Lucene search
+L

15235 matches found

CNNVD
CNNVD
added 2021/06/24 12:00 a.m.11 views

IBOS命令注入漏洞

IBOS is a collaborative office management system. A command injection vulnerability exists in IBOS, which stems from a command injection vulnerability in database backup in IBOS 4.5.4 Open version. No detailed vulnerability details are available at this time...

8.8CVSS5.6AI score0.02726EPSS
SaveExploits1References1
Veeam
Veeam
added 2021/06/23 12:00 a.m.105 views

"Access is Denied." When Using a Local Account to Add a Windows Machine to Veeam Backup & Replication

Article Applicability This article relates to an error that only occurs when Veeam Backup & Replication is deployed on a Windows machine. With the Veeam Software Appliance, to add a Windows machine using credentials, it requires that both the appliance and the Windows machine are added to the sam...

6.8AI score
SaveExploits0Affected Software2
OSV
OSV
added 2021/06/22 11:15 a.m.9 views

CVE-2021-0554

In isBackupServiceActive of BackupManagerService.java, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-158482162...

5.5CVSS5.9AI score0.00108EPSS
SaveExploits0References1
Citrix
Citrix
added 2021/06/22 12:00 a.m.16 views

Driver Disk for Avago mpt3sas 38.00.00.00 - For Citrix Hypervisor 8.2 LTSR

Who Should Install this Driver Disk? Customers running the Citrix Hypervisor 8.2 LTSR release who use Avago's mpt3sas driver and wish to use the latest version of the following: Driver Module| Version ---|--- mpt3sas| 38.00.00.00 Issues Resolved In this Driver Disk Includes general enhancements a...

7AI score
SaveExploits0
The Hacker News
The Hacker News
added 2021/06/21 2:17 p.m.46 views

5 Critical Steps to Recover From a Ransomware Attack

Hackers are increasingly using ransomware as an effective tool to disrupt businesses and fund malicious activities. A recent analysis by cybersecurity company Group-IB revealed ransomware attacks doubled in 2020, while Cybersecurity Ventures predicts that a ransomware attack will occur every 11...

1AI score
SaveExploits0
NVD
NVD
added 2021/06/16 6:15 p.m.23 views

CVE-2021-34813

Matrix libolm before 3.2.3 allows a malicious Matrix homeserver to crash a client while it is attempting to retrieve an Olm encrypted room key backup from the homeserver because olmpkdecrypt has a stack-based buffer overflow. Remote code execution might be possible for some nonstandard build...

9.8CVSS0.04262EPSS
SaveExploits1References3
OSV
OSV
added 2021/06/16 6:15 p.m.14 views

CVE-2021-34813

Matrix libolm before 3.2.3 allows a malicious Matrix homeserver to crash a client while it is attempting to retrieve an Olm encrypted room key backup from the homeserver because olmpkdecrypt has a stack-based buffer overflow. Remote code execution might be possible for some nonstandard build...

9.8CVSS7.5AI score
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2021/06/16 6:15 p.m.5 views

CVE-2021-34813

Matrix libolm before 3.2.3 allows a malicious Matrix homeserver to crash a client while it is attempting to retrieve an Olm encrypted room key backup from the homeserver because olmpkdecrypt has a stack-based buffer overflow. Remote code execution might be possible for some nonstandard build...

9.8CVSS8AI score0.04262EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
added 2021/06/16 6:15 p.m.21 views

CVE-2021-34813

Matrix libolm before 3.2.3 allows a malicious Matrix homeserver to crash a client while it is attempting to retrieve an Olm encrypted room key backup from the homeserver because olmpkdecrypt has a stack-based buffer overflow. Remote code execution might be possible for some nonstandard build...

9.8CVSS7.6AI score0.04262EPSS
SaveExploits1References5
CVE
CVE
added 2021/06/16 5:11 p.m.136 views

CVE-2021-34813

Matrix libolm before 3.2.3 is affected. The flaw is in olm_pk_decrypt, causing a stack-based buffer overflow that can crash the client when retrieving an Olm-encrypted room key backup from a Matrix homeserver; remote code execution might be possible in some nonstandard builds. A fix is available ...

9.8CVSS9.6AI score0.04262EPSS
SaveExploits1References3Affected Software1
WPVulnDB
WPVulnDB
added 2021/06/16 12:00 a.m.19 views

Backup by 10Web <= 1.0.20 - Reflected Cross-Site Scripting (XSS)

The plugin does not sanitise or escape the tab parameter before outputting it back in the page, leading to a reflected Cross-Site Scripting issue PoC http://example.com/wp-admin/admin.php?page=buwdrestore=general%22%3E%3Cimg%20src=x%20onerror=alertdocument.domain;%20m0ze...

4.8CVSS0.1AI score0.00626EPSS
SaveExploits2References1Affected Software1
wpexploit
wpexploit
added 2021/06/16 12:00 a.m.166 views

Backup by 10Web <= 1.0.20 - Reflected Cross-Site Scripting (XSS)

The plugin does not sanitise or escape the tab parameter before outputting it back in the page, leading to a reflected Cross-Site Scripting issue http://example.com/wp-admin/admin.php?page=buwdrestore&tab=general%22%3E%3Cimg%20src=x%20onerror=alertdocument.domain;%20m0ze...

4.8CVSS0.9AI score0.00626EPSS
SaveExploits2References1
NCSC
NCSC
added 2021/06/16 12:00 a.m.12 views

Vulnerabilities fixed in IBM Spectrum Protect

IBM has fixed vulnerabilities in IBM Spectrum Protect Backup Archive Client and IBM Spectrum Protect for Space Management. A local malicious party could potentially exploit the vulnerabilities to cause a denial-of-service or to execute under elevated privileges execute arbitrary code. IBM has...

8.4CVSS7.2AI score0.00345EPSS
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
added 2021/06/15 1:22 a.m.21 views

Security Bulletin: Privilege escalation vulnerability in IBM Spectrum Protect Backup-Archive Client and IBM Spectrum Protect for Virtual Environments (CVE-2021-20532)

Summary IBM Spectrum Protect Backup-Archive Client and IBM Spectrum Protect for Virtual Environments may allow a local user to escalate their privileges. UPDATED: 14 June 2021 - Added 7.1 fix for IBM Spectrum Protect for Virtual Environments: Data Protection for VMware. Vulnerability Details CVEI...

7.8CVSS1.8AI score0.00206EPSS
SaveExploits0Affected Software2
Veeam
Veeam
added 2021/06/15 12:00 a.m.15 views

Release Information for Veeam Backup for Microsoft 365 5c

This update has been superseded by Veeam Backup for Microsoft 365 5c cumulative patch KB4187 Requirements Please confirm that you are running one of the following versions of Veeam Backup for Microsoft 365 before upgrading to 5c: 3.0 build 3.0.0.422 4.0 build 4.0.0.1345 4a builds 4.0.0.1553,...

6.1AI score
SaveExploits0
Trellix
Trellix
added 2021/06/15 12:00 a.m.21 views

A New Program for Your Peloton – Whether You Like It or Not | McAfee Blogs

ARCHIVED STORY A New Program for Your Peloton – Whether You Like It or Not Sam Quinn · JUN 15, 2021 Executive Summary For those that are not familiar with Peloton, it is a brand that has combined high end exercise equipment with cutting-edge technology. Its products are equipped with a large tabl...

7.1AI score
SaveExploits0
Trellix
Trellix
added 2021/06/15 12:00 a.m.14 views

A New Program for Your Peloton – Whether You Like It or Not | McAfee Blogs

ARCHIVED STORY A New Program for Your Peloton – Whether You Like It or Not Sam Quinn · JUN 15, 2021 Executive Summary For those that are not familiar with Peloton, it is a brand that has combined high end exercise equipment with cutting-edge technology. Its products are equipped with a large tabl...

6.5AI score
SaveExploits0
Malwarebytes
Malwarebytes
added 2021/06/14 11:14 a.m.62 views

How to delete your Instagram account

Although sharing your day’s highlights in snapshots and videos on Instagram can be entertaining, some people claim to feel happier after deleting their accounts. Consuming media tailor-made to make other peoples lifestyles appear alluring can be addictive for some and induce anxiety in others. No...

0.9AI score
SaveExploits0
Hacker One
Hacker One
added 2021/06/12 10:15 p.m.130 views

Zivver: ADB Backup is enabled within AndroidManifest

In this report, it was highlighted that the ADB backup feature enabled in the Android application could be used by an attacker with physical access to the victim's device to 'migrate' data from app storage on the phone and later possibly extract secrets from that backup. For this attack to succee...

6.6AI score
SaveExploits0
OSV
OSV
added 2021/06/11 3:15 p.m.9 views

CVE-2021-25392

Improper protection of backup path configuration in Samsung Dex prior to SMR MAY-2021 Release 1 allows local attackers to get sensitive information via changing the path...

5.5CVSS6.3AI score0.00102EPSS
SaveExploits1References2
Rows per page
Query Builder