solarwinds vulnerabilities and exploits

(subscribe to this query)

SolarWinds TFTP Server 9.2.0.111 and previous versions allows remote malicious users to cause a denial of service (service stop) via a crafted Option Acknowledgement (OACK) request. NOTE: some of these details are obtained from third party information.

Solarwinds Tftp Server Solarwinds Tftp Server 5.0.55 Solarwinds Tftp Server 5.0.60 Solarwinds Tftp Server 8.1 Solarwinds Tftp Server 8.2

1 EDB exploit

Stack-based buffer overflow in the TEA decoding algorithm in RhinoSoft Serv-U FTP server 7.0.0.1, 9.0.0.5, and other versions prior to 9.1.0.0 allows remote malicious users to execute arbitrary code via a long hexadecimal string.

Solarwinds Serv-u File Server 7.0.0.1 Solarwinds Serv-u File Server 7.0.0.2 Solarwinds Serv-u File Server 7.0.0.3 Solarwinds Serv-u File Server 7.0.0.4 Solarwinds Serv-u File Server 7.1.0.0 Solarwinds Serv-u File Server 7.1.0.1 Solarwinds Serv-u File Server 7.1.0.2 Solarwinds Serv-u File Server 7.2.0.0 Solarwinds Serv-u File Server 7.2.0.1 Solarwinds Serv-u File Server 7.3.0.0 Solarwinds Serv-u File Server 7.3.0.1 Solarwinds Serv-u File Server 7.3.0.2

1 EDB exploit

An SQL injection Privilege Escalation Vulnerability exists in the Orion Platform reported by the ZDI Team. A blind Boolean SQL injection which could lead to full read/write over the Orion database content including the Orion certificate for any authenticated user.

Solarwinds Orion Platform 2019.2 Solarwinds Orion Platform 2019.4 Solarwinds Orion Platform 2020.2.1 Solarwinds Orion Platform 2020.2.4 Solarwinds Orion Platform 2020.2.5

Directory traversal vulnerability in Serv-U FTP Server prior to 11.1.0.5 allows remote authenticated users to read and write arbitrary files, and list and create arbitrary directories, via a "..:/" (dot dot colon forward slash) in the (1) list, (2) put, or (3) get comma...

Solarwinds Serv-u File Server Solarwinds Serv-u File Server 3.0.0.16 Solarwinds Serv-u File Server 3.0.0.17 Solarwinds Serv-u File Server 3.1.0.0 Solarwinds Serv-u File Server 3.1.0.1 Solarwinds Serv-u File Server 3.1.0.3 Solarwinds Serv-u File Server 4.0.0.4 Solarwinds Serv-u File Server 4.1.0.0 Solarwinds Serv-u File Server 4.1.0.3 Solarwinds Serv-u File Server 5.0.0.0 Solarwinds Serv-u File Server 5.0.0.4 Solarwinds Serv-u File Server 5.0.0.9

1 EDB exploit

Directory traversal vulnerability in Serv-U prior to 9.2.0.1 allows remote authenticated users to read arbitrary files via unspecified vectors.

Solarwinds Serv-u File Server 3.0.0.16 Solarwinds Serv-u File Server 3.0.0.17 Solarwinds Serv-u File Server 3.1.0.0 Solarwinds Serv-u File Server 3.1.0.1 Solarwinds Serv-u File Server 3.1.0.3 Solarwinds Serv-u File Server 4.0.0.4 Solarwinds Serv-u File Server 4.1.0.0 Solarwinds Serv-u File Server 4.1.0.3 Solarwinds Serv-u File Server 5.0.0.0 Solarwinds Serv-u File Server 5.0.0.4 Solarwinds Serv-u File Server 5.0.0.9 Solarwinds Serv-u File Server 5.0.0.11

SolarWinds Platform was susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with Orion admin-level account access to SolarWinds Web Console to execute arbitrary commands.

Solarwinds Orion Platform Solarwinds Orion Platform 2020.2.6 Solarwinds Orion Platform 2022.2 Solarwinds Orion Platform 2022.3

SolarWinds Platform was susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with valid access to SolarWinds Web Console to execute arbitrary commands.

Solarwinds Orion Platform Solarwinds Orion Platform 2020.2.6 Solarwinds Orion Platform 2022.2 Solarwinds Orion Platform 2022.3

SolarWinds Platform was susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with Orion admin-level account access to SolarWinds Web Console to execute arbitrary commands.

Solarwinds Orion Platform Solarwinds Orion Platform 2020.2.6 Solarwinds Orion Platform 2022.2 Solarwinds Orion Platform 2022.3

SolarWinds Platform was susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with valid access to SolarWinds Web Console to execute arbitrary commands.

Solarwinds Orion Platform Solarwinds Orion Platform 2020.2.6 Solarwinds Orion Platform 2022.2 Solarwinds Orion Platform 2022.3

SolarWinds Platform was susceptible to Improper Input Validation. This vulnerability allows a remote adversary with valid access to SolarWinds Web Console to escalate user privileges.

Solarwinds Orion Platform Solarwinds Orion Platform 2020.2.6 Solarwinds Orion Platform 2022.2 Solarwinds Orion Platform 2022.3

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook