Lucene search
+L

65 matches found

NVD
NVD
•added 2024/06/14 4:15 p.m.•63 views

CVE-2024-37315

Nextcloud Server is a self hosted personal cloud system. An attacker with read-only access to a file is able to restore older versions of a document when the filesversions app is enabled. It is recommended that the Nextcloud Server is upgraded to 26.0.12, 27.1.7 or 28.0.3 and that the Nextcloud...

4.3CVSS0.00431EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2022/09/30 4:29 p.m.•62 views

CVE-2022-40314

A remote code execution risk when restoring backup files originating from Moodle 1.9 was identified...

10AI score0.02009EPSS
SaveExploits0References2
CVE
CVE
•added 2022/09/30 4:29 p.m.•115 views

CVE-2022-40314

CVE-2022-40314 describes a remote code execution risk when restoring backup files originating from Moodle 1.9. The vulnerability is reported with a high/critical impact (CVSS: 9.8, NETWORK attack vector, no user interaction) and is supported by multiple connected sources (NVD entry and Nessus/Ope...

9.8CVSS9.6AI score0.02009EPSS
SaveExploits0References2Affected Software1
Hacker One
Hacker One
•added 2022/04/29 11:00 p.m.•437 views

U.S. Dept Of Defense: CVE-2020-3187 - Unauthenticated Arbitrary File Deletion

A vulnerability in the web services interface of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to conduct directory traversal attacks and obtain read and delete access to sensitive files on a targeted...

7.5CVSS0.8AI score0.96595EPSS
SaveExploits4
Positive Technologies
Positive Technologies
•added 2020/11/08 12:00 a.m.•11 views

PT-2022-5130 · Moodle +2 · Moodle +2

Name of the Vulnerable Software and Affected Versions: Moodle versions 1.9 Description: A remote code execution risk exists when restoring backup files. The issue is related to insecure input validation during the restoration process. Exploitation of this issue may allow a remote attacker to...

10CVSS7.2AI score0.49054EPSS
SaveExploits3References78
OSV
OSV
•added 2020/10/27 2:15 p.m.•16 views

CVE-2020-6023

Check Point ZoneAlarm before version 15.8.139.18543 allows a local actor to escalate privileges while restoring files in Anti-Ransomware...

7.8CVSS7.1AI score0.00337EPSS
SaveExploits0References1
NVD
NVD
•added 2020/10/27 2:15 p.m.•32 views

CVE-2020-6022

Check Point ZoneAlarm before version 15.8.139.18543 allows a local actor to delete arbitrary files while restoring files in Anti-Ransomware...

5.5CVSS5.5AI score0.0031EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2020/10/27 1:50 p.m.•39 views

CVE-2020-6022

Check Point ZoneAlarm before version 15.8.139.18543 allows a local actor to delete arbitrary files while restoring files in Anti-Ransomware...

5.5AI score0.0031EPSS
SaveExploits0References1
Kitploit
Kitploit
•added 2020/06/25 3:45 a.m.•63 views

How to Free Recover Deleted Files on Your Mac

There are many scenarios where you would want to recover deleted data from your Mac. These deleted files could be your important photos, official documents, financial records, etc. Loss of such data can cause you unnecessary emotional and financial harm. However, you can make use of data recovery...

6.7AI score
SaveExploits0
NVD
NVD
•added 2019/12/27 4:15 p.m.•29 views

CVE-2019-16896

In K7 Ultimate Security 16.0.0117, the module K7BKCExt.dll aka the backup module improperly validates the administrative privileges of the user, allowing an arbitrary file write via a symbolic link attack with file restoration functionality...

7.8CVSS7.7AI score0.00402EPSS
SaveExploits1References2
Prion
Prion
•added 2019/12/27 4:15 p.m.•30 views

Design/Logic Flaw

In K7 Ultimate Security 16.0.0117, the module K7BKCExt.dll aka the backup module improperly validates the administrative privileges of the user, allowing an arbitrary file write via a symbolic link attack with file restoration functionality...

2.1CVSS7.7AI score0.00402EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2019/12/27 3:27 p.m.•37 views

CVE-2019-16896

In K7 Ultimate Security 16.0.0117, the module K7BKCExt.dll aka the backup module improperly validates the administrative privileges of the user, allowing an arbitrary file write via a symbolic link attack with file restoration functionality...

7.7AI score0.00402EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2019/12/27 12:00 a.m.•3 views

PT-2019-14852

Name of the Vulnerable Software and Affected Versions K7 Ultimate Security version 16.0.0117 Description The issue arises from the improper validation of administrative privileges by the K7BKCExt.dll module, also known as the backup module, in K7 Ultimate Security. This allows for an arbitrary fi...

7.8CVSS0.00402EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/12/27 12:00 a.m.•3 views

CVE-2019-16896: Improper Link Resolution Before File Access

In K7 Ultimate Security 16.0.0117, the module K7BKCExt.dll aka the backup module improperly validates the administrative privileges of the user, allowing an arbitrary file write via a symbolic link attack with file restoration functionality...

7.8CVSS7.3AI score0.00402EPSS
SaveExploits1References2
Carbon Black Blog
Carbon Black Blog
•added 2019/10/02 2:44 p.m.•137 views

CB TAU Threat Intelligence Notification: Nemty Ransomware

While Nemty Ransomware is distributed by various exploit kits, its behavior is similar to other variants of ransomware. It will perform “task kill” on processes to ensure the encryption of files such as databases SQL server, perform the deletion of volume shadow copies, and disable Windows...

6.8AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2019/08/21 12:00 a.m.•2 views

PT-2019-12374

Name of the Vulnerable Software and Affected Versions Code42 Enterprise and Crashplan for Small Business versions through 6.9.1 Description An issue exists where an attacker can craft a restore request to restore a file through the Code42 app to a location they do not have privileges to write...

5.5CVSS0.00254EPSS
SaveExploits0References3
NVD
NVD
•added 2019/08/02 1:15 p.m.•38 views

CVE-2017-18384

cPanel before 68.0.15 allows jailed accounts to restore files that are outside of the jail SEC-310...

3.8CVSS4.3AI score0.00324EPSS
SaveExploits0References2
Prion
Prion
•added 2019/08/02 1:15 p.m.•28 views

Design/Logic Flaw

cPanel before 68.0.15 allows jailed accounts to restore files that are outside of the jail SEC-310...

2.1CVSS4.4AI score0.00324EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2019/08/02 12:21 p.m.•40 views

CVE-2017-18384

cPanel before 68.0.15 allows jailed accounts to restore files that are outside of the jail SEC-310...

4.3AI score0.00324EPSS
SaveExploits0References1
CVE
CVE
•added 2019/08/02 12:21 p.m.•71 views

CVE-2017-18384

CVE-2017-18384 affects cPanel prior to version 68.0.15, where jailed accounts can restore files that lie outside of their jail confinement (SEC-310). The connected Red Hat and CVE records reiterate the same description without additional technical specifics on root cause or affected components be...

3.8CVSS4.4AI score0.00324EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder