An attacker can abuse functionality provided by a script which may be run with root privilege in order to elevate privilege on Solarwinds Log and Event Manager Virtual Appliance version…
>> ARCHIVE: 2017-04
Insufficient input validation in the management interface can be leveraged in order to execute arbitrary commands. This can lead to (root) shell access to the underlying operating system on Solarwinds…
The management shell on Solarwinds Log and Event Manager Virtual Appliance version 6.3.1 allows the end user to edit the MOTD banner displayed during SSH logon. The editor provided for…
The Postgres database on Solarwinds Log and Event Manager Virtual Appliance version 6.3.1 has default hardcoded credentials. While some security measures were taken to ensure that network connectivity to the…
This Metasploit module creates a malicious RTF file that when opened in vulnerable versions of Microsoft Word will lead to code execution. The flaw exists in how an olelink object…
Safari suffers from an out-of-bounds memcpy in Array.concat that can lead to memory corruption.
The FTP/SSH form functionality of WordPress was found to be vulnerable to cross site request forgery. WordPress versions 4.5.3 through 4.7.4 are affected.
A code injection through DLL sideloading vulnerability exists in 64-bit Oracle Java.
eBay Auction Premium Clone Script version 6.42 suffers from a remote SQL injection vulnerability.
Exponent CMS versions 2.4.1 and below suffer from a remote SQL injection vulnerability.