Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2623▼ 224 respecto a la semana anterior
Críticas / altas1384▲ 157 respecto a la semana anterior
Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)56▼ 472 respecto a la semana anterior
12 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (4.8) | 1.2% | — | Solarwinds Serv-u FTP ServerSolarwinds Serv-u MFT Server | 5/5/2021 | 17/6/2026 | SolarWinds Serv-U before 15.1.6 Hotfix 3 is affected by Cross Site Scripting (XSS) via a directory name (entered by an admin) containing a JavaScript payload. | |
| Modificada | Crítica (9.8) | 1.6% | — | Solarwinds Serv-u FTP Server | 5/7/2020 | 17/6/2026 | SolarWinds Serv-U FTP server before 15.2.1 does not validate an argument path. | |
| Modificada | Crítica (9.8) | 1.6% | — | Solarwinds Serv-u FTP Server | 5/7/2020 | 17/6/2026 | SolarWinds Serv-U FTP server before 15.2.1 mishandles the CHMOD command. | |
| Modificada | Crítica (9.8) | 7.0% | — | Solarwinds Serv-u FTP Server | 5/7/2020 | 17/6/2026 | SolarWinds Serv-U FTP server before 15.2.1 allows remote command execution. | |
| Modificada | Media (5.4) | 2.3% | — | Solarwinds Serv-u FTP Server | 18/12/2019 | 17/6/2026 | A cross-site scripting (XSS) vulnerability exists in SolarWinds Serv-U FTP Server 15.1.7 in the email parameter, a different vulnerability than CVE-2018-19934 and CVE-2019-13182. | |
| Modificada | Media (5.4) | 6.4% | — | Solarwinds Serv-u FTP Server | 16/12/2019 | 17/6/2026 | A stored cross-site scripting (XSS) vulnerability exists in the web UI of SolarWinds Serv-U FTP Server 15.1.7. | |
| Modificada | Media (6.5) | 3.2% | — | Solarwinds Serv-u FTP Server | 16/12/2019 | 17/6/2026 | A CSV injection vulnerability exists in the web UI of SolarWinds Serv-U FTP Server v15.1.7. | |
| Modificada | Alta (8.8) | 66% | — | Solarwinds Serv-u FTP ServerSolarwinds Serv-u MFT Server | 17/6/2019 | 17/6/2026 | A privilege escalation vulnerability exists in SolarWinds Serv-U before 15.1.7 for Linux. | |
| Modificada | Alta (7.8) | 0.60% | — | Solarwinds Serv-u FTP Server | 7/6/2019 | 17/6/2026 | The local management interface in SolarWinds Serv-U FTP Server 15.1.6.25 has incorrect access controls that permit local users to bypass authentication in the application and execute code in the context of the Windows SYSTEM account, leading to privilege escalation. To exploit this vulnerability, an attacker must have… | |
| Modificada | Media (4.8) | 5.4% | — | Solarwinds Serv-u FTP Server | 21/3/2019 | 17/6/2026 | SolarWinds Serv-U FTP Server 15.1.6.25 has reflected cross-site scripting (XSS) in the Web management interface via URL path and HTTP POST parameter. | |
| Modificada | Alta (7.2) | 8.1% | — | Solarwinds Serv-u FTP Server | 21/3/2019 | 17/6/2026 | SolarWinds Serv-U FTP Server 15.1.6 allows remote authenticated users to execute arbitrary code by leveraging the Import feature and modifying a CSV file. | |
| Modificada | Media (5) | 2.5% | — | Deerfield Serv-u Ftp-server | 1/12/1999 | 16/6/2026 | Buffer overflow in Serv-U FTP 2.5 allows remote users to conduct a denial of service via the SITE command. |