Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Solarwinds Subscribe
Total 204 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2012-4939 1 Solarwinds 2 Ip Address Manager Web Interface, Orion Network Performance Monitor 2012-11-01 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in IPAMSummaryView.aspx in the IPAM web interface before 3.0-HotFix1 in SolarWinds Orion Network Performance Monitor might allow remote attackers to inject arbitrary web script or HTML via the "Search for an IP address" field.
CVE-2012-2602 1 Solarwinds 1 Orion Network Performance Monitor 2012-08-12 6.8 MEDIUM N/A
Multiple cross-site request forgery (CSRF) vulnerabilities in SolarWinds Orion Network Performance Monitor (NPM) before 10.3.1 allow remote attackers to hijack the authentication of administrators for requests that (1) create user accounts via CreateUserStepContainer actions to Admin/Accounts/Add/OrionAccount.aspx or (2) modify account privileges via a ynAdminRights action to Admin/Accounts/EditAccount.aspx.
CVE-2010-2115 1 Solarwinds 1 Tftp Server 2010-05-31 5.0 MEDIUM N/A
SolarWinds TFTP Server 10.4.0.10 allows remote attackers to cause a denial of service (no new connections) via a crafted read request.
CVE-2002-1542 1 Solarwinds 1 Tftp Server 2008-09-05 5.0 MEDIUM N/A
SolarWinds TFTP server 5.0.55 and earlier allows remote attackers to cause a denial of service (crash) via a large UDP datagram, possibly triggering a buffer overflow.