Lucene search
+L

955 matches found

Cvelist
Cvelist
added 2025/11/18 8:41 a.m.19 views

CVE-2025-40549 SolarWinds Serv-U Path Restriction Bypass Vulnerability

A Path Restriction Bypass vulnerability exists in Serv-U that when abused, could give a malicious actor with access to admin privileges the ability to execute code on a directory. This issue requires administrative privileges to abuse. On Windows systems, this scored as medium due to differences ...

9.1CVSS0.01068EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/11/18 8:38 a.m.8 views

CVE-2025-40548 SolarWinds Serv-U Broken Access Control - Remote Code Execution Vulnerability

A missing validation process exists in Serv U when abused, could give a malicious actor with access to admin privileges the ability to execute code. This issue requires administrative privileges to abuse. On Windows deployments, the risk is scored as a medium because services frequently run under...

9.1CVSS6.6AI score0.00699EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/11/18 8:38 a.m.17 views

CVE-2025-40548 SolarWinds Serv-U Broken Access Control - Remote Code Execution Vulnerability

A missing validation process exists in Serv U when abused, could give a malicious actor with access to admin privileges the ability to execute code. This issue requires administrative privileges to abuse. On Windows deployments, the risk is scored as a medium because services frequently run under...

9.1CVSS0.00699EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/11/18 8:38 a.m.8 views

EUVD-2025-197929

A missing validation process exists in Serv U when abused, could give a malicious actor with access to admin privileges the ability to execute code. This issue requires administrative privileges to abuse. On Windows deployments, the risk is scored as a medium because services frequently run under...

9.1CVSS6.5AI score0.00699EPSS
SaveExploits0References3
CVE
CVE
added 2025/11/18 8:35 a.m.38 views

CVE-2025-40547

CVE-2025-40547 is a logic-error vulnerability in SolarWinds Serv-U FTP Server (≤ 15.5.2) that allows an authenticated administrator to execute code on the underlying Windows host via the vulnerable admin interface. Public exploit details indicate the issue exists in the Admin/ConfigUpload.aspx fl...

9.1CVSS6.6AI score0.00887EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2025/11/18 8:35 a.m.23 views

CVE-2025-40547 SolarWinds Serv-U Logic Abuse - Remote Code Execution Vulnerability

A logic error vulnerability exists in Serv-U which when abused could give a malicious actor with access to admin privileges the ability to execute code. This issue requires administrative privileges to abuse. On Windows deployments, the risk is scored as a medium because services frequently run...

9.1CVSS0.00887EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2025/11/18 8:35 a.m.11 views

CVE-2025-40547 SolarWinds Serv-U Logic Abuse - Remote Code Execution Vulnerability

A logic error vulnerability exists in Serv-U which when abused could give a malicious actor with access to admin privileges the ability to execute code. This issue requires administrative privileges to abuse. On Windows deployments, the risk is scored as a medium because services frequently run...

9.1CVSS6.6AI score0.00887EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/11/18 8:35 a.m.9 views

EUVD-2025-197930

A logic error vulnerability exists in Serv-U which when abused could give a malicious actor with access to admin privileges the ability to execute code. This issue requires administrative privileges to abuse. On Windows deployments, the risk is scored as a medium because services frequently run...

9.1CVSS6.5AI score0.00887EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2025/11/18 12:0 a.m.8 views

SolarWinds Serv-U 路径遍历漏洞

SolarWinds Serv-U is an FTP File Transfer Protocol server software from SolarWinds Corporation. SolarWinds Serv-U suffers from a path traversal vulnerability that stems from a path restriction bypass, which could allow an attacker with administrator privileges to execute code in a directory...

9.1CVSS7.2AI score0.01068EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/11/18 12:0 a.m.7 views

PT-2025-47268

Name of the Vulnerable Software and Affected Versions Serv-U versions 15.5.2 and prior Description A flaw exists in Serv-U due to a missing validation process. This can allow an attacker with administrative privileges to execute code on a vulnerable system. The risk is considered medium on Window...

9.1CVSS6.9AI score0.00699EPSS
SaveExploits0References15
CNNVD
CNNVD
added 2025/11/18 12:0 a.m.13 views

SolarWinds Serv-U 安全漏洞

SolarWinds Serv-U is an FTP File Transfer Protocol server software from SolarWinds USA. A security vulnerability exists in SolarWinds Serv-U that stems from a logic error that could lead to code execution by an attacker with administrator privileges...

9.1CVSS7.3AI score0.00887EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2025/11/18 12:0 a.m.8 views

SolarWinds Serv-U 安全漏洞

SolarWinds Serv-U is an FTP File Transfer Protocol server software from SolarWinds USA. A security vulnerability exists in SolarWinds Serv-U that stems from a lack of an authentication process that could lead to code execution by an attacker with administrator privileges...

9.1CVSS7.5AI score0.00699EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/11/18 12:0 a.m.13 views

PT-2025-47269

Name of the Vulnerable Software and Affected Versions Serv-U versions prior to 15.5.3 Description A Path Restriction Bypass exists in Serv-U that allows a malicious actor with administrative privileges to execute code on a directory. This requires administrative privileges to exploit. On Windows...

9.1CVSS7.4AI score0.01068EPSS
SaveExploits0References18
Positive Technologies
Positive Technologies
added 2025/11/18 12:0 a.m.14 views

PT-2025-47267

Name of the Vulnerable Software and Affected Versions Serv-U versions 15.5.2 and prior Serv-U versions prior to 15.5.3 Description A logic error exists in Serv-U that, when exploited, could allow an attacker with administrative privileges to execute code. The issue requires administrative access ...

9.1CVSS7AI score0.00887EPSS
SaveExploits1References16
Tenable Nessus
Tenable Nessus
added 2025/11/18 12:0 a.m.4 views

SolarWinds Serv-U 15.5.3 Multiple Vulnerabilities

The version of SolarWinds Serv-U installed on the remote host is prior to 15.5.3. It is, therefore, affected by multiple vulnerabilities as referenced in the solarwindsserv-u1553 advisory. - A Path Restriction Bypass vulnerability exists in Serv-U that when abused, could give a malicious actor wi...

9.1CVSS6.3AI score0.01068EPSS
SaveExploits1References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2000-0824

Malware in sbrugna...

5CVSS6.4AI score0.02603EPSS
SaveExploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2009-0964

Malware in sbrugna...

4CVSS6.3AI score0.07026EPSS
SaveExploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2019-4705

Malware in sbrugna...

5.4CVSS5.2AI score0.06397EPSS
SaveExploits2References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2004-2524

Malware in sbrugna...

5CVSS6.4AI score0.03047EPSS
SaveExploits1References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2021-21885

Malware in sbrugna...

8.8CVSS7.2AI score0.00731EPSS
SaveExploits0References3
Rows per page
Query Builder