Skip to main content

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Explore Sources Research Browse

Production

Loading current evidence

Loading the latest cvebuzz view.

© 2026 cvebuzz. CVE data courtesy of the National Vulnerability Database.

Subscribe via Atom About Browse CVEs Research Contact Privacy Policy Terms of Service

Search the full CVE archive | cvebuzz

Trending
Browse CVEs

Historical archive search

Search the full CVE archive

Search decades of CVEs by regex, severity, date, CWE, vendor/product tags, KEV, PoC, and other evidence.

Years with data: 28
Top vendors indexed: 100

FiltersRefine the archive+

Search by CVE ID or description (supports basic regex, e.g. log4j|struts)

Quick date range

Last 7 days Last 30 days Last 90 days

Severity (select multiple)

Critical (43,370)High (124,781)Medium (163,227)Low (17,939)Unrated (2,051)

Attack vector (select multiple)

Results

CVE results

9 results · Sorted by Highest Buzz score first

CVE-2020-14007

Published Jun 24, 2020

Solarwinds Orion (with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4) allows XSS via a name of an alert definition.

CVSS 5.4 · Medium

Vendor/product tagsBeta · best-effort

solarwinds / orion_network_performance_monitorsolarwinds / orion_web_performance_monitor

Network

Adjacent network

Local

Physical

CVSS minCVSS max

Year

CWEEnter a numeric ID such as 79 or the prefixed form CWE-79.

VendorBetaChoose an indexed vendor suggestion or enter another vendor.ProductBeta

Only show CVEs with KEV evidence

Only show CVEs with public PoC evidence

Only show CVEs with mention evidence

Only show CVEs with AlienVault OTX activity

Sort

CVE-2020-14006

Published Jun 24, 2020

Solarwinds Orion (with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4) allows XSS via a Responsible Team.

CVSS 5.4 · Medium

Vendor/product tagsBeta · best-effort

solarwinds / orion_network_performance_monitorsolarwinds / orion_web_performance_monitor

CVE-2020-14005

Published Jun 24, 2020

Solarwinds Orion (with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4) allows remote attackers to execute arbitrary code via a defined event.

CVSS 8.8 · High

Vendor/product tagsBeta · best-effort

solarwinds / orion_network_performance_monitorsolarwinds / orion_web_performance_monitor

CVE-2019-8917

Published Feb 18, 2019

SolarWinds Orion NPM before 12.4 suffers from a SYSTEM remote code execution vulnerability in the OrionModuleEngine service. This service establishes a NetTcpBinding endpoint that…

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

solarwinds / orion_network_performance_monitor

CVE-2014-9566

Published Mar 10, 2015

Multiple SQL injection vulnerabilities in the Manage Accounts page in the AccountManagement.asmx service in the Solarwinds Orion Platform 2015.1, as used in Network Performance Mo…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

solarwinds / orion_ip_address_managersolarwinds / orion_netflow_traffic_analyzersolarwinds / orion_network_configuration_managersolarwinds / orion_network_performance_monitorsolarwinds / orion_server_and_application_managersolarwinds / orion_user_device_trackersolarwinds / orion_voip_&_network_quality_managersolarwinds / orion_web_performance_monitor

CVE-2012-4939

Published Oct 31, 2012

Cross-site scripting (XSS) vulnerability in IPAMSummaryView.aspx in the IPAM web interface before 3.0-HotFix1 in SolarWinds Orion Network Performance Monitor might allow remote at…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

solarwinds / ip_address_manager_web_interfacesolarwinds / orion_network_performance_monitor

CVE-2012-2602

Published Aug 12, 2012

Multiple cross-site request forgery (CSRF) vulnerabilities in SolarWinds Orion Network Performance Monitor (NPM) before 10.3.1 allow remote attackers to hijack the authentication…

CVSS 6.8 · Medium

Vendor/product tagsBeta · best-effort

solarwinds / orion_network_performance_monitor

CVE-2012-2577

Published Aug 12, 2012

Multiple cross-site scripting (XSS) vulnerabilities in SolarWinds Orion Network Performance Monitor (NPM) before 10.3.1 allow remote attackers to inject arbitrary web script or HT…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

solarwinds / orion_network_performance_monitor

CVE-2010-4828

Published Aug 24, 2011

Multiple cross-site scripting (XSS) vulnerabilities in SolarWinds Orion Network Performance Monitor (NPM) 10.1 allow remote attackers to inject arbitrary web script or HTML via th…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

solarwinds / orion_network_performance_monitor

Showing 1-9 of 9 CVEsPage 1 of 1

About these shareable results+

Every filter state lives in the URL so you can bookmark, share, and crawl exact historical slices instead of a client-only search session.

Buzz order uses the latest all-time evidence snapshot, refreshed every two hours. Evidence-bearing CVEs rank first; records without a snapshot continue newest-first.