Lucene search
+L

15203 matches found

Positive Technologies
Positive Technologies
added 2022/09/23 12:00 a.m.13 views

PT-2022-24189 · WordPress · Backup Scheduler

Name of the Vulnerable Software and Affected Versions: Backup Scheduler plugin versions = 1.5.13 at WordPress. Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing unintended actions on the web...

8.8CVSS8.6AI score0.0037EPSS
SaveExploits0References4
Patchstack
Patchstack
added 2022/09/23 12:00 a.m.45 views

WordPress Backup Scheduler plugin <= 1.5.13 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability discovered by Lana Codes in WordPress Backup Scheduler plugin versions = 1.5.13. Solution Deactivate and delete. This plugin has been closed as of September 19, 2022 and is not available for download. This closure is temporary, pending a full review...

8.8CVSS3AI score0.0037EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/22 3:02 a.m.23 views

Security Bulletin: IBM Maximo Asset Management contains a misconfiguration that could allow an authenticated user to view backup and debug application files which could contain sensitive information (CVE-2015-4965)

Summary IBM Maximo Asset Management configuration allows an authenticated user to view backup and debug application files. This vulnerability could allow a local attacker to obtain sensitive information. The vulnerability affects Maximo Asset Management, Maximo Asset Management Essentials, Maximo...

4CVSS5.3AI score0.00966EPSS
SaveExploits0Affected Software15
Veeam
Veeam
added 2022/09/22 12:00 a.m.25 views

Build Numbers and Versions of Veeam Backup for Google Cloud

This KB article lists all versions of Veeam Backup for Google Cloud and their respective build numbers. For more information on deploying the latest version of Veeam Backup for Google Cloud , visit: Veeam Backup for Google Cloud User Guide: Deploying Backup Appliance Veeam Backup for Google Cloud...

5.9AI score
SaveExploits0Affected Software1
Veeam
Veeam
added 2022/09/22 12:00 a.m.25 views

Build Numbers and Versions of Veeam Backup for AWS

This KB article lists all versions of Veeam Backup for AWS and their respective build numbers. For more information on deploying the latest version of Veeam Backup for AWS , visit: Veeam Backup for AWS User Guide: Deploying Backup Appliance Veeam Backup for AWS User Guide: Updating Veeam Backup f...

5.5AI score
SaveExploits0Affected Software1
Veeam
Veeam
added 2022/09/22 12:00 a.m.28 views

Build Numbers and Versions of Veeam Plug-In for Microsoft Azure

This KB article lists all versions of Veeam Plug-In for Microsoft Azure and their respective build numbers. For more information on deploying the latest version of Veeam Plug-In for Microsoft Azure , visit: Veeam Plug-In for Microsoft Azure User Guide: Deploying Backup Appliance Veeam Plug-In for...

5.5AI score
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2022/09/21 12:00 a.m.11 views

Ahsay Systems Cloud Backup Suite 参数注入漏洞

Ahsay Systems Cloud Backup Suite is a centralized cloud backup solution from Ahsay Systems in Hong Kong, China. The product supports features such as database backup and physical server backup. A parameter injection vulnerability exists in Ahsay Systems Cloud Backup Suite version 9.1.4.0. An...

7.2CVSS7.2AI score0.21732EPSS
SaveExploits1References6
BDU FSTEC
BDU FSTEC
added 2022/09/21 12:00 a.m.11 views

The vulnerability of the Login component in the file post_applogin.php is related to the ability to decode the session token of the Syncovery backup tool, which allows a hacker to increase their privileges.

The vulnerability of the Login component in the postapplogin.php file is related to the possibility of decoding the session token of the Syncovery backup tool. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

10CVSS7.7AI score0.0407EPSS
SaveExploits3References4Affected Software1
Citrix
Citrix
added 2022/09/20 12:00 a.m.16 views

Citrix Endpoint Management (aka XenMobile Server) 10.14.0 Rolling Patch 8

Package name: xms10.14.0.10813.bin For: XenMobile Server 10.14.0 Deployment type: On-premises only Replaces: xms10.14.0.10742.bin, xms10.14.0.10628.bin, xms10.14.0.10521.bin, xms10.14.0.10424.bin, xms10.14.0.10303.bin, xms10.14.0.10206.bin, and xms10.14.0.10118.bin. Date: September 2022 Languages...

6.9AI score
SaveExploits0
OpenVAS
OpenVAS
added 2022/09/19 12:00 a.m.29 views

WordPress Migration, Backup, Staging - WPvivid Plugin < 0.9.76 Directory Traversal Vulnerability

The WordPress plugin Migration, Backup, Staging - WPvivid is prone to a directory traversal vulnerability. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

4.9CVSS5.2AI score0.20668EPSS
SaveExploits3References1
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/17 1:44 p.m.174 views

Security Bulletin: Vulnerabilities in Golang Go and MinIO may affect IBM Spectrum Plus Container Backup and Restore for Kubernetes and Red Hat OpenShift (CVE-2022-29804, CVE-2022-30580, CVE-2022-30629, CVE-2022-30634, CVE-2022-35919, CVE-2022-31028)

Summary Multiple vulnerabilities in Golang Go and MinIO may affect IBM Spectrum Protect Plus Container Backup and Restore for Kubernetes and Red Hat OpenShift. Vulnerabilities include bypassing of security restrictions, execution of arbitrary code, obtaining sensitive information, denial of...

7.8CVSS9.2AI score0.52334EPSS
SaveExploits7Affected Software1
OSV
OSV
added 2022/09/16 9:15 a.m.11 views

CVE-2022-2863

The Migration, Backup, Staging WordPress plugin before 0.9.76 does not sanitise and validate a parameter before using it to read the content of a file, allowing high privilege users to read any file from the web server via a Traversal attack...

4.9CVSS5.8AI score0.20668EPSS
SaveExploits3References3
NVD
NVD
added 2022/09/16 9:15 a.m.34 views

CVE-2022-2863

The Migration, Backup, Staging WordPress plugin before 0.9.76 does not sanitise and validate a parameter before using it to read the content of a file, allowing high privilege users to read any file from the web server via a Traversal attack...

4.9CVSS0.20668EPSS
SaveExploits3References3
CNNVD
CNNVD
added 2022/09/16 12:00 a.m.34 views

WordPress plugin Migration, Backup, Staging 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A path traversal vulnerability exists in th...

4.9CVSS5.4AI score0.20668EPSS
SaveExploits3References5
RedHat Linux
RedHat Linux
added 2022/09/13 2:09 a.m.47 views

Moderate: Red Hat Security Advisory: OpenShift API for Data Protection (OADP) 1.0.4 security and bug fix update

OpenShift API for Data Protection OADP 1.0.4 is now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

7.5CVSS7AI score0.0995EPSS
SaveExploits5References9
CNNVD
CNNVD
added 2022/09/13 12:00 a.m.9 views

Amanda 路径遍历漏洞

Amanda is an automated network disk archiver organized by the University of Maryland at College Park. Allows IT administrators to set up a single primary backup server to back up multiple hosts to tape drives/converters or disk or optical media over a network. A security vulnerability exists in...

3.3CVSS5.2AI score0.00723EPSS
SaveExploits0References10
Apple
Apple
added 2022/09/12 12:00 a.m.231 views

About the security content of iOS 15.7 and iPadOS 15.7

About the security content of iOS 15.7 and iPadOS 15.7 This document describes the security content of iOS 15.7 and iPadOS 15.7. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches ...

8.8CVSS9.3AI score0.05603EPSS
SaveExploits2References1Affected Software2
Veeam
Veeam
added 2022/09/12 12:00 a.m.166 views

Veeam Backup & Replication server does not have Virtual Machine Manager Administrator Console installed.

Challenge When attempting to add Microsoft Hyper-V Servers to Veeam Backup & Replication the following error is displayed: Veeam Backup & Replication server does not have Virtual Machine Manager Administrator Console installed. If you installed VMM Console while Veeam Backup & Replication UI was...

6.7AI score
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2022/09/09 4:15 p.m.3 views

CVE-2022-36617

Arq Backup 7.19.5.0 and below stores backup encryption passwords using reversible encryption. This issue allows attackers with administrative privileges to recover cleartext passwords...

4.9CVSS5.9AI score0.00458EPSS
SaveExploits0References3
OSV
OSV
added 2022/09/09 4:15 p.m.9 views

CVE-2022-36617

Arq Backup 7.19.5.0 and below stores backup encryption passwords using reversible encryption. This issue allows attackers with administrative privileges to recover cleartext passwords...

4.9CVSS5.8AI score0.00458EPSS
SaveExploits0References2
Rows per page
Query Builder