Show filters
70 Total Results
Displaying 31-40 of 70
Sort by:
Attacker Value
Unknown
CVE-2020-15574
Disclosure Date: July 07, 2020 (last updated November 28, 2024)
SolarWinds Serv-U File Server before 15.2.1 mishandles the Same-Site cookie attribute, aka Case Number 00331893.
0
Attacker Value
Unknown
CVE-2020-15576
Disclosure Date: July 07, 2020 (last updated November 28, 2024)
SolarWinds Serv-U File Server before 15.2.1 allows information disclosure via an HTTP response.
0
Attacker Value
Unknown
CVE-2020-15542
Disclosure Date: July 05, 2020 (last updated November 28, 2024)
SolarWinds Serv-U FTP server before 15.2.1 mishandles the CHMOD command.
0
Attacker Value
Unknown
CVE-2020-15541
Disclosure Date: July 05, 2020 (last updated November 28, 2024)
SolarWinds Serv-U FTP server before 15.2.1 allows remote command execution.
0
Attacker Value
Unknown
CVE-2020-15543
Disclosure Date: July 05, 2020 (last updated February 21, 2025)
SolarWinds Serv-U FTP server before 15.2.1 does not validate an argument path.
0
Attacker Value
Unknown
CVE-2019-12769
Disclosure Date: March 18, 2020 (last updated February 21, 2025)
SolarWinds Serv-U Managed File Transfer (MFT) Web client before 15.1.6 Hotfix 2 is vulnerable to Cross-Site Request Forgery in the file upload functionality via ?Command=Upload with the Dir and File parameters.
0
Attacker Value
Unknown
CVE-2019-19829
Disclosure Date: December 18, 2019 (last updated November 27, 2024)
A cross-site scripting (XSS) vulnerability exists in SolarWinds Serv-U FTP Server 15.1.7 in the email parameter, a different vulnerability than CVE-2018-19934 and CVE-2019-13182.
0
Attacker Value
Unknown
CVE-2019-13181
Disclosure Date: December 16, 2019 (last updated November 27, 2024)
A CSV injection vulnerability exists in the web UI of SolarWinds Serv-U FTP Server v15.1.7.
0
Attacker Value
Unknown
CVE-2019-13182
Disclosure Date: October 10, 2019 (last updated November 27, 2024)
A stored cross-site scripting (XSS) vulnerability exists in the web UI of SolarWinds Serv-U FTP Server 15.1.7.
0
Attacker Value
Unknown
CVE-2018-19999
Disclosure Date: June 07, 2019 (last updated November 27, 2024)
The local management interface in SolarWinds Serv-U FTP Server 15.1.6.25 has incorrect access controls that permit local users to bypass authentication in the application and execute code in the context of the Windows SYSTEM account, leading to privilege escalation. To exploit this vulnerability, an attacker must have local access the the host running Serv-U, and a Serv-U administrator have an active management console session.
0
