Skip to contentSolarwinds vulnerabilities
Newest
- solarwinds log and event managerThe editbanner feature in SolarWinds LEM (aka SIEM) through 6.3.1 allows remote authenticated...CVE-2017-51998.8 High
- solarwinds log and event managerSolarWinds LEM (aka SIEM) before 6.3.1 has an incorrect sudo configuration, which allows local...CVE-2017-51988.8 High
- solarwinds ftp voyagerMultiple cross-site request forgery (CSRF) vulnerabilities in the web interface in the Scheduler...CVE-2017-6803Public exploit8.8 High
- solarwinds virtualization managerSolarWinds Virtualization Manager 6.3.1 and earlier uses weak encryption to store passwords in ...CVE-2016-57094.7 Medium
- solarwinds virtualization managerSolarWinds Virtualization Manager 6.3.1 and earlier allow local users to gain privileges by...CVE-2016-3643In KEVPublic exploit7.8 High
- solarwinds virtualization managerThe RMI service in SolarWinds Virtualization Manager 6.3.1 and earlier allows remote attackers to...CVE-2016-3642EPSS 13.3%9.8 Critical
- solarwinds storage resource monitorMultiple SQL injection vulnerabilities in the Web Services web server in SolarWinds Storage...CVE-2016-4350EPSS 70.2%9.8 Critical
- solarwinds dameware mini remote controlStack-based buffer overflow in the URI handler in DWRCC.exe in SolarWinds DameWare Mini Remote...CVE-2015-82207.5 High
- solarwinds log and event managerThe command line management console (CMC) in SolarWinds Log and Event Manager (LEM) before 6.2.0...CVE-2015-78407.5 High
- solarwinds log and event managerSolarWinds Log and Event Manager (LEM) allows remote attackers to execute arbitrary commands on...CVE-2015-78397.5 High
- solarwinds storage managerProcessFileUpload.jsp in SolarWinds Storage Manager before 6.2 allows remote attackers to upload...CVE-2015-783810.0 High
- solarwinds n-able n-centralThe RSM (aka RSMWinService) service in SolarWinds N-Able N-Central before 9.5.1.4514 uses the...CVE-2015-56104.0 Medium
- solarwinds storage managerThe AuthenticationFilter class in SolarWinds Storage Manager allows remote attackers to upload...CVE-2015-5371Public exploitEPSS 93.1%10.0 High
- solarwinds firewall security manageruserlogin.jsp in SolarWinds Firewall Security Manager (FSM) before 6.6.5 HotFix1 allows remote...CVE-2015-2284Public exploitEPSS 72.8%10.0 High
- solarwinds orion ip address manager, orion netflow traffic analyzer, orion network configuration manager +5 more +7 moreMultiple SQL injection vulnerabilities in the Manage Accounts page in the AccountManagement.asmx...CVE-2014-9566Public exploitEPSS 46.7%7.5 High
- solarwinds server and application monitorThe factory.loadExtensionFactory function in TSUnicodeGraphEditorControl in SolarWinds Server and...CVE-2015-15016.8 Medium
- solarwinds server and application monitorMultiple stack-based buffer overflows in the TSUnicodeGraphEditorControl in SolarWinds Server and...CVE-2015-15006.8 Medium
- solarwinds log and event managerSolarWinds Log and Event Manager before 6.0 uses "static" credentials, which makes it easier for...CVE-2014-55047.5 High
- solarwinds network configuration managerHeap-based buffer overflow in SolarWinds Network Configuration Manager (NCM) before 7.3 allows...CVE-2014-3459EPSS 11.6%6.8 Medium
- solarwinds dameware remote supportStack-based buffer overflow in the "Add from text file" feature in the DameWare Exporter tool ...CVE-2013-32499.3 High
- solarwinds orion network performance monitor, ip address manager web interface +1 moreCross-site scripting (XSS) vulnerability in IPAMSummaryView.aspx in the IPAM web interface before...CVE-2012-4939Public exploit4.3 Medium
- solarwinds orion network performance monitorMultiple cross-site request forgery (CSRF) vulnerabilities in SolarWinds Orion Network...CVE-2012-2602Public exploit6.8 Medium
- solarwinds orion network performance monitorMultiple cross-site scripting (XSS) vulnerabilities in SolarWinds Orion Network Performance...CVE-2012-2577Public exploitEPSS 10.2%4.3 Medium
- solarwinds serv-u file serverDirectory traversal vulnerability in Serv-U FTP Server before 11.1.0.5 allows remote...CVE-2011-4800Public exploit9.0 High
- solarwinds orion network performance monitorMultiple cross-site scripting (XSS) vulnerabilities in SolarWinds Orion Network Performance...CVE-2010-48284.3 Medium
- solarwinds tftp serverSolarWinds TFTP Server 10.4.0.13 allows remote attackers to cause a denial of service (crash) via...CVE-2010-2310Public exploitEPSS 11.0%5.0 Medium
- solarwinds tftp serverSolarWinds TFTP Server 10.4.0.10 allows remote attackers to cause a denial of service (no new...CVE-2010-2115Public exploitEPSS 56.0%5.0 Medium
- solarwinds serv-u file serverDirectory traversal vulnerability in Serv-U before 9.2.0.1 allows remote authenticated users to...CVE-2009-48154.0 Medium
- solarwinds serv-u file serverStack-based buffer overflow in the TEA decoding algorithm in RhinoSoft Serv-U FTP server 7.0.0.1,...CVE-2009-4006Public exploitEPSS 82.9%10.0 High
- solarwinds serv-u file serverRhino Software Serv-U 7.0.0.1 through 8.2.0.3 allows remote attackers to cause a denial of...CVE-2009-36555.0 Medium
- solarwinds tftp serverSolarWinds TFTP Server 9.2.0.111 and earlier allows remote attackers to cause a denial of service...CVE-2009-3115Public exploitEPSS 10.7%5.0 Medium
- solarwinds serv-u file serverDirectory traversal vulnerability in the FTP server in Rhino Software Serv-U File Server 7.0.0.1...CVE-2009-1031Public exploitEPSS 11.2%7.8 High
- solarwinds serv-u file serverThe FTP server in Serv-U 7.0.0.1 through 7.4.0.1 allows remote authenticated users to cause a...CVE-2009-0967Public exploit4.0 Medium
- solarwinds serv-u file serverDirectory traversal vulnerability in the FTP server in Serv-U 7.0.0.1 through 7.3, including 7.2...CVE-2008-4501Public exploitEPSS 10.7%9.0 High
- solarwinds serv-u file serverServ-U 7.0.0.1 through 7.3, including 7.2.0.1, allows remote authenticated users to cause a...CVE-2008-4500Public exploitEPSS 10.3%4.0 Medium
- solarwinds serv-u file serverUnspecified vulnerability in Serv-U File Server 7.0.0.1, and other versions before 7.2.0.1,...CVE-2008-37314.0 Medium
- solarwinds tftp serverDirectory traversal vulnerability in SolarWinds TFTP Server 8.1 and earlier allows remote...CVE-2006-19515.0 Medium
- solarwinds serv-u file serverServ-U FTP Server before 6.1.0.4 allows attackers to cause a denial of service (crash) via (1)...CVE-2005-34675.0 Medium
- solarwinds serv-u file serverServ-U FTP Server 4.1 (possibly 4.0) allows remote attackers to cause a denial of service ...CVE-2004-25335.0 Medium
- solarwinds serv-u file serverServ-U FTP server before 5.1.0.0 has a default account and password for local administration,...CVE-2004-2532Public exploitEPSS 15.3%10.0 High
- solarwinds serv-u file serverStack-based buffer overflow in the site chmod command in Serv-U FTP Server before 4.2 allows...CVE-2004-2111Public exploitEPSS 86.9%8.5 High
- solarwinds serv-u file serverServ-U FTP server 4.x and 5.x allows remote attackers to cause a denial of service (application...CVE-2004-1675Public exploitEPSS 12.4%5.0 Medium
- solarwinds serv-u file serverBuffer overflow in Serv-U FTP server before 5.0.0.6 allows remote attackers to cause a denial of...CVE-2004-1992Public exploitEPSS 11.2%5.0 Medium
- solarwinds dameware mini remote controlDameWare Mini Remote Control 3.x before 3.74 and 4.x before 4.2 transmits the Blowfish encryption...CVE-2004-18525.0 Medium
- solarwinds serv-u file serverBuffer overflow in Serv-U ftp before 5.0.0.4 allows remote authenticated users to execute...CVE-2004-0330Public exploitEPSS 85.5%10.0 High
- solarwinds tftp serverSolarWinds TFTP server 5.0.55 and earlier allows remote attackers to cause a denial of service ...CVE-2002-1542Public exploitEPSS 13.2%5.0 Medium
- solarwinds serv-u file serverServ-U FTP server 3.0, 3.1 and 4.0.0.4 does not accept new connections while validating user...CVE-2002-23935.0 Medium
- solarwinds tftp serverDirectory traversal vulnerability in SolarWinds TFTP Server 5.0.55, and possibly earlier, allows...CVE-2002-1209Public exploitEPSS 12.9%5.0 Medium
- solarwinds serv-u file serverThe remote administration client for RhinoSoft Serv-U 3.0 sends the user password in plaintext...CVE-2001-14637.5 High
- solarwinds serv-u file serverDirectory traversal vulnerability in FTP Serv-U before 2.5i allows remote attackers to escape the...CVE-2001-0054Public exploitEPSS 12.0%5.0 Medium