Veritas Backup Exec Agent Remote Code Execution

Veritas Backup Exec Agent supports multiple authentication schemes and SHA authentication is one of them. This authentication scheme is no longer used within Backup Exec versions, but hadn't yet been disabled. An attacker could remotely exploit the SHA authentication scheme to gain unauthorized...

Release Information for Veeam Backup for Nutanix AHV 2.1

This update has been superseded by Veeam Backup for Nutanix AHV 3.0. Requirements Be sure to review the upgrade check list section of the User Guide document closely prior to upgrading as Veeam Backup for Nutanix AHV 2.1 supports integration with Veeam Backup & Replication version 10 and later. Y...

OurPHP Backend Data Backup Function Has Arbitrary File Deletion Vulnerability

OurPHP is a PHP MySQL-based development of W3C-compliant site-building system. OurPHP background data backup function exists arbitrary file deletion vulnerability, attackers can use the vulnerability to delete arbitrary files...

CVE-2021-24079

Windows Backup Engine Information Disclosure Vulnerability...

CVE-2021-24079

Windows Backup Engine Information Disclosure Vulnerability...

CVE-2021-24079

Windows Backup Engine Information Disclosure Vulnerability...

Information disclosure

Windows Backup Engine Information Disclosure Vulnerability...

CVE-2021-24079

CVE-2021-24079 is a Windows security vulnerability described as a Windows Backup Engine Information Disclosure Vulnerability. Connected sources show a CVSSv3.1 base score of 5.5 (LOCAL, LOW attack complexity, LOW privileges required, NONE user interaction) with a Confidentiality impact of HIGH an...

CVE-2021-24079 Windows Backup Engine Information Disclosure Vulnerability

...

Dell EMC Avamar Server Authorization Issues Vulnerability

DELL Dell EMC Avamar Server is a suite of fully virtualized backup and recovery software for servers from Dell USA. An authorization issue vulnerability exists in Dell EMC Avamar Server, which arises from a lack of authentication measures or insufficient authentication strength in a networked...

Release Information for Veeam Backup for Microsoft Azure v2

Requirements You can check your build number under Configuration | Support Information | About | Server version by clicking the gear icon at the top-right corner of the main menu in Veeam Backup for Microsoft Azure. After installing, your build number will be 2.0.0.303. What's New Veeam Backup fo...

Release information for Veeam Backup & Replication 11

Requirements IMPORTANT NOTE: If you are using a cloud repository or cloud host powered by Veeam Cloud Connect, please contact your service provider to confirm that you can upgrade to Veeam Backup & Replication 11. Please confirm that you are running version 9.5 Update 4b build 9.5.4.2866 or later...

The vulnerability of the Backup Engine component for Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Backup Engine component for Windows operating systems lies in the lack of protection for service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

SQL Injection Vulnerability in Backup Management Server of Hangzhou Hikvision Digital Technology Co.

Hikvision is a video-centric IoT solution provider, offering integrated security, smart business and big data services. A SQL injection vulnerability exists in the backup management server of Hangzhou Hikvision Digital Technology Co. Ltd, which can be exploited by attackers to obtain sensitive...

CVE-2020-36248

The ownCloud application before 2.15 for Android allows attackers to use adb to include a PIN preferences value in a backup archive, and consequently bypass the PIN lock feature by restoring from this archive...

CVE-2020-36248

The ownCloud application before 2.15 for Android allows attackers to use adb to include a PIN preferences value in a backup archive, and consequently bypass the PIN lock feature by restoring from this archive...

Design/Logic Flaw

The ownCloud application before 2.15 for Android allows attackers to use adb to include a PIN preferences value in a backup archive, and consequently bypass the PIN lock feature by restoring from this archive...

Owncloud ownCloud 权限许可和访问控制问题漏洞

OwnCloud OwnCloud is a personal cloud storage solution from OwnCloud Owncloud, an American company. OwnCloud has a permission and access control issue vulnerability that can be exploited by an attacker to bypass the PIN locking feature by making a restore from this archive, using adb to include t...

Backup Guard < 1.6.0 - Authenticated Arbitrary File Upload

The plugin did not ensure that the imported files are of the SGBP format and extension, allowing high privilege users admin+ to upload arbitrary files, including PHP ones, leading to RCE. Additional Info, and Bypass of .htaccess protection found by WPScanTeam, while confirming the issue: There is...

WordPress Backup Guard plugin <= 1.5.9 - Authenticated Arbitrary File Upload vulnerability

Authenticated Arbitrary File Upload vulnerability found by Nguyen Van Khanh in WordPress Backup Guard plugin versions = 1.5.9. Solution Update the WordPress Backup Guard plugin to the latest available version at least 1.6.0...