CVE-2018-11185

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 43 of 46...

CVE-2018-11168

Summary: CVE-2018-11168 affects Quest DR Series Disk Backup software prior to 4.0.3.1 and is part of a broader set of command‑injection vulnerabilities in DR Series appliances. The connected documents describe concrete vectors via the JSON‑RPC API that enable remote command execution, including u...

CVE-2018-11167

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 25 of 46...

CVE-2018-11174

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 32 of 46...

CVE-2018-11181

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 39 of 46...

CVE-2018-11179

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 37 of 46...

CVE-2018-11182

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 40 of 46...

CVE-2018-11157

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 15 of 46...

CVE-2018-11178

CVE-2018-11178 is part of a set of related command-injection vulnerabilities in Quest DR Series Disk Backup appliances (Quest DR Series Disk Backup Software) affecting versions up to 4.0.3.1. The CoreLabs CORE-2018-0002 advisory and subsequent materials describe multiple CVEs (e.g., CVE-2018-1114...

The vulnerability of the HPE Data Protector backup software arises from an operation that goes beyond the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the HPE Data Protector backup tool arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the datamover module of the Linux operating system-based backup software NovaBACKUP allows a perpetrator to execute arbitrary commands.

The vulnerability of the datamover module of the Linux operating system-based NovaBACKUP data center backup software exists due to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

The vulnerability of NetBackup Appliance’s backup and recovery software lies in the lack of measures taken to sanitize input data. This allows attackers to execute arbitrary commands with root privileges.

The vulnerability of NetBackup Appliance’s backup and recovery software lies in the lack of measures for cleaning input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with root privileges remotely...

Expired license for Veeam Agent causes scheduled jobs to fail

Challenge Although the license information screen shows that the license for Veeam Backup & Replication is valid, scheduled jobs are failing with the following error: Error Your trial license has expired Cause If Veeam Agent for Microsoft Windows or Veeam Agent for Linux running on a trial licens...

Uber.com Backup Bug Nets Researcher $9K

A researcher netted a $9,000 payday last summer after digging up a XML external entity XXE vulnerability in a third-party backup software system used by Uber. The vulnerability, which could have given an attacker access to the user backup data of any company using the software, including Uber, wa...

Borg Spoofing Vulnerability (CNVD-2017-00079)

Borg is a deduplication backup program that supports compression and authentication encryption, among other things. A security vulnerability exists in versions of Borg prior to 1.0.9. An attacker could exploit the vulnerability to overwrite an archive...

ArcServe UDP 6.0.3792 Update 2 Build 516 - Unquoted Service Path Privilege Escalation

ArcServe UDP 6.0.3792 Update 2 Build 516 - Unquoted Service Path Privilege Escalation Title: ArcServe UDP - Unquoted Service Path Privilege Escalation CWE Class: CWE-427: Uncontrolled Search Path Element Date: 04/09/2016 Vendor: ArcServe Product: ArcServe UDP Standard Edition for Windows, TRIAL...

ArcServe UDP 6.0.3792 Update 2 Build 516 Privilege Escalation

Title: ArcServe UDP - Unquoted Service Path Privilege Escalation CWE Class: CWE-427: Uncontrolled Search Path Element Date: 04/09/2016 Vendor: ArcServe Product: ArcServe UDP Standard Edition for Windows, TRIAL Type: Backup Software Version: 6.0.3792 Update 2 Build 516 Download URL:...

ArcServe UDP 6.0.3792 Update 2 Build 516 - Unquoted Service Path Privilege Escalation

Exploit for windows platform in category local exploits Title: ArcServe UDP - Unquoted Service Path Privilege Escalation CWE Class: CWE-427: Uncontrolled Search Path Element Date: 04/09/2016 Vendor: ArcServe Product: ArcServe UDP Standard Edition for Windows, TRIAL Type: Backup Software Version:...

ArcServe UDP 6.0.3792 Update 2 Build 516 - Unquoted Service Path Privilege Escalation

Title: ArcServe UDP - Unquoted Service Path Privilege Escalation CWE Class: CWE-427: Uncontrolled Search Path Element Date: 04/09/2016 Vendor: ArcServe Product: ArcServe UDP Standard Edition for Windows, TRIAL Type: Backup Software Version: 6.0.3792 Update 2 Build 516 Download URL:...

NAP Turbo NAS Series Devices 'Change Password' Function Elevation of Privilege Vulnerability

NAP Turbo NAS Series Devices is a backup software that supports real-time backup, data synchronization and scheduled backup. An unspecified vulnerability exists in the NAP Turbo NAS Series Devices "Change Password" function, which can be exploited by remote attackers to gain elevated privileges...