Lucene search
+L

66 matches found

Prion
Prion
•added 2023/06/13 7:15 a.m.•41 views

Path traversal

Uncontrolled search path element vulnerability in Backup Management Functionality in Synology DiskStation Manager DSM before 7.1-42661 allows remote authenticated users to read or write arbitrary files via unspecified vectors...

5.5CVSS7.5AI score0.0097EPSS
SaveExploits0References2Affected Software3
Vulnrichment
Vulnrichment
•added 2023/06/13 6:52 a.m.•16 views

CVE-2023-0142

Uncontrolled search path element vulnerability in Backup Management functionality in Synology DiskStation Manager DSM before 6.2.4-25556-8, 7.0.1-42218-7 and 7.1-42661 allows remote authenticated users with administrator privileges to read or write arbitrary files via unspecified vectors...

6.5CVSS7.7AI score0.0097EPSS
SaveExploits0References2
CVE
CVE
•added 2023/06/13 6:52 a.m.•92 views

CVE-2023-0142

CVE-2023-0142 concerns an Uncontrolled search path element vulnerability in the Backup Management functionality of Synology DiskStation Manager (DSM). Affected products include DSM versions prior to fixed releases: 6.2.4-25556-8, 7.0.1-42218-7, and 7.1-42661. The underlying issue enables remote a...

8.1CVSS6.9AI score0.0097EPSS
SaveExploits0References2Affected Software3
Cvelist
Cvelist
•added 2023/06/13 6:52 a.m.•45 views

CVE-2023-0142

Uncontrolled search path element vulnerability in Backup Management functionality in Synology DiskStation Manager DSM before 6.2.4-25556-8, 7.0.1-42218-7 and 7.1-42661 allows remote authenticated users with administrator privileges to read or write arbitrary files via unspecified vectors...

6.5CVSS7.8AI score0.0097EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/06/13 12:00 a.m.•18 views

PT-2023-16031 · Synology · Synology Diskstation Manager

Name of the Vulnerable Software and Affected Versions: Synology DiskStation Manager DSM versions 6.2.4-25556-7 and earlier, 7.0.1-42218-6 and earlier Synology DiskStation Manager DSM version 7.1-42660 and earlier Description: The issue allows remote authenticated users with administrator privileg...

8.1CVSS6.5AI score0.0097EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/06/13 12:00 a.m.•3 views

CVE-2023-0142: Uncontrolled Search Path Element

Uncontrolled search path element vulnerability in Backup Management functionality in Synology DiskStation Manager DSM before 6.2.4-25556-8, 7.0.1-42218-7 and 7.1-42661 allows remote authenticated users with administrator privileges to read or write arbitrary files via unspecified vectors...

8.1CVSS7.7AI score0.0097EPSS
SaveExploits0References2
Exploit DB
Exploit DB
•added 2021/07/16 12:00 a.m.•271 views

Seagate BlackArmor NAS sg2000-2000.1331 - Command Injection

Exploit Title: Seagate BlackArmor NAS sg2000-2000.1331 - Command Injection Date: 15.07.2021 Discovered by: Jeroen - IT Nerdbox Exploit Author: Metin Yunus Kandemir Version: sg2000-2000.1331 Vendor Homepage: https://www.seagate.com/ Software Link:...

5.3AI score
SaveExploits0
CNVD
CNVD
•added 2021/07/07 12:00 a.m.•15 views

Information leakage vulnerability in backup management server of Hangzhou Hikvision Digital Technology Co.

Hangzhou Hikvision System Technology Co., Ltd. is a video-centered intelligent IOT solution provider and operation service provider. An information leakage vulnerability exists in the backup management server of Hangzhou Hikvision Digital Technology Company Limited, which can be exploited by...

6.5AI score
SaveExploits0
CNVD
CNVD
•added 2021/07/06 12:00 a.m.•23 views

Directory Traversal Vulnerability in Backup Management Server of Hangzhou Hikvision Digital Technology Co.

Hikvision is a provider of video-centric intelligent IoT solutions and big data services. A directory traversal vulnerability exists in the backup management server of Hangzhou Hikvision Digital Technology Co. Ltd. that can be exploited by attackers to obtain sensitive information...

6.8AI score
SaveExploits0
CNVD
CNVD
•added 2021/07/06 12:00 a.m.•15 views

Weak Password Vulnerability in Hikvision Backup Management Server

Hikvision is a provider of video-centric intelligent IoT solutions and big data services. A weak password vulnerability exists in Hikvision's backup management server, which can be exploited by attackers to obtain sensitive information...

7AI score
SaveExploits0
CNVD
CNVD
•added 2021/04/26 12:00 a.m.•11 views

Logic Flaw Vulnerability in Backup Management Server V2.3 at Hangzhou Hikvision System Technology Co.

Hangzhou Hikvision System Technology Co., Ltd. is a video-centered intelligent IOT solution provider and operation service provider. A logic flaw vulnerability exists in the Backup Management Server V2.3 of Hangzhou Hikvision Systems Technology Co. that can be exploited by attackers to obtain...

6.7AI score
SaveExploits0
CNVD
CNVD
•added 2021/02/22 12:00 a.m.•10 views

SQL Injection Vulnerability in Backup Management Server of Hangzhou Hikvision Digital Technology Co.

Hikvision is a video-centric IoT solution provider, offering integrated security, smart business and big data services. A SQL injection vulnerability exists in the backup management server of Hangzhou Hikvision Digital Technology Co. Ltd, which can be exploited by attackers to obtain sensitive...

7.5AI score
SaveExploits0
CNVD
CNVD
•added 2019/09/27 12:00 a.m.•5 views

Unauthorized Access Vulnerability in Hikvision Backup Management Server

Hikvision is a video-centric IoT solution provider, offering integrated security, smart business and big data services. An unauthorized access vulnerability exists in the Hikvision Backup Management Server, which can be exploited by an attacker to gain unauthorized access to the system...

7AI score
SaveExploits0
NVD
NVD
•added 2018/02/23 5:29 p.m.•30 views

CVE-2014-3206

Seagate BlackArmor NAS allows remote attackers to execute arbitrary code via the session parameter to localhost/backupmgt/localJob.php or the authname parameter to localhost/backupmgmt/preconnectcheck.php...

10CVSS9.9AI score0.51014EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2018/02/23 5:00 p.m.•38 views

CVE-2014-3206

Seagate BlackArmor NAS allows remote attackers to execute arbitrary code via the session parameter to localhost/backupmgt/localJob.php or the authname parameter to localhost/backupmgmt/preconnectcheck.php...

9.9AI score0.51014EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/10/05 12:00 a.m.•7 views

CVE-2017-1000086: Missing Authorization

The Periodic Backup Plugin did not perform any permission checks, allowing any user with Overall/Read access to change its settings, trigger backups, restore backups, download backups, and also delete all previous backups via log rotation. Additionally, the plugin was not requiring requests to it...

8CVSS7.4AI score0.01072EPSS
SaveExploits0References2
Mend
Mend
•added 2017/10/04 1:00 a.m.•3 views

CVE-2017-1000086

The Periodic Backup Plugin did not perform any permission checks, allowing any user with Overall/Read access to change its settings, trigger backups, restore backups, download backups, and also delete all previous backups via log rotation. Additionally, the plugin was not requiring requests to it...

8.6CVSS0.01072EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2013/02/12 12:00 a.m.•35 views

IBM Spectrum Protect / Tivoli Storage Manager Client Installed

IBM Spectrum Protect Client, formerly known as Tivoli Storage Manager Client, a client for Tivoli Storage Manager, is installed on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid64567; scriptversion"1.11";...

5.4AI score
SaveExploits0References1
Fedora
Fedora
•added 2013/01/24 10:02 p.m.•25 views

[SECURITY] Fedora 16 Update: bacula-5.0.3-33.fc16

Bacula is a set of programs that allow you to manage the backup, recovery, and verification of computer data across a network of different computers. It is based on a client/server architecture and is efficient and relatively easy to use, while offering many advanced storage management features...

4CVSS4AI score0.02676EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2012/08/30 12:00 a.m.•29 views

Fedora Update for bacula FEDORA-2012-11717

Check for the Version of bacula OpenVAS Vulnerability Test Fedora Update for bacula FEDORA-2012-11717 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

6.9CVSS0.1AI score0.00387EPSS
SaveExploits0References2
Rows per page
Query Builder