolve the issue...

PT-2020-14502

Name of the Vulnerable Software and Affected Versions SolarWinds Serv-U File Server versions prior to 15.2.1 Description The issue is related to the mishandling of the Same-Site cookie attribute. Recommendations For versions prior to 15.2.1, update to version 15.2.1 or later to resolve the issue...

CVE-2020-15573: Improper Neutralization of Input During Web Page Generation

SolarWinds Serv-U File Server before 15.2.1 has a "Cross-script vulnerability," aka Case Numbers 00041778 and 00306421...

CVE-2020-15575: Improper Neutralization of Input During Web Page Generation

SolarWinds Serv-U File Server before 15.2.1 allows XSS as demonstrated by Tenable Scan, aka Case Number 00484194...

CVE-2020-15574: Undefined Security Weakness

SolarWinds Serv-U File Server before 15.2.1 mishandles the Same-Site cookie attribute, aka Case Number 00331893...

PT-2020-14501

Name of the Vulnerable Software and Affected Versions SolarWinds Serv-U File Server versions prior to 15.2.1 Description The issue is related to a Cross-script vulnerability. Recommendations For versions prior to 15.2.1, update to version 15.2.1 or later to resolve the issue...

CVE-2020-15576: Undefined Security Weakness

SolarWinds Serv-U File Server before 15.2.1 allows information disclosure via an HTTP response...

PT-2020-14504

Name of the Vulnerable Software and Affected Versions SolarWinds Serv-U File Server versions prior to 15.2.1 Description The issue allows information disclosure via an HTTP response. Recommendations For versions prior to 15.2.1, update to version 15.2.1 or later to resolve the issue...

httpd: mod_proxy_ftp use of uninitialized value

A flaw was found in Apache's HTTP server httpd .The modproxyftp module may use uninitialized memory with proxying to a malicious FTP server. The highest threat from this vulnerability is to data confidentiality...

HFS Http File Server 2.3m Build 300 - Buffer Overflow (PoC)

Exploit Title: HFS Http File Server 2.3m Build 300 - Buffer Overflow PoC Date: 2020-06-05 Exploit Author: hyp3rlinx Vendor Homepage: www.rejetto.com CVE : CVE-2020-13432 + Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source:...

June 9, 2020—KB4561649 (OS Build 10240.18608)

None None...

June 9, 2020—KB4561621 (OS Build 17134.1550)

None None...

CVE-2020-13432

rejetto HFS aka HTTP File Server v2.3m Build 300, when virtual files or folders are used, allows remote attackers to trigger an invalid-pointer write access violation via concurrent HTTP requests with a long URI or long HTTP headers...