Lucene search
+L

15253 matches found

CVE
CVE
added 2021/01/01 3:27 a.m.102 views

CVE-2020-35950

CVE-2020-35950 affects the WordPress plugin “XCloner Backup and Restore” prior to version 4.2.153. The issue is a Cross-Site Request Forgery (CSRF) vulnerability that can be triggered via almost any endpoint. The available connected sources specify the affected product (XCloner Backup and Restore...

9.8CVSS8.7AI score0.00932EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
added 2020/12/31 12:00 a.m.14 views

WordPress XCloner Backup and Restore plugin security vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A security vulnerability exists in the XCloner Backup and Restore plugin before 4.2.13 for WordPress...

9.9CVSS6.3AI score0.24937EPSS
SaveExploits5References7
CNNVD
CNNVD
added 2020/12/31 12:00 a.m.13 views

WordPress XCloner Backup and Restore plugin 跨站请求伪造漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site request forgery vulnerability exists in WordPress XCloner Backup and Restore plugin...

9.8CVSS5.7AI score0.00932EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2020/12/30 12:00 a.m.8 views

The vulnerability of the Windows Backup Engine Elevation component of the operating system allows a hacker to escalate their privileges.

The vulnerability of the Windows Backup Engine Elevation component of the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

7.8CVSS7.1AI score0.01267EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/12/30 12:00 a.m.13 views

The vulnerability of the Windows Backup Engine Elevation component of the operating system allows a hacker to escalate their privileges.

The vulnerability of the Windows Backup Engine Elevation component of the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

7.8CVSS7.1AI score0.01139EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/12/30 12:00 a.m.11 views

The vulnerability of the Windows Backup Engine Elevation component of the operating system allows a hacker to escalate their privileges.

The vulnerability of the Windows Backup Engine Elevation component of the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

7.8CVSS7.1AI score0.01139EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/12/30 12:00 a.m.12 views

The vulnerability of the Windows Backup Engine Elevation component of the operating system allows a hacker to escalate their privileges.

The vulnerability of the Windows Backup Engine Elevation component of the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

7.8CVSS7.1AI score0.01139EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/12/29 12:00 a.m.13 views

The vulnerability of the Windows Backup Engine Elevation component of the operating system allows a hacker to escalate their privileges.

The vulnerability of the Windows Backup Engine Elevation component of the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

7.8CVSS7.1AI score0.01267EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/12/29 12:00 a.m.13 views

The vulnerability of the Windows Backup Engine Elevation component of the operating system allows a hacker to escalate their privileges.

The vulnerability of the Windows Backup Engine Elevation component of the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

7.8CVSS7.1AI score0.01139EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/12/29 12:00 a.m.13 views

The vulnerability of the Windows Backup Engine Elevation component of the operating system allows a hacker to escalate their privileges.

The vulnerability of the Windows Backup Engine Elevation component of the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

7.8CVSS7.1AI score0.01139EPSS
SaveExploits0References3
Virtuozzo
Virtuozzo
added 2020/12/25 12:00 a.m.75 views

Product update: Virtuozzo PowerPanel Update 1 (7.0.4-30)

The update for Virtuozzo PowerPanel introduces new features as well as stability and usability fixes. Vulnerability id: PP-578 The 'vzapi' command to reset the backup limit to 0 could fail. Vulnerability id: PP-580 A wrong config parameter was documented for instance default backup limit...

2.6AI score
SaveExploits0
Veracode
Veracode
added 2020/12/24 12:43 a.m.17 views

Remote Code Execution (RCE)

Dolibarr is vulnerable to remote code execution. An attacker is able manipulate the backup function by inserting a malicious payload into the filename...

7.2CVSS3.7AI score0.06361EPSS
SaveExploits1References4Affected Software1
CNVD
CNVD
added 2020/12/24 12:00 a.m.9 views

Dolibarr Remote Code Execution Vulnerability (CNVD-2020-73750)

Dolibarr ERP/CRM is an open source software/freeware for small and medium-sized businesses, organizations or freelancers. It includes different features such as Enterprise Resource Planning ERP and Customer Relationship Management CRM, as well as applications for other different activities. A...

9CVSS8.5AI score0.06361EPSS
SaveExploits1References1
NCSC
NCSC
added 2020/12/24 12:00 a.m.12 views

Vulnerabilities fixed in Veritas products

Vulnerabilities have been fixed in Veritas Backup Exec and Veritas NetBackup. The vulnerabilities allow a local attacker to to obtain elevated privileges. The vulnerability makes it possible for the attacker to execute arbitrary code under SYSTEM or administrator. The vulnerabilities rated by...

7.8CVSS7.8AI score0.00934EPSS
SaveExploits1
OSV
OSV
added 2020/12/23 3:15 p.m.18 views

CVE-2020-35136

Dolibarr 12.0.3 is vulnerable to authenticated Remote Code Execution. An attacker who has the access the admin dashboard can manipulate the backup function by inserting a payload into the filename for the zipfilenametemplate parameter to admin/tools/dolibarrexport.php...

7.2CVSS7.1AI score
SaveExploits0References4
Prion
Prion
added 2020/12/23 3:15 p.m.14 views

Remote code execution

Dolibarr 12.0.3 is vulnerable to authenticated Remote Code Execution. An attacker who has the access the admin dashboard can manipulate the backup function by inserting a payload into the filename for the zipfilenametemplate parameter to admin/tools/dolibarrexport.php...

9CVSS7AI score0.06361EPSS
SaveExploits1References4Affected Software1
UbuntuCve
UbuntuCve
added 2020/12/23 3:15 p.m.26 views

CVE-2020-35136

Dolibarr 12.0.3 is vulnerable to authenticated Remote Code Execution. An attacker who has the access the admin dashboard can manipulate the backup function by inserting a payload into the filename for the zipfilenametemplate parameter to admin/tools/dolibarrexport.php...

9CVSS7.1AI score0.06361EPSS
SaveExploits1References5
OSV
OSV
added 2020/12/23 3:15 p.m.49 views

UBUNTU-CVE-2020-35136

Dolibarr 12.0.3 is vulnerable to authenticated Remote Code Execution. An attacker who has the access the admin dashboard can manipulate the backup function by inserting a payload into the filename for the zipfilenametemplate parameter to admin/tools/dolibarrexport.php...

7.2CVSS7.1AI score0.06361EPSS
SaveExploits1References6
Cvelist
Cvelist
added 2020/12/23 2:39 p.m.40 views

CVE-2020-35136

Dolibarr 12.0.3 is vulnerable to authenticated Remote Code Execution. An attacker who has the access the admin dashboard can manipulate the backup function by inserting a payload into the filename for the zipfilenametemplate parameter to admin/tools/dolibarrexport.php...

7AI score0.06361EPSS
SaveExploits1References4
Prion
Prion
added 2020/12/23 3:15 a.m.23 views

Design/Logic Flaw

SpamTitan before 7.09 allows attackers to tamper with backups, because backups are not encrypted...

5CVSS5.3AI score0.00505EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder