CVE-2019-7731

MyWebSQL 3.7 has a remote code execution RCE vulnerability after an attacker writes shell code into the database, and executes the Backup Database function with a .php filename for the backup's archive file...

CVE-2019-7731

MyWebSQL 3.7 has a remote code execution RCE vulnerability after an attacker writes shell code into the database, and executes the Backup Database function with a .php filename for the backup's archive file...

Security Bulletin: TSM client SetUID elevation of privilege (CVE-2014-0907)

Summary A vulnerability in the IBM Tivoli Storage Manager TSM AIX and HP-UX clients could allow a local user to gain elevated privilege. Vulnerability Details CVE ID: CVE-2014-0907 DESCRIPTION: The IBM Tivoli Storage Manager TSM AIX and HP-UX client binaries have been compiled in an insecure way....

Security Bulletin: TSM client metadata local unauthorized access (CVE-2013-6335)

Summary IBM Tivoli Storage Manger TSM for Space Management files can be restored incorrectly by the TSM Backup-Archive client, potentially allowing unauthorized local access to those files. Vulnerability Details CVE ID: CVE-2013-6335 Description: The file metadata of TSM for Space Management file...

Security Bulletin: TSM Client GUI local hang (CVE-2014-0876)

Summary An IBM Tivoli Storage Manager TSM client local vulnerability can cause the crash or hang of certain Java GUI functions. Vulnerability Details CVE ID: CVE-2014-0876 Description: A local buffer overrun in the IBM Tivoli Storage Manager TSM Windows and Macintosh backup-archive client Java GU...

CVE-2017-7133

An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "MobileBackup" component. It allows remote attackers to obtain sensitive cleartext information in opportunistic circumstances by leveraging read access to a backup archive that was supposed to hav...

CVE-2017-7133: Cleartext Transmission of Sensitive Information

An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "MobileBackup" component. It allows remote attackers to obtain sensitive cleartext information in opportunistic circumstances by leveraging read access to a backup archive that was supposed to hav...

CVE-2017-1301: Improper Link Resolution Before File Access

IBM Spectrum Protect 7.1 and 8.1 could allow a local attacker to launch a symlink attack. IBM Spectrum Protect Backup-archive Client creates temporary files insecurely. A local attacker could exploit this vulnerability by creating a symbolic link from a temporary file to various files on the...

Aerohive Networks HiveManager Remote Shell Upload Exploit

Exploit for hardware platform in category web applications I. BACKGROUND Aerohive Networks HiveManager Classic Online NMS is a cloud-enabled enterprise-class management system for Aerohive networking products. HiveManager Classic Online offers simple policy creation, firmware upgrades, and...

Design/Logic Flaw

HiveManager Classic through 8.1r1 allows arbitrary JSP code execution by modifying a backup archive before a restore, because the restore feature does not validate pathnames within the archive. An authenticated, local attacker - even restricted as a tenant - can add a jsp at...

CVE-2017-14105

HiveManager Classic through 8.1r1 allows arbitrary JSP code execution by modifying a backup archive before a restore, because the restore feature does not validate pathnames within the archive. An authenticated, local attacker - even restricted as a tenant - can add a jsp at...

CVE-2017-14105

HiveManager Classic through 8.1r1 allows arbitrary JSP code execution by modifying a backup archive before a restore, because the restore feature does not validate pathnames within the archive. An authenticated, local attacker – even restricted as a tenant – can add a jsp at...

CVE-2017-14105: Improper Input Validation

HiveManager Classic through 8.1r1 allows arbitrary JSP code execution by modifying a backup archive before a restore, because the restore feature does not validate pathnames within the archive. An authenticated, local attacker - even restricted as a tenant - can add a jsp at...

IBM Tivoli Storage Manager Backup-Archive client authentication bypass vulnerability

IBM Tivoli Storage Manager TSM is a suite of backup and recovery management solutions from IBM in the U.S. It supports data protection, space management and archiving, business recovery, and disaster recovery.IBM TSM Backup-Archive Client is one of the backup archive clients. A security...

CVE-2014-6195

The 1 Java GUI and 2 Web GUI components in the IBM Tivoli Storage Manager TSM Backup-Archive client 5.4 and 5.5 before 5.5.4.4 on AIX, Linux, and Solaris; 5.4.x and 5.5.x on Windows and z/OS; 6.1 before 6.1.5.7 on z/OS; 6.1 and 6.2 before 6.2.5.2 on Windows, before 6.2.5.3 on AIX and Linux x86, a...

CVE-2014-6195

The CVE affects IBM Tivoli Storage Manager (TSM) Backup-Archive Client Java GUI and Web GUI when using Data Protection for Domino. Local attackers can bypass authentication and restore a Domino database or transaction-log backup via unspecified vectors. Affected versions include 5.4–5.5 before 5....

PT-2015-3834 · Ibm · Domino +1

Name of the Vulnerable Software and Affected Versions: IBM Tivoli Storage Manager TSM Backup-Archive client versions 5.4 through 5.5 before 5.5.4.4 IBM Tivoli Storage Manager TSM Backup-Archive client versions 5.4.x and 5.5.x on Windows and z/OS IBM Tivoli Storage Manager TSM Backup-Archive clien...

CVE-2013-6335

The Backup-Archive client in IBM Tivoli Storage Manager TSM for Space Management 5.x and 6.x before 6.2.5.3, 6.3.x before 6.3.2, 6.4.x before 6.4.2, and 7.1.x before 7.1.0.3 on Linux and AIX, and 5.x and 6.x before 6.1.5.6 on Solaris and HP-UX, does not preserve file permissions across backup and...

Design/Logic Flaw

The Backup-Archive client in IBM Tivoli Storage Manager TSM for Space Management 5.x and 6.x before 6.2.5.3, 6.3.x before 6.3.2, 6.4.x before 6.4.2, and 7.1.x before 7.1.0.3 on Linux and AIX, and 5.x and 6.x before 6.1.5.6 on Solaris and HP-UX, does not preserve file permissions across backup and...

CVE-2013-6335

IBM TSM Backup-Archive client for Space Management (Linux/AIX) versions 5.x–7.1.x do not preserve file permissions during backup/restore, potentially allowing local users to bypass access restrictions. Affected releases include 7.1.0.0–0.0.2, 6.4.x, 6.3.x, 6.2.x, 6.1.x, and 5.4–5.5; remediation i...