cve,link,title,description,vendor,products,score,severity,epss,cisa,cisa_published,article,ransomware,exploited,exploited_date,poc,trended,trended_no_1,trended_no_1_date,published,trended_score
CVE-2017-7722,https://securityvulnerability.io/vulnerability/CVE-2017-7722,,"In SolarWinds Log & Event Manager (LEM) before 6.3.1 Hotfix 4, a menu system is encountered when the SSH service is accessed with ""cmc"" and ""password"" (the default username and password). By exploiting a vulnerability in the restrictssh feature of the menuing script, an attacker can escape from the restricted shell.",Solarwinds,Log \& Event Manager,10,CRITICAL,0.036809999495744705,false,,false,false,false,,,false,false,,2017-04-12T16:59:00.000Z,0
CVE-2017-7646,https://securityvulnerability.io/vulnerability/CVE-2017-7646,,SolarWinds Log & Event Manager (LEM) before 6.3.1 Hotfix 4 allows an authenticated user to browse the server's filesystem and read the contents of arbitrary files contained within.,Solarwinds,Log \& Event Manager,6.5,MEDIUM,0.0006500000017695129,false,,false,false,false,,,false,false,,2017-04-10T19:59:00.000Z,0
CVE-2017-7647,https://securityvulnerability.io/vulnerability/CVE-2017-7647,,SolarWinds Log & Event Manager (LEM) before 6.3.1 Hotfix 4 allows an authenticated user to execute arbitrary commands.,Solarwinds,Log \& Event Manager,8.8,HIGH,0.001019999966956675,false,,false,false,false,,,false,false,,2017-04-10T19:59:00.000Z,0
CVE-2017-5198,https://securityvulnerability.io/vulnerability/CVE-2017-5198,,"SolarWinds LEM (aka SIEM) before 6.3.1 has an incorrect sudo configuration, which allows local users to obtain root access by editing /usr/local/contego/scripts/hostname.sh.",Solarwinds,Log And Event Manager,8.8,HIGH,0.0004199999966658652,false,,false,false,false,,,false,false,,2017-03-24T06:56:00.000Z,0
CVE-2017-5199,https://securityvulnerability.io/vulnerability/CVE-2017-5199,,The editbanner feature in SolarWinds LEM (aka SIEM) through 6.3.1 allows remote authenticated users to execute arbitrary code by editing /usr/local/contego/scripts/mgrconfig.pl.,Solarwinds,Log And Event Manager,8.8,HIGH,0.002859999891370535,false,,false,false,false,,,false,false,,2017-03-24T06:56:00.000Z,0
CVE-2015-7839,https://securityvulnerability.io/vulnerability/CVE-2015-7839,,SolarWinds Log and Event Manager (LEM) allows remote attackers to execute arbitrary commands on managed computers via a request to services/messagebroker/nonsecurestreamingamf involving the traceroute functionality.,Solarwinds,Log And Event Manager,,,0.4866099953651428,false,,false,false,false,,,false,false,,2015-10-15T20:59:00.000Z,0
CVE-2015-7840,https://securityvulnerability.io/vulnerability/CVE-2015-7840,,The command line management console (CMC) in SolarWinds Log and Event Manager (LEM) before 6.2.0 allows remote attackers to execute arbitrary code via unspecified vectors involving the ping feature.,Solarwinds,Log And Event Manager,,,0.009390000253915787,false,,false,false,false,,,false,false,,2015-10-15T20:00:00.000Z,0
CVE-2014-5504,https://securityvulnerability.io/vulnerability/CVE-2014-5504,,"SolarWinds Log and Event Manager before 6.0 uses ""static"" credentials, which makes it easier for remote attackers to obtain access to the database and execute arbitrary code via unspecified vectors, related to HyperSQL.",Solarwinds,Log And Event Manager,,,0.9399600028991699,false,,false,false,false,,,false,false,,2014-09-04T17:00:00.000Z,0