Lucene search
+L

15164 matches found

ATTACKERKB
ATTACKERKB
added 2024/05/03 2:15 a.m.4 views

CVE-2023-35741

D-Link DAP-2622 DDP Configuration Backup Filename Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this...

8.8CVSS6.4AI score0.0108EPSS
SaveExploits0References3
OSV
OSV
added 2024/05/03 2:15 a.m.9 views

CVE-2023-35739

D-Link DAP-2622 DDP Configuration Backup Server IPv6 Address Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to...

8.8CVSS6.3AI score0.0108EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2024/05/03 2:15 a.m.4 views

CVE-2023-35737

D-Link DAP-2622 DDP Configuration Backup Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit th...

8.8CVSS6.4AI score0.0108EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2024/05/03 2:15 a.m.6 views

CVE-2023-27347

G DATA Total Security Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of G Data Total Security. An attacker must first obtain the ability to execute low-privileged code on the target system in orde...

7.8CVSS7.4AI score0.00396EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2024/05/03 2:15 a.m.18 views

CVE-2023-27347

G DATA Total Security Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of G Data Total Security. An attacker must first obtain the ability to execute low-privileged code on the target system in orde...

7.8CVSS7.8AI score0.00396EPSS
SaveExploits0References1
OSV
OSV
added 2024/05/03 2:15 a.m.10 views

CVE-2023-27347

G DATA Total Security Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of G Data Total Security. An attacker must first obtain the ability to execute low-privileged code on the target system in orde...

7.8CVSS6.2AI score0.00396EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/05/03 1:57 a.m.25 views

CVE-2023-35739 D-Link DAP-2622 DDP Configuration Backup Server IPv6 Address Stack-based Buffer Overflow Remote Code Execution Vulnerability

D-Link DAP-2622 DDP Configuration Backup Server IPv6 Address Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to...

8.8CVSS9.1AI score0.0108EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/05/03 1:57 a.m.46 views

CVE-2023-35739 D-Link DAP-2622 DDP Configuration Backup Server IPv6 Address Stack-based Buffer Overflow Remote Code Execution Vulnerability

D-Link DAP-2622 DDP Configuration Backup Server IPv6 Address Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to...

8.8CVSS9.2AI score0.0108EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/05/03 1:57 a.m.35 views

CVE-2023-35737 D-Link DAP-2622 DDP Configuration Backup Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability

D-Link DAP-2622 DDP Configuration Backup Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit th...

8.8CVSS9.2AI score0.0108EPSS
SaveExploits0References2
CVE
CVE
added 2024/05/03 1:56 a.m.62 views

CVE-2023-27347

CVE-2023-27347 affects G Data Total Security, specifically the Backup Service. The flaw allows local attackers who can execute low-privileged code to leverage a symbolic link in the Backup Service to create arbitrary files, enabling privilege escalation to the SYSTEM context. The vulnerability is...

7.8CVSS7.8AI score0.00396EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2024/05/03 12:00 a.m.8 views

Veritas Technologies Veritas NetBackup 安全漏洞

Veritas Technologies Veritas NetBackup is a powerful enterprise-class data backup management software from Veritas Technologies, USA. A security vulnerability exists in Veritas Technologies Veritas NetBackup versions prior to 10.4 and NetBackup Appliance versions prior to 5.4, which stems from a...

6.8CVSS6.6AI score0.00368EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/05/03 12:00 a.m.15 views

PT-2024-25860 · Veritas · Netbackup Appliance +1

Name of the Vulnerable Software and Affected Versions: Veritas NetBackup versions prior to 10.4 NetBackup Appliance versions prior to 5.4 Description: A vulnerability was discovered in the Alta Recovery Vault feature, allowing a NetBackup administrator to modify the expiration of backups under...

6.8CVSS7.1AI score0.00368EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/05/03 12:00 a.m.25 views

CVE-2024-34404

A vulnerability was discovered in the Alta Recovery Vault feature of Veritas NetBackup before 10.4 and NetBackup Appliance before 5.4. By design, only the cloud administrator should be able to disable the retention lock of Governance mode images. This vulnerability allowed a NetBackup administrat...

6.8CVSS6.5AI score0.00368EPSS
SaveExploits0References1
NVD
NVD
added 2024/05/02 5:15 p.m.32 views

CVE-2024-3546

The WordPress Backup & Migration plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the wpmgdppopulatepopup function in all versions up to, and including, 1.4.8. This makes it possible for authenticated attackers, with subscriber access or above...

4.3CVSS4.4AI score0.00491EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/05/02 4:51 p.m.11 views

CVE-2024-3546 WordPress Backup & Migration <= 1.4.8 - Missing Authorization to Directory Traversal

The WordPress Backup & Migration plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the wpmgdppopulatepopup function in all versions up to, and including, 1.4.8. This makes it possible for authenticated attackers, with subscriber access or above...

4.3CVSS6AI score0.00491EPSS
SaveExploits0References2
CVE
CVE
added 2024/05/02 4:51 p.m.62 views

CVE-2024-3546

CVE-2024-3546 affects the WordPress Backup & Migration plugin (wp-migration-duplicator) for WordPress, up to version 1.4.8. The root cause is a missing capability check in wp_mgdp_populate_popup, enabling authenticated attackers with subscriber access or higher to invoke the function and access l...

4.3CVSS6.4AI score0.00491EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/05/02 4:51 p.m.32 views

CVE-2024-3546 WordPress Backup & Migration <= 1.4.8 - Missing Authorization to Directory Traversal

The WordPress Backup & Migration plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the wpmgdppopulatepopup function in all versions up to, and including, 1.4.8. This makes it possible for authenticated attackers, with subscriber access or above...

4.3CVSS4.7AI score0.00491EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/05/02 12:00 a.m.10 views

WordPress plugin Backup & Migration 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

4.3CVSS6.2AI score0.00491EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2024/05/02 12:00 a.m.31 views

Veritas Backup Exec Remote Agent 21.0.x, 21.1.x, 21,2.x, 21,3.x, 21.4.x, 22.0.x, 22.1.x, 22.2.x Multiple Vulnerabilities

The version of Vertias Backup Exec Remote Agent installed on the remote Windows host is 21.0.x, 21.1.x, 21,2.x, 21,3.x, 21.4.x, 22.0.x, 22.1.x or 22.2.x prior to 22.2 HotFix 917391. It is therefore affectewd by multiple vulnerabilities: - An issue was discovered in Veritas Backup Exec before 22.2...

7.8CVSS5.9AI score0.00167EPSS
SaveExploits0References3
NVD
NVD
added 2024/05/01 7:15 a.m.37 views

CVE-2024-23335

MyBB is a free and open source forum software. The backup management module of the Admin CP may accept .htaccess as the name of the backup file to be deleted, which may expose the stored backup files over HTTP on Apache servers. MyBB 1.8.38 resolves this issue. Users are advised to upgrade. There...

4.7CVSS4.7AI score0.00559EPSS
SaveExploits0References3
Rows per page
Query Builder