2654 matches found
CVE-2024-45711
SolarWinds Serv-U is vulnerable to a directory traversal vulnerability where remote code execution is possible depending on privileges given to the authenticated user. This issue requires a user to be authenticated and this is present when software environment variables are abused. Authentication...
CVE-2024-45711
SolarWinds Serv-U is vulnerable to a directory traversal vulnerability where remote code execution is possible depending on privileges given to the authenticated user. This issue requires a user to be authenticated and this is present when software environment variables are abused. Authentication...
CVE-2024-45711
CVE-2024-45711 affects SolarWinds Serv-U FTP Server. The vulnerability is a directory traversal that can lead to remote code execution when an authenticated user abuses environment variables. Authentication is required, and impact is conditioned on privileges granted to the user. Several connecte...
CVE-2024-45711 SolarWinds Serv-U FTP Service Directory Traversal Remote Code Execution Vulnerability
SolarWinds Serv-U is vulnerable to a directory traversal vulnerability where remote code execution is possible depending on privileges given to the authenticated user. This issue requires a user to be authenticated and this is present when software environment variables are abused. Authentication...
CVE-2024-45711 SolarWinds Serv-U FTP Service Directory Traversal Remote Code Execution Vulnerability
SolarWinds Serv-U is vulnerable to a directory traversal vulnerability where remote code execution is possible depending on privileges given to the authenticated user. This issue requires a user to be authenticated and this is present when software environment variables are abused. Authentication...
CVE-2024-45714 SolarWinds Serv-U Stored XSS Vulnerability
Application is vulnerable to Cross Site Scripting XSS an authenticated attacker with users’ permissions can modify a variable with a payload...
CVE-2024-45714 SolarWinds Serv-U Stored XSS Vulnerability
Application is vulnerable to Cross Site Scripting XSS an authenticated attacker with users’ permissions can modify a variable with a payload...
SolarWinds Serv-U 路径遍历漏洞
SolarWinds Serv-U is an FTP File Transfer Protocol server software from the US-based SolarWinds Corporation. A path traversal vulnerability exists in SolarWinds Serv-U 15.4.2 and earlier versions, which originates from remote code execution based on privileges granted to an authenticated user...
SolarWinds Serv-U 跨站脚本漏洞
SolarWinds Serv-U is an FTP File Transfer Protocol server software from the US-based SolarWinds Corporation. A cross-site scripting vulnerability exists in SolarWinds Serv-U version 15.4.2.3 and earlier, which stems from vulnerability to a cross-site scripting attack that allows an authenticated...
PT-2024-31735 · Solarwinds · Serv-U
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns a Cross Site Scripting XSS vulnerability. An authenticated attacker, with the same permissions as the users, can modify a variable wi...
OESA-2024-2189 uboot-tools security update
This package includes the mkimage program, which allows generation of U-Boot images in various formats, and the fwprintenv and fwsetenv programs to read and modify U-Boot's environment. Security Fixes: There exists an unchecked length field in UBoot. The U-Boot DFU implementation does not bound t...
SolarWinds Serv-U 15.2.0 < 15.2.3
The version of SolarWinds Serv-U installed on the remote host is prior to 15.2.2 HF1. It is, therefore, affected by a vulnerability as referenced in the serv-u1522hf1 advisory. - In SolarWinds Serv-U before 15.2.2 Hotfix 1, there is a directory containing user profile files that include users'...
SolarWinds Serv-U 15.2.0 < 15.2.4
The version of SolarWinds Serv-U installed on the remote host is prior to 15.2.4. It is, therefore, affected by a vulnerability as referenced in the serv-u1524 advisory. - The Serv-U File Server allows for events such as user login failures to be audited by executing a command. This command can b...
SolarWinds Serv-U 15.2.0 < 15.2.3
The version of SolarWinds Serv-U installed on the remote host is prior to 15.2.2 HF1. It is, therefore, affected by a vulnerability as referenced in the serv-u1522hf1 advisory. - In SolarWinds Serv-U before 15.2.2 Hotfix 1, there is a directory containing user profile files that include users'...
SolarWinds Serv-U 15.2.4 < 15.2.5 Multiple Vulnerabilities
The version of SolarWinds Serv-U installed on the remote host is prior to 15.2.5. It is, therefore, affected by multiple vulnerabilities as referenced in the serv-u1525 advisory. - Serv-U server responds with valid CSRFToken when the request contains only Session. CVE-2021-35242 - When a user has...
SolarWinds Serv-U 15.0 < 15.3.1
The version of SolarWinds Serv-U installed on the remote host is prior to 15.3.1. It is, therefore, affected by a vulnerability as referenced in the serv-u1531 advisory. - This broken access control vulnerability pertains specifically to a domain admin who can access configuration & user data of...
SolarWinds Serv-U 15.3.1
The version of SolarWinds Serv-U installed on the remote host is prior to 15.3 HF1. It is, therefore, affected by a vulnerability as referenced in the serv-u153hf1 advisory. - A researcher reported a Directory Transversal Vulnerability in Serv-U 15.3. This may allow access to files relating to th...
SolarWinds Serv-U 15.2.0 < 15.2.3 XSS
The version of SolarWinds Serv-U installed on the remote host is prior to 15.2.3. It is, therefore, affected by a vulnerability as referenced in the serv-u1523 advisory. - Share/IncomingWizard.htm in SolarWinds Serv-U before 15.2.3 mishandles the user-supplied SenderEmail parameter, aka Share URL...