Lucene search
+L

15102 matches found

Cvelist
Cvelist
added 2025/05/19 9:18 p.m.27 views

CVE-2025-1308 PX Backup Improper Sanitization Vulnerability

A vulnerability exists in PX Backup whereby sensitive information may be logged under specific conditions...

8.4CVSS0.00154EPSS
SaveExploits0References1
CVE
CVE
added 2025/05/19 9:18 p.m.39 views

CVE-2025-1308

Technical details about CVE-2025-1308 are not publicly available in the provided connected documents. Monitor for future updates from vendors and security advisories before assessing impact, affected versions, or fixes.

8.4CVSS6.1AI score0.00154EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/05/19 9:18 p.m.5 views

CVE-2025-1308 PX Backup Improper Sanitization Vulnerability

A vulnerability exists in PX Backup whereby sensitive information may be logged under specific conditions...

8.4CVSS6.5AI score0.00154EPSS
SaveExploits0References1
OSV
OSV
added 2025/05/19 9:15 a.m.21 views

CVE-2025-27566

Path traversal vulnerability exists in a-blog cms versions prior to Ver. 3.1.43 and versions prior to Ver. 3.0.47. This is an issue with insufficient path validation in the backup feature, and exploitation requires the administrator privilege. If this vulnerability is exploited, a remote...

7.2CVSS5.8AI score0.00489EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/05/19 8:09 a.m.7 views

CVE-2025-27566

Path traversal vulnerability exists in a-blog cms versions prior to Ver. 3.1.43 and versions prior to Ver. 3.0.47. This is an issue with insufficient path validation in the backup feature, and exploitation requires the administrator privilege. If this vulnerability is exploited, a remote...

5.1CVSS4.1AI score0.00489EPSS
SaveExploits0References2
CVE
CVE
added 2025/05/19 8:09 a.m.38 views

CVE-2025-27566

CVE-2025-27566 concerns a path traversal vulnerability in the backup feature of a-blog cms. The issue stems from insufficient path validation and affects versions prior to 3.1.43 (and prior to 3.0.47). An attacker who already has administrator privileges (remote authenticated administrator) could...

7.2CVSS4.5AI score0.00489EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2025/05/19 3:57 a.m.11 views

WordPress CYAN Backup plugin < 2.5.3 - Admin+ Stored XSS via General Settings vulnerability

Admin+ Stored XSS via General Settings vulnerability discovered by Bob Matyas in WordPress Plugin CYAN Backup versions 2.5.3...

5.4CVSS5.9AI score0.00298EPSS
SaveExploits1References1Affected Software1
Patchstack
Patchstack
added 2025/05/19 3:22 a.m.10 views

WordPress Backup Database plugin <= 4.9 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Bob Matyas in WordPress Plugin Backup Database versions = 4.9...

4.8CVSS6AI score0.00299EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/05/19 12:00 a.m.6 views

PT-2025-22083 · Px Backup · Px Backup

Name of the Vulnerable Software and Affected Versions: PX Backup affected versions not specified Description: A vulnerability exists in PX Backup whereby sensitive information may be logged under specific conditions. Recommendations: At the moment, there is no information about a newer version th...

8.4CVSS6AI score0.00154EPSS
SaveExploits0References6
Veeam
Veeam
added 2025/05/19 12:00 a.m.29 views

How to register Veeam Data Cloud Vault in Veeam Backup for Microsoft Azure

Article Applicability This article is specifically for Veeam Backup for Microsoft Azure v8. With the release ofVeeam Backup for Microsoft Azure v8.1, the process for adding Veeam Data Cloud Vault as a repository has been fully integrated. Purpose This article documents the procedure for registeri...

7.3AI score
SaveExploits0Affected Software2
CNNVD
CNNVD
added 2025/05/19 12:00 a.m.6 views

Portworx Backup 安全漏洞

Portworx Backup is a Kubernetes backup solution from Portworx that allows you to backup and restore applications and their data across multiple clusters. A security vulnerability exists in Portworx Backup that stems from the possibility of logging sensitive information under certain conditions...

8.4CVSS6.5AI score0.00154EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/05/19 12:00 a.m.8 views

appleple a-blog cms 路径遍历漏洞

appleple a-blog cms is a content management system from appleple. A path traversal vulnerability exists in appleple a-blog cms versions prior to 3.1.43, which stems from insufficient path validation of the backup function, and could lead to a path traversal attack...

7.2CVSS8.3AI score0.00489EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/05/18 8:59 a.m.19 views

CVE-2025-4679

A vulnerability in Synology Active Backup for Microsoft 365 allows remote authenticated attackers to obtain sensitive information via unspecified vectors...

6.5CVSS6.1AI score0.01095EPSS
SaveExploits0References1
GithubExploit
GithubExploit
added 2025/05/18 1:18 a.m.472 views

Exploit for Link Following in Apple Ipados

PoC Conceptual CVE-2024-44258: Vulnerabilidad de Symlink en iO...

7.1CVSS6.2AI score0.00751EPSS
SaveExploits2
RedhatCVE
RedhatCVE
added 2025/05/17 9:03 p.m.9 views

CVE-2024-9662

The CYAN Backup WordPress plugin before 2.5.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

5.4CVSS5.7AI score0.00298EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/17 9:02 p.m.8 views

CVE-2024-9663

The CYAN Backup WordPress plugin before 2.5.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

5.4CVSS5.7AI score0.00298EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/17 9:01 p.m.11 views

CVE-2024-8702

The Backup Database WordPress plugin through 4.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

4.8CVSS5.7AI score0.00299EPSS
SaveExploits1References1
NVD
NVD
added 2025/05/16 9:15 a.m.20 views

CVE-2025-4679

A vulnerability in Synology Active Backup for Microsoft 365 allows remote authenticated attackers to obtain sensitive information via unspecified vectors...

6.5CVSS0.01095EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/05/16 8:36 a.m.10 views

CVE-2025-4679

A vulnerability in Synology Active Backup for Microsoft 365 allows remote authenticated attackers to obtain sensitive information via unspecified vectors...

6.5CVSS6.2AI score0.01095EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/05/16 8:36 a.m.31 views

CVE-2025-4679

A vulnerability in Synology Active Backup for Microsoft 365 allows remote authenticated attackers to obtain sensitive information via unspecified vectors...

6.5CVSS0.01095EPSS
SaveExploits0References1
Rows per page
Query Builder