Lucene search
K

990 matches found

OSV
OSV
added 2023/03/24 4:15 a.m.1 views

CVE-2023-28818

An issue was discovered in Veritas NetBackup IT Analytics 11 before 11.2.0. The application upgrade process included unsigned files that could be exploited and result in a customer installing unauthentic components. A malicious actor could install rogue Collector executable files aptare.jar or...

5.3CVSS6.1AI score
Exploits0References1
Prion
Prion
added 2023/03/24 4:15 a.m.21 views

Design/Logic Flaw

An issue was discovered in Veritas NetBackup IT Analytics 11 before 11.2.0. The application upgrade process included unsigned files that could be exploited and result in a customer installing unauthentic components. A malicious actor could install rogue Collector executable files aptare.jar or...

5CVSS5.3AI score0.00055EPSS
Exploits0References1Affected Software2
Positive Technologies
Positive Technologies
added 2023/03/24 12:0 a.m.2 views

PT-2023-8787 · Veritas · Veritas Netbackup It Analytics

Name of the Vulnerable Software and Affected Versions: Veritas NetBackup IT Analytics versions prior to 11.2.0 Description: The issue is related to errors in cryptographic signature verification, which could allow a remote attacker to compromise data integrity. A malicious actor could exploit the...

5.3CVSS5.1AI score0.00055EPSS
Exploits0References6
Vulnrichment
Vulnrichment
added 2023/03/24 12:0 a.m.6 views

CVE-2023-28818

An issue was discovered in Veritas NetBackup IT Analytics 11 before 11.2.0. The application upgrade process included unsigned files that could be exploited and result in a customer installing unauthentic components. A malicious actor could install rogue Collector executable files aptare.jar or...

5.3CVSS5.3AI score0.00055EPSS
Exploits0References1
CVE
CVE
added 2023/03/24 12:0 a.m.70 views

CVE-2023-28818

CVE-2023-28818 affects Veritas NetBackup IT Analytics 11.x prior to 11.2.0. The upgrade process permits unsigned files, enabling a attacker to install rogue Collector executables (aptare.jar or upgrademanager.zip) on the Portal server, which could be downloaded and installed on collectors, compro...

5.3CVSS5.2AI score0.00055EPSS
Exploits0References1Affected Software2
CNNVD
CNNVD
added 2023/03/24 12:0 a.m.2 views

Veritas Technologies Veritas NetBackup 数据伪造问题漏洞

Veritas Technologies Veritas NetBackup is a powerful enterprise-class data backup management software from Veritas Technologies, USA. A security vulnerability exists in Veritas Technologies Veritas NetBackup IT Analytics version 11 prior to 11.2.0, which stems from an application upgrade process...

5.3CVSS5.7AI score0.00055EPSS
Exploits0References2
Cvelist
Cvelist
added 2023/03/24 12:0 a.m.15 views

CVE-2023-28818

An issue was discovered in Veritas NetBackup IT Analytics 11 before 11.2.0. The application upgrade process included unsigned files that could be exploited and result in a customer installing unauthentic components. A malicious actor could install rogue Collector executable files aptare.jar or...

5.3CVSS5.6AI score0.00055EPSS
Exploits0References1
NVD
NVD
added 2023/03/23 4:17 a.m.15 views

CVE-2023-28759

An issue was discovered in Veritas NetBackup before 10.0 on Windows. A vulnerability in the way the client validates the path to a DLL prior to loading may allow a lower-level user to elevate privileges and compromise the system...

7.8CVSS7.5AI score0.00136EPSS
Exploits0References1
OSV
OSV
added 2023/03/23 4:17 a.m.2 views

CVE-2023-28759

An issue was discovered in Veritas NetBackup before 10.0 on Windows. A vulnerability in the way the client validates the path to a DLL prior to loading may allow a lower-level user to elevate privileges and compromise the system...

7.8CVSS5.8AI score0.00136EPSS
Exploits0References1
OSV
OSV
added 2023/03/23 4:17 a.m.1 views

CVE-2023-28758

An issue was discovered in Veritas NetBackup before 8.3.0.2. BPCD allows an unprivileged user to specify a log file path when executing a NetBackup command. This can be used to overwrite existing NetBackup log files...

7.1CVSS7AI score
Exploits0References1
NVD
NVD
added 2023/03/23 4:17 a.m.13 views

CVE-2023-28758

An issue was discovered in Veritas NetBackup before 8.3.0.2. BPCD allows an unprivileged user to specify a log file path when executing a NetBackup command. This can be used to overwrite existing NetBackup log files...

7.1CVSS6.8AI score0.00043EPSS
Exploits0References1
Prion
Prion
added 2023/03/23 4:17 a.m.23 views

Design/Logic Flaw

An issue was discovered in Veritas NetBackup before 10.0 on Windows. A vulnerability in the way the client validates the path to a DLL prior to loading may allow a lower-level user to elevate privileges and compromise the system...

4.3CVSS7.4AI score0.00136EPSS
Exploits0References1Affected Software1
Prion
Prion
added 2023/03/23 4:17 a.m.13 views

Command injection

An issue was discovered in Veritas NetBackup before 8.3.0.2. BPCD allows an unprivileged user to specify a log file path when executing a NetBackup command. This can be used to overwrite existing NetBackup log files...

3.2CVSS6.8AI score0.00043EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2023/03/23 12:0 a.m.101 views

CVE-2023-28759

CVE-2023-28759 affects Veritas NetBackup on Windows prior to 10.0. The issue stems from the NetBackup client’s loading of DLLs, where path validation may allow a lower-privileged user to elevate privileges and compromise the system. Impact includes local privilege escalation; remediation is to up...

7.8CVSS7.4AI score0.00136EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/03/23 12:0 a.m.3 views

PT-2023-21941 · Veritas · Veritas Netbackup

Name of the Vulnerable Software and Affected Versions: Veritas NetBackup versions prior to 8.3.0.2 Description: An issue was discovered that allows an unprivileged user to specify a log file path when executing a NetBackup command, potentially leading to the overwrite of existing NetBackup log...

7.1CVSS7.1AI score0.00043EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2023/03/23 12:0 a.m.3 views

CVE-2023-28758

An issue was discovered in Veritas NetBackup before 8.3.0.2. BPCD allows an unprivileged user to specify a log file path when executing a NetBackup command. This can be used to overwrite existing NetBackup log files...

7.1CVSS6.8AI score0.00043EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2023/03/23 12:0 a.m.3 views

PT-2023-21942 · Veritas · Veritas Netbackup

Name of the Vulnerable Software and Affected Versions: Veritas NetBackup versions prior to 10.0 Description: A vulnerability exists in the way the client validates the path to a DLL prior to loading, which may allow a lower-level user to elevate privileges and compromise the system...

7.8CVSS7.1AI score0.00136EPSS
Exploits0References3
CNNVD
CNNVD
added 2023/03/23 12:0 a.m.1 views

Veritas NetBackup 安全漏洞

Veritas Technologies Veritas NetBackup is a powerful enterprise-class data backup management software from Veritas Technologies, USA. A security vulnerability exists in Veritas NetBackup versions prior to 8.3.0.2 that originates from allowing an unprivileged user to specify the path to a log file...

7.1CVSS7AI score0.00043EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2023/03/23 12:0 a.m.8 views

CVE-2023-28759

An issue was discovered in Veritas NetBackup before 10.0 on Windows. A vulnerability in the way the client validates the path to a DLL prior to loading may allow a lower-level user to elevate privileges and compromise the system...

7.8CVSS7.5AI score0.00136EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/03/23 12:0 a.m.2 views

Veritas Technologies Veritas NetBackup 代码问题漏洞

Veritas Technologies Veritas NetBackup is a powerful enterprise-class data backup management software from Veritas Technologies, USA. A code issue vulnerability exists in Veritas Technologies Veritas NetBackup versions prior to 10.0, which stems from a flaw in the way DLL paths are verified prior...

7.8CVSS7.4AI score0.00136EPSS
Exploits0References3
Rows per page
Query Builder