Lucene search
+L

784 matches found

Cvelist
Cvelist
added 2023/09/13 10:07 p.m.37 views

CVE-2023-23840 SolarWinds Platform Exposed Dangerous Method Vulnerability

The SolarWinds Platform was susceptible to the Incorrect Comparison Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to execute arbitrary commands with NETWORK SERVICE privileges...

6.8CVSS7.5AI score0.05433EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2023/09/13 10:07 p.m.12 views

CVE-2023-23840 SolarWinds Platform Exposed Dangerous Method Vulnerability

The SolarWinds Platform was susceptible to the Incorrect Comparison Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to execute arbitrary commands with NETWORK SERVICE privileges...

6.8CVSS7.4AI score0.05433EPSS
SaveExploits0References2
OSV
OSV
added 2023/09/13 2:15 p.m.11 views

CVE-2023-3935

A heap buffer overflow vulnerability in Wibu CodeMeter Runtime network service up to version 7.60b allows an unauthenticated, remote attacker to achieve RCE and gain full access of the host system...

9.8CVSS6.1AI score0.01971EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/09/13 12:00 a.m.13 views

PT-2023-5576 · Solarwinds · Solarwinds Orion Platform

Name of the Vulnerable Software and Affected Versions: SolarWinds Orion Platform affected versions not specified Description: The issue is related to the use of dangerous methods or functions in the SolarWinds Orion Platform, which can allow an attacker to execute arbitrary commands with NETWORK...

9CVSS7.2AI score0.05433EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2023/09/13 12:00 a.m.17 views

PT-2023-7124 · Solarwinds · Solarwinds Orion Platform

Name of the Vulnerable Software and Affected Versions: SolarWinds Orion Platform affected versions not specified Description: The issue is related to an incorrect comparison vulnerability in the UpdateAction method of the SolarWinds Orion Platform. This vulnerability can be exploited by a remote...

8.3CVSS7.1AI score0.05433EPSS
SaveExploits0References8
BDU FSTEC
BDU FSTEC
added 2023/08/18 12:00 a.m.14 views

The vulnerability of the UpdateActionsProperties method in the SolarWinds Orion Platform’s network monitoring software allows a hacker to execute arbitrary code.

The vulnerability of the UpdateActionsProperties method in the SolarWinds Orion Platform software monitoring solution is related to insufficient comparison. Exploiting this vulnerability allows a remote attacker to execute arbitrary code in the context of NETWORK SERVICE...

8.3CVSS7.7AI score0.02559EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2023/08/08 6:15 p.m.4 views

CVE-2023-36905

Windows Wireless Wide Area Network Service WwanSvc Information Disclosure Vulnerability...

7.5CVSS7.3AI score0.01733EPSS
SaveExploits0References1
Prion
Prion
added 2023/08/08 6:15 p.m.26 views

Information disclosure

Windows Wireless Wide Area Network Service WwanSvc Information Disclosure Vulnerability...

5CVSS7.6AI score0.01733EPSS
SaveExploits0References1Affected Software7
Positive Technologies
Positive Technologies
added 2023/08/08 12:00 a.m.4 views

PT-2023-4380 · Microsoft · Windows Wireless Wide Area Network Service +1

Name of the Vulnerable Software and Affected Versions: Windows Wireless Wide Area Network Service WwanSvc affected versions not specified Description: The issue is related to a lack of protection for service data in the Windows Wireless Wide Area Network Service WwanSvc, which can allow an attack...

7.5CVSS9AI score0.01733EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2023/08/08 12:00 a.m.22 views

Microsoft Windows Wireless Networking Security Vulnerability

Microsoft Windows Wireless Networking is an application from Microsoft Corporation USA.WIFI network connectivity application. A security vulnerability exists in Microsoft Windows Wireless Wide Area Network Service. An attacker exploiting this vulnerability could gain access to sensitive...

7.5CVSS6.7AI score0.01733EPSS
SaveExploits0References3
Zero Day Initiative
Zero Day Initiative
added 2023/07/27 12:00 a.m.20 views

SolarWinds Orion Platform UpdateActionsProperties Incorrect Behavior Order Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Orion Platform. Authentication is required to exploit this vulnerability. The specific flaw exists within the UpdateActionsProperties method. The issue results from input validation being...

8.8CVSS7.4AI score0.02791EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/07/27 12:00 a.m.18 views

SolarWinds Orion Platform UpdateActionsProperties Incorrect Comparison Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Orion Platform. Authentication is required to exploit this vulnerability. The specific flaw exists within the UpdateActionsProperties method. The issue results from an incorrect string...

8.8CVSS7.5AI score0.02559EPSS
SaveExploits0References1
OSV
OSV
added 2023/07/26 2:15 p.m.9 views

CVE-2023-33224

The SolarWinds Platform was susceptible to the Incorrect Behavior Order Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to execute arbitrary commands with NETWORK SERVICE privileges...

7.2CVSS6AI score0.02791EPSS
SaveExploits0References2
Prion
Prion
added 2023/07/26 2:15 p.m.28 views

Design/Logic Flaw

The SolarWinds Platform was susceptible to the Incorrect Behavior Order Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to execute arbitrary commands with NETWORK SERVICE privileges...

5.8CVSS7.3AI score0.02791EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2023/07/26 1:53 p.m.80 views

CVE-2023-33224

The CVE-2023-33224 entry concerns the SolarWinds Platform (SolarWinds Orion Platform) and describes an Incorrect Behavior Order Vulnerability. The issue allows users with administrative access to the SolarWinds Web Console to execute arbitrary commands with NETWORK SERVICE privileges, due to an i...

7.2CVSS7.3AI score0.02791EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2023/07/26 1:53 p.m.31 views

CVE-2023-33224 SolarWinds Platform Incorrect Behavior Order Vulnerability

The SolarWinds Platform was susceptible to the Incorrect Behavior Order Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to execute arbitrary commands with NETWORK SERVICE privileges...

7.2CVSS7.5AI score0.02791EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2023/07/26 1:53 p.m.13 views

CVE-2023-33224 SolarWinds Platform Incorrect Behavior Order Vulnerability

The SolarWinds Platform was susceptible to the Incorrect Behavior Order Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to execute arbitrary commands with NETWORK SERVICE privileges...

7.2CVSS7.7AI score0.02791EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2023/07/26 12:49 p.m.44 views

Moderate: Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 (openstack-neutron) security update

An update for openstack-neutron is now available for Red Hat OpenStack Platform 16.2 Train. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

6.5CVSS6.4AI score0.01305EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/07/26 12:00 a.m.11 views

SolarWinds Platform 安全漏洞

SolarWinds Platform is a unified monitoring, observability, and service management platform from U.S.-based SolarWinds, Inc. A security vulnerability exists in versions of SolarWinds Platform prior to 2023.3 that stems from vulnerability to an incorrect sequence of behavior that allows a user wit...

7.2CVSS7.4AI score0.02791EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2023/06/19 5:15 a.m.7 views

CVE-2023-27396

FINS Factory Interface Network Service is a message communication protocol, which is designed to be used in closed FA Factory Automation networks, and is used in FA networks composed of OMRON products. Multiple OMRON products that implement FINS protocol contain following security issues --...

9.8CVSS7.3AI score0.01374EPSS
SaveExploits1References8
Rows per page
Query Builder