41 matches found
CVE-2022-21687
gh-ost is a triggerless online schema migration solution for MySQL. Versions prior to 1.1.3 are subject to an arbitrary file read vulnerability. The attacker must have access to the target host or trick an administrator into executing a malicious gh-ost command on a host running gh-ost, plus...
Command injection in gh-ost
Gh-ost version = 1.1.2 allows users to inject DSN strings via the -database parameter. This is a low severity vulnerability as the attacker must have access to the target host or trick an administrator into executing a malicious gh-ost command on a host running gh-ost, plus network access from ho...
GHSA-RRP4-2XX3-MV29 Command injection in gh-ost
Gh-ost version = 1.1.2 allows users to inject DSN strings via the -database parameter. This is a low severity vulnerability as the attacker must have access to the target host or trick an administrator into executing a malicious gh-ost command on a host running gh-ost, plus network access from ho...
gh-ost 输入验证错误漏洞
gh-ost is a trigger-free online mode migration solution for MySQL. It is testable and provides suspendability, dynamic control/reconfiguration, auditing, and many operational privileges. gh-ost suffers from an input validation error vulnerability that stems from the presence of an arbitrary file...
CVE-2022-21687: Improper Input Validation
gh-ost is a triggerless online schema migration solution for MySQL. Versions prior to 1.1.3 are subject to an arbitrary file read vulnerability. The attacker must have access to the target host or trick an administrator into executing a malicious gh-ost command on a host running gh-ost, plus...
PT-2022-15038 · Ghost · Ghost
Name of the Vulnerable Software and Affected Versions: gh-ost versions prior to 1.1.3 Description: The issue is related to an arbitrary file read vulnerability. It requires the attacker to have access to the target host or trick an administrator into executing a malicious gh-ost command, along wi...
gdg-mg-ost.de Cross Site Scripting vulnerability OBB-1338070
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
How to keep OST files in Veeam Agent backup
Challenge When you create a backup using Veeam Agent for Microsoft Windows , Microsoft Volume Shadow Copy Service VSS excludes certain files like deleted, temporary, paging or OST files from the backup scope. Cause Veeam Agent for Microsoft Windows uses Microsoft VSS for backup operations...
NetApp AltaVault OST Plugin Information Disclosure Vulnerability
NetApp AltaVault is a cloud storage solution from NetApp, Inc. that features scalability, data encryption, and support for data backup and recovery. The solution features scalability, data encryption, and support for data backup and recovery.OST Plug-in is one of the APIs used to provide backup a...
CVE-2017-15517
AltaVault OST Plug-in versions prior to 1.2.2 may allow attackers to obtain sensitive information via unspecified vectors. All users are urged to move to a fixed version and change passwords used by Veritas NetBackup to access the OST shares on the NetApp AltaVault as a precaution...
CVE-2017-15517: Exposure of Sensitive Information to an Unauthorized Actor
AltaVault OST Plug-in versions prior to 1.2.2 may allow attackers to obtain sensitive information via unspecified vectors. All users are urged to move to a fixed version and change passwords used by Veritas NetBackup to access the OST shares on the NetApp AltaVault as a precaution...
PT-2017-14080
Name of the Vulnerable Software and Affected Versions AltaVault OST Plug-in versions prior to 1.2.2 Description The issue may allow attackers to obtain sensitive information via unspecified vectors. Users are urged to change passwords used by Veritas NetBackup to access the OST shares on the NetA...
CVE-2017-15517
CVE-2017-15517 affects the NetApp AltaVault OST Plug-in (versions prior to 1.2.2). The vulnerability enables a local attacker to obtain sensitive information via unspecified vectors, resulting in partial confidentiality impact (no integrity/availability impact stated). The fixed version is 1.2.2 ...
berufskolleg-ost-essen.com XSS vulnerability
Open Bug Bounty ID: OBB-302985 Description| Value ---|--- Affected Website:| berufskolleg-ost-essen.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
MS16-107: Description of the security update for Outlook 2016: September 13, 2016
None None...
MEDIMAX SÜD-OST - Dynamic Code Loading, Exported components, External URLs vulnerabilities
HackApp vulnerability scanner discovered that application MEDIMAX SÜD-OST published at the 'play' market has multiple vulnerabilities...
FTP Server Zipped .ost File Uploaded
Binary data 4066.prm...
FTP Server Zipped .ost File Detection
Binary data 4050.prm...