EUVD-2018-11661

Malware in sbrugna...

EUVD-2019-9427

Malware in sbrugna...

CVE-2020-15542

SolarWinds Serv-U FTP server before 15.2.1 mishandles the CHMOD command...

CVE-2020-15542

SolarWinds Serv-U FTP server before 15.2.1 mishandles the CHMOD command...

CVE-2020-15541

SolarWinds Serv-U FTP server before 15.2.1 allows remote command execution...

PT-2020-14493

Name of the Vulnerable Software and Affected Versions SolarWinds Serv-U FTP server versions prior to 15.2.1 Description The issue concerns the failure to validate an argument path in the SolarWinds Serv-U FTP server. This lack of validation could potentially lead to exploitation. No information i...

PT-2020-14492

Name of the Vulnerable Software and Affected Versions SolarWinds Serv-U FTP server versions prior to 15.2.1 Description The issue is related to the mishandling of the CHMOD command in the SolarWinds Serv-U FTP server. Recommendations For versions prior to 15.2.1, update to version 15.2.1 or later...

PT-2020-14491

Name of the Vulnerable Software and Affected Versions SolarWinds Serv-U FTP server versions prior to 15.2.1 Description The issue allows remote command execution. Recommendations For versions prior to 15.2.1, update to version 15.2.1 or later to resolve the issue...

CVE-2020-15541: Undefined Security Weakness

SolarWinds Serv-U FTP server before 15.2.1 allows remote command execution...

CVE-2020-15543: Improper Input Validation

SolarWinds Serv-U FTP server before 15.2.1 does not validate an argument path...

CVE-2020-15542: Undefined Security Weakness

SolarWinds Serv-U FTP server before 15.2.1 mishandles the CHMOD command...

CVE-2019-19829

CVE-2019-19829 is an XSS vulnerability in SolarWinds Serv-U FTP Server 15.1.7, exploitable via the email parameter. Red Hat’s RH:CVE-2019-19829 entry confirms a web-facing XSS issue. CVSSv3.1 vector: AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N, base score 5.4 (MEDIUM). No exploitation or patch details ar...

PT-2019-15972

A cross-site scripting XSS vulnerability exists in SolarWinds Serv-U FTP Server 15.1.7 in the email parameter, a different vulnerability than CVE-2018-19934 and CVE-2019-13182...

CVE-2019-19829: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability exists in SolarWinds Serv-U FTP Server 15.1.7 in the email parameter, a different vulnerability than CVE-2018-19934 and CVE-2019-13182...

CVE-2019-13181

A CSV injection vulnerability exists in the web UI of SolarWinds Serv-U FTP Server v15.1.7...

CVE-2019-13182

A stored cross-site scripting XSS vulnerability exists in the web UI of SolarWinds Serv-U FTP Server 15.1.7...

Cross site scripting

A stored cross-site scripting XSS vulnerability exists in the web UI of SolarWinds Serv-U FTP Server 15.1.7...

PT-2019-13172

Name of the Vulnerable Software and Affected Versions SolarWinds Serv-U FTP Server version 15.1.7 Description A CSV injection issue exists in the web UI. Recommendations For SolarWinds Serv-U FTP Server version 15.1.7, at the moment, there is no information about a newer version that contains a f...

PT-2019-13173

Name of the Vulnerable Software and Affected Versions SolarWinds Serv-U FTP Server version 15.1.7 Description A stored cross-site scripting XSS issue exists in the web UI. Recommendations For SolarWinds Serv-U FTP Server version 15.1.7, update to a version that fixes this issue. At the moment,...

CVE-2019-13182: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability exists in the web UI of SolarWinds Serv-U FTP Server 15.1.7...