Lucene search
+L

51 matches found

NVD
NVD
•added 2026/10/08 6:16 a.m.•9 views

CVE-2026-86827

The BackWPup WordPress plugin before 5.7.7 does not verify that a request to its cron-triggered backup execution handler actually originates from WordPress's internal scheduled-event dispatch, allowing unauthenticated attackers to force any existing backup job to run immediately, independent of i...

5.3CVSS0.00218EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/08 6:00 a.m.•11 views

EUVD-2026-94748

The BackWPup WordPress plugin before 5.7.7 does not verify that a request to its cron-triggered backup execution handler actually originates from WordPress's internal scheduled-event dispatch, allowing unauthenticated attackers to force any existing backup job to run immediately, independent of i...

5.3CVSS5.9AI score0.00218EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/10/08 6:00 a.m.•10 views

WordPress BackWPup plugin 3.3-5.7.6 - Unauthenticated Backup Job Execution vulnerability

Unauthenticated Backup Job Execution vulnerability discovered by Duy Tran in WordPress Plugin BackWPup versions 3.3-5.7.6...

5.3CVSS5.8AI score0.00218EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2026/10/08 6:00 a.m.•14 views

CVE-2026-86827

The BackWPup WordPress plugin (versions 3.3 through 5.7.6 ) contains a vulnerability where it fails to verify if requests to its cron-triggered backup execution handler originate from the internal WordPress scheduled-event dispatch. This allows unauthenticated attackers to force any existing back...

5.3CVSS5.9AI score0.00218EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/08 6:00 a.m.•42 views

CVE-2026-86827 BackWPup 3.3 - 5.7.6 - Unauthenticated Backup Job Execution via wp-cron.php

The BackWPup WordPress plugin before 5.7.7 does not verify that a request to its cron-triggered backup execution handler actually originates from WordPress's internal scheduled-event dispatch, allowing unauthenticated attackers to force any existing backup job to run immediately, independent of i...

0.00218EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/10/08 12:00 a.m.•9 views

PT-2026-107844

The BackWPup WordPress plugin before 5.7.7 does not verify that a request to its cron-triggered backup execution handler actually originates from WordPress's internal scheduled-event dispatch, allowing unauthenticated attackers to force any existing backup job to run immediately, independent of i...

5.9AI score0.00218EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/11 6:00 a.m.•31 views

CVE-2026-86815

The BackWPup WordPress plugin (versions 5.2.2-5.7.4 ) contains a vulnerability where it fails to properly restrict access to specific REST API routes used for managing jobs, backup destinations, and backup executions. This lack of authorization allows users with administrator-assigned limited rol...

5.5CVSS5.9AI score0.00382EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/04/22 6:31 p.m.•24 views

EUVD-2018-21776

Iperius Backup 5.8.1 contains a local buffer overflow vulnerability in the structured exception handling SEH mechanism that allows local attackers to execute arbitrary code by supplying a malicious file path. Attackers can create a backup job with a crafted payload in the external file location...

8.6CVSS6.8AI score0.00205EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
•added 2026/03/26 11:03 p.m.•18 views

CVE-2026-4824

A vulnerability has been found in Enter Software Iperius Backup up to 8.7.3. Affected by this issue is some unknown functionality of the component Backup Job Configuration File Handler. The manipulation leads to improper privilege management. The attack must be carried out locally. The attack is...

7.3CVSS6.1AI score0.0014EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/03/25 9:44 p.m.•12 views

CVE-2026-4824 Enter Software Iperius Backup Backup Job Configuration File privileges management

A vulnerability has been found in Enter Software Iperius Backup up to 8.7.3. Affected by this issue is some unknown functionality of the component Backup Job Configuration File Handler. The manipulation leads to improper privilege management. The attack must be carried out locally. The attack is...

7.3CVSS5.5AI score0.0014EPSS
SaveExploits0References5
CVE
CVE
•added 2026/03/25 9:44 p.m.•101 views

CVE-2026-4824

Technical details about CVE-2026-4824 (affected product, vulnerable component, exact exploit path, and remediation specifics) are not publicly provided in the supplied documents. Monitor for updates.

7.3CVSS5.5AI score0.0014EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/03/25 9:44 p.m.•42 views

CVE-2026-4824 Enter Software Iperius Backup Backup Job Configuration File privileges management

A vulnerability has been found in Enter Software Iperius Backup up to 8.7.3. Affected by this issue is some unknown functionality of the component Backup Job Configuration File Handler. The manipulation leads to improper privilege management. The attack must be carried out locally. The attack is...

7.3CVSS0.0014EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2026/03/25 12:00 a.m.•27 views

Iperius Backup 安全漏洞

Iperius Backup is a backup tool developed by the Italian company Iperius Backup. Iperius Backup versions 8.7.3 and earlier have a security vulnerability. This vulnerability stems from improper handling of backup job configurations, which may lead to permission management issues...

7.3CVSS7.1AI score0.0014EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/25 12:00 a.m.•10 views

CVE-2026-4824: Improper Privilege Management

A vulnerability has been found in Enter Software Iperius Backup up to 8.7.3. Affected by this issue is some unknown functionality of the component Backup Job Configuration File Handler. The manipulation leads to improper privilege management. The attack must be carried out locally. The attack is...

7.3CVSS5.7AI score0.0014EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/03/22 3:31 p.m.•21 views

EUVD-2019-19957

Iperius Backup 6.1.0 contains a privilege escalation vulnerability that allows low-privilege users to execute arbitrary programs with elevated privileges by creating backup jobs. Attackers can configure backup jobs to execute malicious batch files or programs before or after backup operations,...

8.6CVSS6.2AI score0.00137EPSS
SaveExploits0References5
Veeam
Veeam
•added 2025/12/05 12:00 a.m.•33 views

Backup Job to Cloud Provider Fails to Stop Running Health Check Session

Known Issues - Will be resolved in future release. This issue Issue ID: 1151633 has been identified and reviewed by Veeam's R&D team and will be fixed in a future release. This article serves to document the issue and provide information about workarounds. Challenge Observed Behavior If the Healt...

6.6AI score
SaveExploits0Affected Software1
Veeam
Veeam
•added 2025/09/15 12:00 a.m.•43 views

Failed to process site: {}. Failed to resolve personal site owner.

Challenge Backup job of a personal site fails with: Failed to process site: 0. Failed to resolve personal site owner. For more details, see KB4756. Cause This error indicates that Veeam Backup for Microsoft 365 was unable to correlate a Personal Site to a specific user because the owner of the si...

6.6AI score
SaveExploits0Affected Software1
Veeam
Veeam
•added 2024/12/03 12:00 a.m.•80 views

"Database connection settings for the Microsoft Entra ID backup repository cannot be found."

If you are encountering this error after recently upgrading to Veeam Backup & Replication 12.3, and that upgrade failed on the first attempt, and you attempted the upgrade a second time, please review the section discussing "For Customers Who Ran the Upgrade a Second Time and It Succeeded" on...

6.9AI score
SaveExploits0Affected Software1
Veeam
Veeam
•added 2024/11/06 12:00 a.m.•40 views

Release Information for Proxmox Virtual Environment Plug-In v12.1.1.1024

Requirements This update to the Proxmox Virtual Environment Plug-In for Veeam Backup & Replication requires: Veeam Backup & Replication build 12.2.0.334 You can check the build number in the Veeam Backup & Replication Console's Main Menu ≡ under Help About. Proxmox Virtual Environment Plug-In for...

6.7AI score
SaveExploits0Affected Software1
attackerkb
attackerkb
•added 2023/08/11 5:15 a.m.•13 views

CVE-2023-40256

A vulnerability was discovered in Veritas NetBackup Snapshot Manager before 10.2.0.1 that allowed untrusted clients to interact with the RabbitMQ service. This was caused by improper validation of the client certificate due to misconfiguration of the RabbitMQ service. Exploiting this impacts the...

9.8CVSS5.8AI score0.00399EPSS
SaveExploits0References2
Rows per page
Query Builder