SolarWinds Serv-U FTP Server Code Injection Vulnerability

SolarWinds Serv-U FTP Server is a set of U.S. SolarWinds FTP and MFT file transfer software. A security vulnerability exists in SolarWinds Serv-U FTP Server versions prior to 15.2.1. A remote attacker can exploit the vulnerability to execute commands...

CVE-2020-15542

SolarWinds Serv-U FTP server before 15.2.1 mishandles the CHMOD command...

CVE-2020-15543

SolarWinds Serv-U FTP server before 15.2.1 does not validate an argument path...

CVE-2020-15543

SolarWinds Serv-U FTP server before 15.2.1 does not validate an argument path...

CVE-2020-15541

SolarWinds Serv-U FTP server before 15.2.1 allows remote command execution...

CVE-2020-15541

SolarWinds Serv-U FTP server before 15.2.1 allows remote command execution...

Design/Logic Flaw

SolarWinds Serv-U FTP server before 15.2.1 allows remote command execution...

Path traversal

SolarWinds Serv-U FTP server before 15.2.1 does not validate an argument path...

CVE-2020-15541

SolarWinds Serv-U FTP server before 15.2.1 allows remote command execution...

CVE-2020-15541

CVE-2020-15541 affects SolarWinds Serv-U FTP Server before 15.2.1, allowing remote command execution. Several sources (NVD entry; Red Hat advisory; CNVD entry) confirm the vulnerability and version constraint. The NVD metrics indicate a high/severe impact (CVSS v3.1: 9.8, CRITICAL, NETWORK, NONE ...

CVE-2020-15543

SolarWinds Serv-U FTP server before 15.2.1 does not validate an argument path...

CVE-2020-15543

CVE-2020-15543 affects SolarWinds Serv-U FTP Server prior to version 15.2.1, where an argument path is not validated, enabling a path traversal vulnerability. CVSS metrics indicate a high impact with critical severity (CVSS‑3.1: 9.8) and substantial network exposure (ATT&CK/attack vector not expl...

CVE-2020-15542

SolarWinds Serv-U FTP server before 15.2.1 mishandles the CHMOD command...

CVE-2020-15542

Summary: CVE-2020-15542 affects SolarWinds Serv-U FTP Server prior to version 15.2.1, due to mishandling of the CHMOD command. The connected documents confirm the vendor release of 15.2.1 as a fix (per Serv-U 15-2-1 release notes). Impact (as stated): The CVSS metrics in the reference indicate hi...

PT-2020-15421 · Jenkins · Jenkins Vncviewer Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins VncViewer Plugin versions 1.7 and earlier Description: The issue is related to a reflected cross-site scripting XSS vulnerability. It occurs because the checkVncServ form validation endpoint does not properly escape a parameter value,...

SolarWinds Serv-U Managed File Transfer Web client Cross-Site Request Forgery Vulnerability

SolarWinds Serv-U Managed File Transfer Web client MFT is a file transfer client application from the American company SolarWinds. A cross-site request forgery vulnerability exists in the file upload feature of the SolarWinds Serv-U MFT Web client prior to version 15.1.6 Hotfix 2. An attacker can...

CVE-2019-12769

SolarWinds Serv-U Managed File Transfer MFT Web client before 15.1.6 Hotfix 2 is vulnerable to Cross-Site Request Forgery in the file upload functionality via ?Command=Upload with the Dir and File parameters...

CVE-2019-12769

SolarWinds Serv-U Managed File Transfer MFT Web client before 15.1.6 Hotfix 2 is vulnerable to Cross-Site Request Forgery in the file upload functionality via ?Command=Upload with the Dir and File parameters...

CVE-2019-12769

SolarWinds Serv-U Managed File Transfer MFT Web client before 15.1.6 Hotfix 2 is vulnerable to Cross-Site Request Forgery in the file upload functionality via ?Command=Upload with the Dir and File parameters...

CVE-2019-12769

CVE-2019-12769 affects SolarWinds Serv-U Managed File Transfer (MFT) Web client prior to 15.1.6 Hotfix 2. The vulnerability is a Cross-Site Request Forgery in the file upload function exercised via ?Command=Upload with Dir and File parameters. Public sources indicate an attacker could exploit thi...