CVE-2021-40385

CVE-2021-40385 affects Unitrends Backup Software (server component) prior to version 10.5.5-2. Multiple connected sources corroborate a privilege escalation from a read-only user to administrator. The provided documents do not specify the underlying technical root cause, affected subcomponents, i...

CVE-2021-40387

CVE-2021-40387 affects the server software in Kaseya Unitrends Backup Software before 10.5.5-2 . The vulnerability enables authenticated remote code execution . Available connected documents confirm the affected product and impact but do not provide concrete exploit details, specific root cause, ...

CVE-2021-40387: Undefined Security Weakness

An issue was discovered in the server software in Kaseya Unitrends Backup Software before 10.5.5-2. There is authenticated remote code execution...

CVE-2021-40385: Undefined Security Weakness

An issue was discovered in the server software in Kaseya Unitrends Backup Software before 10.5.5-2. There is a privilege escalation from read-only user to admin...

PT-2021-22890

Name of the Vulnerable Software and Affected Versions Kaseya Unitrends Backup Software versions prior to 10.5.5-2 Description An issue was discovered in the server software, allowing authenticated remote code execution. Recommendations For versions prior to 10.5.5-2, update to version 10.5.5-2 or...

PT-2021-22889

Name of the Vulnerable Software and Affected Versions Kaseya Unitrends Backup Software versions prior to 10.5.5-2 Description An issue was discovered in the server software, allowing a privilege escalation from a read-only user to an admin. Recommendations For versions prior to 10.5.5-2, update t...

August 10, 2021—KB5005031 (OS Build 18363.1734)

None None...

Acronis True Image security vulnerabilities

Acronis True Image is a famous data backup and restore software from Acronis Singapore. The software can be used to create drive and disk images and can restore the image when a clean system is needed. Acronis True Image suffers from a security vulnerability that stems from insecure folder...

Dell NetWorker security vulnerabilities

DELL EMC NetWorker is a suite of unified backup and recovery software from Dell DELL USA. The software provides backup and recovery, deduplication elimination, backup reporting, and other features. A security vulnerability exists in DELL EMC NetWorker that originates from an improper implementati...

Acronis True Image security vulnerabilities

Acronis True Image is a well-known data backup and restore software from Singapore-based Acronis. The software can be used to create drive and disk images and can restore images when a clean system is needed.Acronis True Image has a security vulnerability that can be exploited by attackers for...

Huawei Data Communication: Multiple Vulnerabilities Released on Microsoft security advisory 4025685 (huawei-sa-20170909-01-windows)

Microsoft had released a Security Advisory 4025685 on June 14 to fix multiple critical security vulnerabilities in such systems as Microsoft Windows XP, Windows Server 2003, Windows VISTA, and Windows 8. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a...

Huawei Data Communication: Privilege Escalation Vulnerability in Some Huawei Products (huawei-sa-20181010-01-debug)

A statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software Developer Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

DEBIAN-CVE-2013-1425

ldap-git-backup before 1.0.4 exposes password hashes due to incorrect directory permissions...

IBM Spectrum Protect Servers and Storage Agents Privilege License and Access Control Issues Vulnerability

IBM Spectrum Protect formerly known as Tivoli Storage Manager is a suite of data protection platforms from IBM in the United States. The platform provides organizations with a single point of control and management, and supports backup and recovery for virtual, physical and cloud environments of...

Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15890)

The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the saveconfiguration method in Quest DR Series disk backup software versions prior to 4.0.3.1. An attacker could exploit this vulnerability to execute commands...

Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15874)

The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the "License Delete" method of Quest DR Series disk backup software prior to version 4.0.3.1. The vulnerability can be exploited to execute commands via a specially crafted 'serviceTag'...

Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15867)

The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the "user delete" method in Quest DR Series Disk Backup Software versions prior to 4.0.3.1. The vulnerability can be exploited to execute system commands via the 'user' parameter...

Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15885)

The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the "Delete Email Alerts" method in versions of Quest DR Series disk backup software prior to version 4.0.3.1. An attacker could exploit this vulnerability to execute commands...

Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15632)

The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the "Update Storage Group" method in Quest DR Series disk backup software before 4.0.3.1. An attacker could exploit this vulnerability to execute commands...

Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15627)

The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the "Start Copy" method in Quest DR Series Disk Backup Software before 4.0.3.1. The vulnerability can be exploited to execute arbitrary commands via the 'name' parameter...