PT-2022-22875

Name of the Vulnerable Software and Affected Versions Proxmox Virtual Environment PVE and Proxmox Mail Gateway PMG versions prior to pve-http-server 4.1-3 Description The issue affects Proxmox Virtual Environment PVE and Proxmox Mail Gateway PMG when proxying HTTP requests between pvepmgproxy and...

WordPress plugin UpdraftPlus 安全漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an open source application plugin for WordPress. A security vulnerability exists in the WordPress plugin...

CVE-2021-32001

K3s in SUSE Rancher allows any user with direct access to the datastore, or a copy of a datastore backup, to extract the cluster's confidential keying material cluster certificate authority private keys, secrets encryption configuration passphrase, etc. and decrypt it, without having to know the...

SUSE Rancher K3s 安全漏洞

SUSE Rancher K3s is a CNCF sandboxing project from SUSE Germany that provides a lightweight but powerful certified Kubernetes distribution. A security vulnerability exists in SUSE Rancher K3s that allows any user with direct access to a datastore, or a copy of a datastore backup, to extract the...

CVE-2020-10706: Cleartext Storage of Sensitive Information

A flaw was found in OpenShift Container Platform where OAuth tokens are not encrypted when the encryption of data at rest is enabled. This flaw allows an attacker with access to a backup to obtain OAuth tokens and then use them to log into the cluster as any user who logged into the cluster via t...

CVE-2020-7912

In JetBrains YouTrack before 2019.2.59309, SMTP/Jabber settings could be accessed using backups...

WordPress II_OData_Importer 1.0 Database Disclosure

Exploit Title : WordPress IIODataImporter Plugins 1.0 Database Backup Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 02/12/2018 Vendor Homepages : wordpress.org Information about Plugin : +...

Multiple vulnerabilities in PCWAP mobile PC website information management system

PCWAP cell phone PC website information management system is a set of PC and WAP cell phone version of the website can be achieved in the same back-end management of PHP free open-source cell phone station CMS system. PCWAP cell phone PC website information management system has information...

ONELAN CMS Information Disclosure Vulnerability (CNVD-2018-13075)

ONELAN Content Management System CMS is a content management system. An information disclosure vulnerability exists in ONELAN CMS that allows a user to access the system's backup or file system to read all user passwords...

CVE-2009-0571

The CVE-2009-0571 entry affects Ninja Designs Mailist 3.0. The admin.php component stores backup copies of maillist.php under the web root with insufficient access control, allowing remote attackers to obtain sensitive information via a direct request to the backup directory. The provided documen...