15001 matches found
CVE-2025-3771
A path or symbolic link manipulation vulnerability in SIR 1.0.3 and prior versions allows an authenticated non-admin local user to overwrite system files with SIR backup files, which can potentially cause a system crash. This was achieved by adding a malicious entry to the registry under the...
CVE-2025-3773
CVE-2025-3773 affects Trellix System Information Reporter (SIR) version 1.0.3 and earlier. The vulnerability is a local, authenticated, non-admin information exposure where a user can extract sensitive data stored in a registry backup folder. Impact is described as sensitive information disclosur...
CVE-2025-3773
A sensitive information exposure vulnerability in System Information Reporter SIR 1.0.3 and prior allows an authenticated non-admin local user to extract sensitive information stored in a registry backup folder...
CVE-2025-3773
A sensitive information exposure vulnerability in System Information Reporter SIR 1.0.3 and prior allows an authenticated non-admin local user to extract sensitive information stored in a registry backup folder...
CVE-2025-3771
CVE-2025-3771 describes a path or symbolic-link manipulation vulnerability in Trellix System Information Reporter (SIR) version 1.0.3 and earlier. An authenticated non-admin local user can overwrite system files by adding a malicious entry to the Trellix SIR registry folder (or via policy) or by ...
June 26, 2025—KB5060826 (OS Builds 22621.5549 and 22631.5549) Preview
None None...
PT-2025-26952
Name of the Vulnerable Software and Affected Versions: System Information Reporter SIR versions 1.0.3 and prior Description: A sensitive information exposure issue allows an authenticated non-admin local user to extract sensitive information stored in a registry backup folder. Recommendations: Fo...
“Failed to retrieve certificate” When Adding AWS Snowball Edge Device
Article Applicability The error message documented in this article can also occur when the Service point specified is invalid or cannot be reached due to a firewall, which is documented in KB4328. This article is specifically regarding a situation in which the correct Service point has been...
June 26, 2025—KB5060829 (OS Build 26100.4484) Preview
None None...
CVE-2025-49135 CVAT missing validation for in-progress backup upload names
CVAT is an open source interactive video and image annotation tool for computer vision. Versions 2.2.0 through 2.39.0 have no validation during the import process of a project or task backup to check that the filename specified in the query parameter refers to a TUS-uploaded file belonging to the...
CVE-2025-49135
CVAT (open source CV annotation tool) versions 2.2.0–2.39.0 have a missing validation during the import of project/task backups, where the filename in the query parameter is not verified to refer to a TUS-uploaded file owned by the same user. An account with a user role who knows other users’ fil...
CVE-2025-32977
Quest KACE Systems Management Appliance SMA 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183, 14.0.x before 14.0.341 Patch 5, and 14.1.x before 14.1.101 Patch 4 allows unauthenticated users to upload backup files to the system. While signature validation is implemented,...
Quest KACE Systems Management Appliance 安全漏洞
Quest Software Quest KACE Systems Management Appliance is an IT asset management appliance from Quest Software, Inc. A security vulnerability exists in the Quest KACE Systems Management Appliance that stems from insufficient validation of backup file uploads, which could result in the upload of a...
Quest KACE Systems Management Appliance 14.1 Unauthenticated Backup Upload
Seralys Security Advisory - Quest KACE SMA allows unauthenticated users to upload backup files to the system. While signature validation is implemented, weaknesses in the validation process can be exploited to upload malicious backup content that could compromise system integrity. Version 14.1 is...
CVE-2025-32977
Quest KACE Systems Management Appliance SMA 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183, 14.0.x before 14.0.341 Patch 5, and 14.1.x before 14.1.101 Patch 4 allows unauthenticated users to upload backup files to the system. While signature validation is implemented,...
CVE-2025-24286
A vulnerability allowing an authenticated user with the Backup Operator role to modify backup jobs, which could execute arbitrary code...
The vulnerability of the QBRM library in the IBM Backup, Recovery, and Media Services (BRMS) operating system for IBM i allows a perpetrator to escalate their privileges and execute arbitrary code.
The vulnerability of the QBRM library in the IBM Backup, Recovery, and Media Services BRMS operating system involves deficiencies in access control. Exploiting this vulnerability allows an attacker to enhance their privileges and execute arbitrary code...
Security Bulletin: Vulnerabilities in Jinja , cryptography & OpenSSL can affect IBM Storage Protect Plus File Systems Agent Backup and Restore
Summary IBM Storage Protect Plus File Systems Agent Backup and Restore can be affected by vulnerabilities in Jinja & cryptography which includes execution of untrusted templates, man-in-middle attacks & a denial of service, as described by the CVEs in the "Vulnerability Details" section. These...
