167 matches found
Wire-server code issue vulnerability
Wire-server is a backup server for the open source Wire secure messaging application. Wire-server has a security vulnerability that could be exploited to trigger a user's email address change using only a short-term session token in the "Authorization" header...
CVE-2020-12595
An information disclosure flaw allows a malicious, authenticated, privileged web UI user to obtain a password for a remote SCP backup server that they might not otherwise be authorized to access. This affects SMG prior to 10.7.4...
CVE-2020-12595
An information disclosure flaw allows a malicious, authenticated, privileged web UI user to obtain a password for a remote SCP backup server that they might not otherwise be authorized to access. This affects SMG prior to 10.7.4...
CVE-2020-12595: Undefined Security Weakness
An information disclosure flaw allows a malicious, authenticated, privileged web UI user to obtain a password for a remote SCP backup server that they might not otherwise be authorized to access. This affects SMG prior to 10.7.4...
CVE-2020-6248
SAP Adaptive Server Enterprise Backup Server, version 16.0, does not perform the necessary validation checks for an authenticated user while executing DUMP or LOAD command allowing arbitrary code execution or Code Injection...
CVE-2020-6248
SAP Adaptive Server Enterprise Backup Server, version 16.0, does not perform the necessary validation checks for an authenticated user while executing DUMP or LOAD command allowing arbitrary code execution or Code Injection...
CVE-2020-6248
CVE-2020-6248 affects SAP Adaptive Server Enterprise (Backup Server) 16.0. The issue arises because the server does not perform required validation for an authenticated user during DUMP/LOAD, enabling arbitrary code execution or code injection. Related sources describe potential database takeover...
CVE-2020-6248: Improper Input Validation
SAP Adaptive Server Enterprise Backup Server, version 16.0, does not perform the necessary validation checks for an authenticated user while executing DUMP or LOAD command allowing arbitrary code execution or Code Injection...
Option to Install Veeam ONE Agent is Unavailable (Greyed Out)
Challenge When attempting to install the Veeam ONE Agent on a Veeam Backup Server, theInstall agent option is unavailable and greyed out. Cause There are several possible causes for this issue: The Veeam ONE Agent is already installed on the Veeam Backup & Replication Server. The Veeam ONE Server...
VMs stored on vVols may experience a significant stun during the snapshot removal process after the backup session.
Challenge During the snapshot removal operation that occurs at the end of a backup/replication job for a VM stored on a vVol Datastore, the following is observed: The Guest OS of the VM being processed is stunned or frozen. Monitoring software may report that the Guest OS is inaccessible due to a...
Managed Veeam Agent backup job fails with "Unknown invoker method: 2757" error
A Veeam Agent backup job managed by the backup server fails with the following error: Failed to start backup job Error: Unknown invoker method: 2757...
Backup Job fails with "This functionality requires using paid Veeam Agent edition" error or Agents discovery session fails with "Remote deployment and management is available for licensed agents only" Error.
Challenge The following error appears during the backup job session, then the backup job fails: This functionality requires using paid Veeam Agent edition. The following error appears during the Agents Discovery session, then the task fails: Remote deployment and management is available for...
Quest NetVault Backup Server 11.4.5 - Process Manager Service SQL Injection Remote Code Execution
Quest NetVault Backup Server 11.4.5 - Process Manager Service SQL Injection Remote Code Execution Exploit Title: Quest NetVault Backup Server 11.4.5 Process Manager Service SQL Injection Remote Code Execution Vulnerability ZDI-17-982 Date: 2-21-2019 Exploit Author: credit goes to rgod for finding...
Quest NetVault Backup Server < 11.4.5 - SQL Injection / Remote Code Execution Vulnerability
Exploit for multiple platform in category web applications Exploit Title: Quest NetVault Backup Server 11.4.5 Process Manager Service SQL Injection Remote Code Execution Vulnerability ZDI-17-982 Exploit Author: credit goes to rgod for finding the bug Version: Quest NetVault Backup Server 11.4.5 C...
[SECURITY] Fedora 28 Update: haproxy-1.8.15-1.fc28
HAProxy is a TCP/HTTP reverse proxy which is particularly suited for high availability environments. Indeed, it can: - route HTTP requests depending on statically assigned cookies - spread load among several servers while assuring server persistence through the use of HTTP cookies - switch to...
SAP Adaptive Server Enterprise Information Disclosure Vulnerability (CNVD-2019-05056)
SAP Adaptive Server Enterprise ASE is a relational database management system from SAP. The system can be used in data-intensive environments , and has a fast , stable performance , etc. Backup Server is one of the backup server . An information disclosure vulnerability exists in the Backup Serve...
CVE-2018-2468
Under certain conditions the backup server in SAP Adaptive Server Enterprise ASE, versions 15.7 and 16.0, allows an attacker to access information which would otherwise be restricted...
Authentication flaw
Under certain conditions the backup server in SAP Adaptive Server Enterprise ASE, versions 15.7 and 16.0, allows an attacker to access information which would otherwise be restricted...
CVE-2018-2468
CVE-2018-2468 affects SAP Adaptive Server Enterprise (ASE) backup server in versions 15.7 and 16.0. The issue is an information-disclosure vulnerability where an attacker can access restricted information under certain conditions. The provided connected documents confirm the affected component (B...
CVE-2018-2468: Undefined Security Weakness
Under certain conditions the backup server in SAP Adaptive Server Enterprise ASE, versions 15.7 and 16.0, allows an attacker to access information which would otherwise be restricted...