Lucene search
+L

297 matches found

Zero Day Initiative
Zero Day Initiative
•added 2026/07/15 12:00 a.m.•11 views

G DATA Total Security Backup Service Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of G DATA Total Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Backup...

7.8CVSS7.7AI score0.002EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/07/15 12:00 a.m.•31 views

PT-2026-60340

G DATA Total Security Backup Service Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of G DATA Total Security. An attacker must first obtain the ability to execute low-privileged code on the target...

7.8CVSS7.5AI score0.002EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/07/14 5:06 p.m.•26 views

CVE-2026-50364 Windows Backup Service Elevation of Privilege Vulnerability

...

7.3CVSS7.3AI score0.00469EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/07/14 5:06 p.m.•56 views

CVE-2026-50364 Windows Backup Service Elevation of Privilege Vulnerability

...

7.3CVSS0.00469EPSS
SaveExploits0References1
OSV
OSV
•added 2026/07/06 8:03 a.m.•15 views

PYSEC-2026-790 OpenStack Cinder Denial of Service using XML entities

The 1 backup api/contrib/backups.py and 2 volume transfer contrib/volumetransfer.py APIs in OpenStack Cinder Grizzly 2013.1.3 and earlier allows remote attackers to cause a denial of service resource consumption and crash via an XML Entity Expansion XEE attack. NOTE: this issue is due to an...

4.3CVSS5.9AI score0.02626EPSS
SaveExploits0References9
Cvelist
Cvelist
•added 2026/06/19 2:16 p.m.•50 views

CVE-2016-20086 Vembu StoreGrid 4.0 Unquoted Service Path Privilege Escalation

Vembu StoreGrid 4.0 contains an unquoted service path vulnerability in the RemoteBackup and RemoteBackupwebServer services that allows local attackers to escalate privileges. Attackers can place a malicious executable in the unquoted path and restart the service to execute code with LocalSystem...

8.5CVSS0.00168EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/06/19 2:16 p.m.•22 views

EUVD-2016-10899

Vembu StoreGrid 4.0 contains an unquoted service path vulnerability in the RemoteBackup and RemoteBackupwebServer services that allows local attackers to escalate privileges. Attackers can place a malicious executable in the unquoted path and restart the service to execute code with LocalSystem...

8.5CVSS6AI score0.00168EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/03/26 11:03 p.m.•14 views

CVE-2026-4822

A vulnerability was detected in Enter Software Iperius Backup up to 8.7.3. Affected is an unknown function of the file C:\ProgramData\IperiusBackup\Jobs\ of the component Backup Service. Performing a manipulation results in creation of temporary file with insecure permissions. The attack is only...

7.3CVSS6.3AI score0.00157EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/03/25 8:31 p.m.•41 views

CVE-2026-4822 Enter Software Iperius Backup Backup Service temp file

A vulnerability was detected in Enter Software Iperius Backup up to 8.7.3. Affected is an unknown function of the file C:\ProgramData\IperiusBackup\Jobs\ of the component Backup Service. Performing a manipulation results in creation of temporary file with insecure permissions. The attack is only...

7.3CVSS0.00157EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/03/25 8:31 p.m.•8 views

CVE-2026-4822 Enter Software Iperius Backup Backup Service temp file

A vulnerability was detected in Enter Software Iperius Backup up to 8.7.3. Affected is an unknown function of the file C:\ProgramData\IperiusBackup\Jobs\ of the component Backup Service. Performing a manipulation results in creation of temporary file with insecure permissions. The attack is only...

7.3CVSS5.7AI score0.00157EPSS
SaveExploits0References5
CVE
CVE
•added 2026/03/25 8:31 p.m.•27 views

CVE-2026-4822

Summary: CVE-2026-4822 affects Enter Software Iperius Backup bis 8.7.3. The issue is in an unknown function within C:\ProgramData\IperiusBackup\Jobs\ of the Backup Service, where manipulation can create a temporary file with insecure permissions. The attack is local with high complexity, but a pu...

7.3CVSS5.7AI score0.00157EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/25 12:00 a.m.•2 views

CVE-2026-4822: Creation of Temporary File With Insecure Permissions

A vulnerability was detected in Enter Software Iperius Backup up to 8.7.3. Affected is an unknown function of the file C:\ProgramData\IperiusBackup\Jobs\ of the component Backup Service. Performing a manipulation results in creation of temporary file with insecure permissions. The attack is only...

7.3CVSS5.8AI score0.00157EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/02/05 1:23 a.m.•15 views

CVE-2026-1811

A flaw has been found in bolo-blog bolo-solo up to 2.6.4. This affects the function importFromMarkdown of the file src/main/java/org/b3log/solo/bolo/prop/BackupService.java of the component Filename Handler. Executing a manipulation of the argument File can lead to path traversal. The attack may ...

8.8CVSS6AI score0.00522EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/02/05 1:23 a.m.•16 views

CVE-2026-1812

A vulnerability has been found in bolo-blog bolo-solo up to 2.6.4. This impacts the function importFromCnblogs of the file src/main/java/org/b3log/solo/bolo/prop/BackupService.java of the component Filename Handler. The manipulation of the argument File leads to path traversal. It is possible to...

9.8CVSS6.1AI score0.00485EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/02/05 1:23 a.m.•15 views

CVE-2026-1810

A vulnerability was detected in bolo-blog bolo-solo up to 2.6.4. The impacted element is the function unpackFilteredZip of the file src/main/java/org/b3log/solo/bolo/prop/BackupService.java of the component ZIP File Handler. Performing a manipulation of the argument File results in path traversal...

8.8CVSS6.1AI score0.00457EPSS
SaveExploits1References1
NVD
NVD
•added 2026/02/05 12:15 a.m.•20 views

CVE-2019-25271

NETGATE Data Backup 3.0.620 contains an unquoted service path vulnerability in its NGDatBckpSrv Windows service configuration. Attackers can exploit the unquoted path to inject and execute malicious code with LocalSystem privileges by placing executable files in specific directory locations...

8.5CVSS0.0037EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/02/04 12:30 a.m.•14 views

EUVD-2026-5153

A flaw has been found in bolo-blog bolo-solo up to 2.6.4. This affects the function importFromMarkdown of the file src/main/java/org/b3log/solo/bolo/prop/BackupService.java of the component Filename Handler. Executing a manipulation of the argument File can lead to path traversal. The attack may ...

6.5CVSS5AI score0.00522EPSS
SaveExploits1References6
NVD
NVD
•added 2026/02/03 11:16 p.m.•31 views

CVE-2026-1812

A vulnerability has been found in bolo-blog bolo-solo up to 2.6.4. This impacts the function importFromCnblogs of the file src/main/java/org/b3log/solo/bolo/prop/BackupService.java of the component Filename Handler. The manipulation of the argument File leads to path traversal. It is possible to...

9.8CVSS0.00485EPSS
SaveExploits1References5
OSV
OSV
•added 2026/02/03 10:32 p.m.•15 views

CVE-2026-1812 bolo-blog bolo-solo Filename BackupService.java importFromCnblogs path traversal

A vulnerability has been found in bolo-blog bolo-solo up to 2.6.4. This impacts the function importFromCnblogs of the file src/main/java/org/b3log/solo/bolo/prop/BackupService.java of the component Filename Handler. The manipulation of the argument File leads to path traversal. It is possible to...

5.3CVSS6AI score
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2026/02/03 10:32 p.m.•9 views

CVE-2026-1812 bolo-blog bolo-solo Filename BackupService.java importFromCnblogs path traversal

A vulnerability has been found in bolo-blog bolo-solo up to 2.6.4. This impacts the function importFromCnblogs of the file src/main/java/org/b3log/solo/bolo/prop/BackupService.java of the component Filename Handler. The manipulation of the argument File leads to path traversal. It is possible to...

6.5CVSS6AI score0.00485EPSS
SaveExploits1References5
Rows per page
Query Builder