Lucene search
+L

57 matches found

CNNVD
CNNVD
•added 2021/09/01 12:00 a.m.•20 views

Solarwinds Orion Patch Manager Web Console 代码问题漏洞

solarwinds Patch Manager is an application from solarwinds, Inc. It is used to manage third-party software. A security vulnerability exists in the Solarwinds Orion Patch Manager Web Console that stems from. deserialization of untrusted data in the Web Console chart endpoint could lead to remote...

8.9CVSS8.5AI score0.76411EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/09/01 12:00 a.m.•8 views

CVE-2021-35216: Deserialization of Untrusted Data

Insecure Deserialization of untrusted data remote code execution vulnerability was discovered in Patch Manager Orion Platform Integration module. An Authenticated Attacker with network access via HTTP can compromise this vulnerability can result in Remote Code Execution...

9CVSS6.3AI score0.81402EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2021/06/30 12:00 a.m.•4 views

PT-2021-6007

Name of the Vulnerable Software and Affected Versions SolarWinds Patch Manager affected versions not specified Description The issue is related to the deserialization of untrusted data in the Web Console Chart Endpoint, which can lead to remote code execution. An unauthorized attacker with networ...

8.9CVSS0.76411EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2021/06/24 12:00 a.m.•4 views

PT-2021-5410

Name of the Vulnerable Software and Affected Versions SolarWinds Patch Manager affected versions not specified Description The issue is related to the insecure deserialization of untrusted data in the WSAsyncExecuteTasks component of the SolarWinds Patch Manager, allowing a remote attacker to...

8.9CVSS0.72792EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2021/06/24 12:00 a.m.•1 views

PT-2021-5226

Name of the Vulnerable Software and Affected Versions SolarWinds Patch Manager affected versions not specified Description A remote code execution vulnerability due to insecure deserialization of untrusted data was discovered in the Patch Manager Orion Platform Integration module. An authenticate...

9CVSS0.81402EPSS
SaveExploits0References6
OSV
OSV
•added 2021/03/29 9:15 p.m.•15 views

CVE-2021-27240

This vulnerability allows local attackers to escalate privileges on affected installations of SolarWinds Patch Manager 2020.2.1. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within th...

7.8CVSS7.4AI score0.0042EPSS
SaveExploits0References1
NVD
NVD
•added 2021/03/29 9:15 p.m.•38 views

CVE-2021-27240

This vulnerability allows local attackers to escalate privileges on affected installations of SolarWinds Patch Manager 2020.2.1. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within th...

7.8CVSS0.0042EPSS
SaveExploits0References1
Prion
Prion
•added 2021/03/29 9:15 p.m.•30 views

Deserialization of untrusted data

This vulnerability allows local attackers to escalate privileges on affected installations of SolarWinds Patch Manager 2020.2.1. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within th...

7.2CVSS7.8AI score0.0042EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2021/03/29 9:15 p.m.•13 views

CVE-2021-27240

This vulnerability allows local attackers to escalate privileges on affected installations of SolarWinds Patch Manager 2020.2.1. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within th...

7.8CVSS8AI score0.0042EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2021/03/29 9:05 p.m.•48 views

CVE-2021-27240

This vulnerability allows local attackers to escalate privileges on affected installations of SolarWinds Patch Manager 2020.2.1. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within th...

7.8CVSS8AI score0.0042EPSS
SaveExploits0References1
CVE
CVE
•added 2021/03/29 9:05 p.m.•77 views

CVE-2021-27240

SolarWinds Patch Manager 2020.2.1 is affected by CVE-2021-27240 due to deserialization of untrusted data in the DataGridService WCF service. The vulnerability enables local attackers who can execute low-privileged code on the target to escalate privileges to Administrator and run arbitrary code. ...

7.8CVSS7.9AI score0.0042EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2021/03/29 12:00 a.m.•14 views

solarwinds Patch Manager 代码问题漏洞

solarwinds Patch Manager is an application from solarwinds, Inc. It is used to manage third-party software. A security vulnerability in SolarWinds Patch Manager 2020.2.1, which exists due to a lack of proper validation of user-supplied data, can be exploited by an attacker to escalate privileges...

7.8CVSS7.8AI score0.0042EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/29 12:00 a.m.•8 views

CVE-2021-27240: Deserialization of Untrusted Data

This vulnerability allows local attackers to escalate privileges on affected installations of SolarWinds Patch Manager 2020.2.1. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within th...

7.8CVSS6.6AI score0.0042EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2021/02/24 12:00 a.m.•52 views

SolarWinds Patch Manager DataGridService Deserialization of Untrusted Data Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of SolarWinds Patch Manager. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

7.8CVSS5.6AI score0.0042EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2021/02/24 12:00 a.m.•4 views

PT-2021-17346

Name of the Vulnerable Software and Affected Versions: SolarWinds Patch Manager version 2020.2.1 Description: This issue allows local attackers to escalate privileges on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target system. The flaw...

7.8CVSS0.0042EPSS
SaveExploits0References3
The Hacker News
The Hacker News
•added 2011/08/04 8:42 a.m.•7 views

OllyDbg 2.01 alpha 4 released

OllyDbg 2.01 alpha 4 released Other new features in this version: - Patch manager, similar to 1.10 - Shortcut editor, supports weird things like Ctrl+Win+$ etc. Now you can customize and share your shortcuts. I haven't tested it on Win7, please report any found bugs and incompatibilities! -...

7.4AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2011/08/04 8:42 a.m.•12 views

OllyDbg 2.01 alpha 4 released

OllyDbg 2.01 alpha 4 released Other new features in this version: - Patch manager, similar to 1.10 - Shortcut editor, supports weird things like Ctrl+Win+$ etc. Now you can customize and share your shortcuts. I haven't tested it on Win7, please report any found bugs and incompatibilities! -...

7AI score
SaveExploits0
Rows per page
Query Builder