Lucene search
+L

3019 matches found

CNNVD
CNNVD
•added 2024/05/03 12:00 a.m.•11 views

SolarWinds Serv-U FTP Server 日志信息泄露漏洞

SolarWinds Serv-U FTP Server is a suite of FTP and MFT file transfer software from the U.S. company SolarWinds. A log information disclosure vulnerability exists in SolarWinds Serv-U FTP Server 15.4.2 and earlier versions, which stems from log file path labels that are not properly cleaned up,...

5.7CVSS6.3AI score0.00638EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2024/05/03 12:00 a.m.•38 views

SolarWinds Serv-U 15.4.0 < 15.4.3

The version of SolarWinds Serv-U installed on the remote host is prior to 15.4.2 HF1. It is, therefore, affected by a vulnerability as referenced in the serv-u1542hotfix1 advisory. - A highly privileged account can overwrite arbitrary files on the system with log output. The log file path tags we...

5.7CVSS5.8AI score0.00638EPSS
SaveExploits0References2
Openbugbounty
Openbugbounty
•added 2024/04/29 4:52 p.m.•19 views

u-producties.nl Improper Access Control vulnerability OBB-3924865

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

7AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2024/04/24 12:00 a.m.•16 views

The vulnerability of the SolarWinds Serv-U File Server file server arises from incorrect path name restrictions for the restricted access directory, allowing a hacker to execute arbitrary code.

The vulnerability of the SolarWinds Serv-U File Server file server is related to an incorrect limitation on the path to the restricted access directory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

8.4CVSS5.9AI score0.0112EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2024/04/19 9:15 p.m.•15 views

CVE-2024-4018

Improper Privilege Management vulnerability in BeyondTrust U-Series Appliance on Windows, 64 bit local appliance api modules allows Privilege Escalation.This issue affects U-Series Appliance: from 3.4 before 4.0.3...

7.8CVSS5.5AI score0.00171EPSS
SaveExploits0References1
NVD
NVD
•added 2024/04/19 9:15 p.m.•27 views

CVE-2024-4018

Improper Privilege Management vulnerability in BeyondTrust U-Series Appliance on Windows, 64 bit local appliance api modules allows Privilege Escalation.This issue affects U-Series Appliance: from 3.4 before 4.0.3...

8.8CVSS8.8AI score0.00171EPSS
SaveExploits0References1
OSV
OSV
•added 2024/04/19 9:15 p.m.•16 views

CVE-2024-4017

Improper Privilege Management vulnerability in BeyondTrust U-Series Appliance on Windows, 64 bit filesystem modules allows DLL Side-Loading.This issue affects U-Series Appliance: from 3.4 before 4.0.3...

7.8CVSS5.5AI score0.00171EPSS
SaveExploits0References1
NVD
NVD
•added 2024/04/19 9:15 p.m.•27 views

CVE-2024-4017

Improper Privilege Management vulnerability in BeyondTrust U-Series Appliance on Windows, 64 bit filesystem modules allows DLL Side-Loading.This issue affects U-Series Appliance: from 3.4 before 4.0.3...

8.8CVSS8.8AI score0.00171EPSS
SaveExploits0References1
CVE
CVE
•added 2024/04/19 8:40 p.m.•105 views

CVE-2024-4017

BeyondTrust U-Series Appliance (Windows, 64-bit filesystem modules) is affected by CVE-2024-4017 due to improper privilege management allowing DLL side-loading. Affected versions are 3.4 through prior to 4.0.3; remediation is to upgrade to version 4.0.3 or later. Some sources confirm the vulnerab...

8.8CVSS6.9AI score0.00171EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/04/19 8:40 p.m.•22 views

CVE-2024-4017 Privilege Escalation in U-Series Appliance

Improper Privilege Management vulnerability in BeyondTrust U-Series Appliance on Windows, 64 bit filesystem modules allows DLL Side-Loading.This issue affects U-Series Appliance: from 3.4 before 4.0.3...

8.8CVSS7AI score0.00171EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/04/19 8:40 p.m.•29 views

CVE-2024-4017 Privilege Escalation in U-Series Appliance

Improper Privilege Management vulnerability in BeyondTrust U-Series Appliance on Windows, 64 bit filesystem modules allows DLL Side-Loading.This issue affects U-Series Appliance: from 3.4 before 4.0.3...

8.8CVSS8.9AI score0.00171EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/04/19 8:29 p.m.•20 views

CVE-2024-4018 Privilege Escalation in U-Series Appliance

Improper Privilege Management vulnerability in BeyondTrust U-Series Appliance on Windows, 64 bit local appliance api modules allows Privilege Escalation.This issue affects U-Series Appliance: from 3.4 before 4.0.3...

8.8CVSS7AI score0.00171EPSS
SaveExploits0References1
CVE
CVE
•added 2024/04/19 8:29 p.m.•120 views

CVE-2024-4018

CVE-2024-4018 is an improper privilege management vulnerability in BeyondTrust U-Series Appliance on Windows (64-bit local appliance API modules) that allows privilege escalation. Affected versions are 3.4 through before 4.0.3; the issue is mitigated by upgrading to 4.0.3 or later. The CVE’s docu...

8.8CVSS6.9AI score0.00171EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2024/04/19 8:29 p.m.•38 views

CVE-2024-4018 Privilege Escalation in U-Series Appliance

Improper Privilege Management vulnerability in BeyondTrust U-Series Appliance on Windows, 64 bit local appliance api modules allows Privilege Escalation.This issue affects U-Series Appliance: from 3.4 before 4.0.3...

8.8CVSS8.9AI score0.00171EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/04/19 12:00 a.m.•16 views

BeyondTrust U-Series Appliance 安全漏洞

BeyondTrust U-Series Appliance is an application from BeyondTrust USA. A security vulnerability exists in BeyondTrust U-Series Appliance versions 3.4 through prior to 4.0.3 that stems from an elevation of privilege vulnerability in the local appliance api module...

8.8CVSS6.8AI score0.00171EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/19 12:00 a.m.•0 views

CVE-2024-4018: Improper Privilege Management

Improper Privilege Management vulnerability in BeyondTrust U-Series Appliance on Windows, 64 bit local appliance api modules allows Privilege Escalation.This issue affects U-Series Appliance: from 3.4 before 4.0.3...

8.8CVSS5.8AI score0.00171EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/04/19 12:00 a.m.•13 views

PT-2024-28797 · Beyondtrust +1 · Beyondtrust U-Series Appliance +1

Name of the Vulnerable Software and Affected Versions: BeyondTrust U-Series Appliance versions 3.4 through 4.0.2 Description: The issue is related to improper privilege management, allowing privilege escalation. This is due to a vulnerability in the local appliance API modules on Windows, 64-bit...

8.8CVSS7AI score0.00171EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/19 12:00 a.m.•1 views

CVE-2024-4017: Improper Privilege Management

Improper Privilege Management vulnerability in BeyondTrust U-Series Appliance on Windows, 64 bit filesystem modules allows DLL Side-Loading.This issue affects U-Series Appliance: from 3.4 before 4.0.3...

8.8CVSS5.8AI score0.00171EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/04/19 12:00 a.m.•15 views

PT-2024-28795 · Beyondtrust · Beyondtrust U-Series Appliance

Name of the Vulnerable Software and Affected Versions: BeyondTrust U-Series Appliance versions 3.4 through 4.0.2 Description: The issue is related to Improper Privilege Management in the BeyondTrust U-Series Appliance on Windows, 64-bit, specifically affecting the filesystem modules. This allows...

8.8CVSS7.2AI score0.00171EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2024/04/18 12:00 a.m.•84 views

SolarWinds Serv-U < 15.4.2 Directory Traversal (CVE-2024-28073)

The version of SolarWinds Serv-U installed on the remote host is prior to 15.4.2. It is, therefore, affected by a directory traversal remote code vulnerability as referenced in the serv-u1542 advisory. This vulnerability requires a highly privileged account to be exploited. Note that Nessus has n...

8.4CVSS6AI score0.0112EPSS
SaveExploits0References2
Rows per page
Query Builder