Lucene search
+L

3302 matches found

Vulnrichment
Vulnrichment
added 2024/02/09 5:28 p.m.30 views

CVE-2023-50386 Apache Solr: Backup/Restore APIs allow for deployment of executables in malicious ConfigSets

Improper Control of Dynamically-Managed Code Resources, Unrestricted Upload of File with Dangerous Type, Inclusion of Functionality from Untrusted Control Sphere vulnerability in Apache Solr.This issue affects Apache Solr: from 6.0.0 through 8.11.2, from 9.0.0 before 9.4.1. In the affected...

8.2AI score0.8384EPSS
SaveExploits4References2
Cvelist
Cvelist
added 2024/02/09 5:28 p.m.49 views

CVE-2023-50386 Apache Solr: Backup/Restore APIs allow for deployment of executables in malicious ConfigSets

Improper Control of Dynamically-Managed Code Resources, Unrestricted Upload of File with Dangerous Type, Inclusion of Functionality from Untrusted Control Sphere vulnerability in Apache Solr.This issue affects Apache Solr: from 6.0.0 through 8.11.2, from 9.0.0 before 9.4.1. In the affected...

9.1AI score0.8384EPSS
SaveExploits4References2
CNNVD
CNNVD
added 2024/02/09 12:0 a.m.5 views

WordPress Plugin Backuply Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...

7.5CVSS6.6AI score0.00957EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/02/08 12:0 a.m.4 views

PT-2024-15860 · WordPress · Backuply

Name of the Vulnerable Software and Affected Versions: The Backuply – Backup, Restore, Migrate and Clone plugin for WordPress versions 1.2.5 and earlier Description: The issue is related to a Denial of Service vulnerability. This vulnerability is due to direct access of the backuply/restore ins.p...

7.5CVSS7.9AI score0.00957EPSS
SaveExploits0References10
NVD
NVD
added 2024/02/06 9:15 p.m.27 views

CVE-2024-22514

An issue discovered in iSpyConnect.com Agent DVR 5.1.6.0 allows attackers to run arbitrary files by restoring a crafted backup file...

8.8CVSS8.5AI score0.01401EPSS
SaveExploits1References1
OSV
OSV
added 2024/02/06 9:15 p.m.10 views

CVE-2024-22514

An issue discovered in iSpyConnect.com Agent DVR 5.1.6.0 allows attackers to run arbitrary files by restoring a crafted backup file...

8.8CVSS5.9AI score0.01401EPSS
SaveExploits1References1
OSV
OSV
added 2024/02/05 10:15 p.m.7 views

CVE-2023-4637

The WPvivid plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the restore and getrestoreprogress function in versions up to, and including, 0.9.94. This makes it possible for unauthenticated attackers to invoke these functions and obtain full...

5.3CVSS5.9AI score0.00615EPSS
SaveExploits0References4
NVD
NVD
added 2024/02/05 10:15 p.m.38 views

CVE-2023-4637

The WPvivid plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the restore and getrestoreprogress function in versions up to, and including, 0.9.94. This makes it possible for unauthenticated attackers to invoke these functions and obtain full...

5.3CVSS4.7AI score0.00615EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/02/05 12:0 a.m.6 views

PT-2024-13356 · WordPress · Wpvivid

Name of the Vulnerable Software and Affected Versions: WPvivid plugin for WordPress versions up to, and including, 0.9.94 Description: The issue is related to a missing capability check on the restore and get restore progress functions. This allows unauthenticated attackers to invoke these...

5.3CVSS6.2AI score0.00615EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2024/02/05 12:0 a.m.7 views

WordPress plguin WPvivid Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

5.3CVSS6.5AI score0.00615EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2024/02/02 12:0 a.m.8 views

The vulnerability of the backup/restore function of the video surveillance software Agent DVR allows a intruder to execute arbitrary code and upload arbitrary files.

The vulnerability of the Backup/Restore function of the video surveillance software for DVR systems is related to incorrect restrictions on the path to the restricted-access directory. Exploiting this vulnerability could allow an attacker to execute arbitrary commands and upload arbitrary files...

10CVSS8AI score0.01401EPSS
SaveExploits1References4Affected Software1
Positive Technologies
Positive Technologies
added 2024/02/01 12:0 a.m.9 views

PT-2024-15911 · WordPress · Nex-Forms

Name of the Vulnerable Software and Affected Versions: NEX-Forms – Ultimate Form Builder – Contact forms and much more plugin for WordPress versions up to, and including, 8.5.6 Description: The issue is related to unauthorized access due to a missing capability check on the restore records...

5.3CVSS9.2AI score0.00598EPSS
SaveExploits0References10
Akamai Blog
Akamai Blog
added 2024/01/31 2:0 p.m.12 views

How Akamai Volunteers Helped Restore Costa Rica’s Most Polluted Beach

...

7AI score
SaveExploits0
Patchstack
Patchstack
added 2024/01/29 12:0 a.m.14 views

WordPress Backuply – Backup, Restore, Migrate and Clone Plugin <= 1.2.3 is vulnerable to Directory Traversal

Software Backuply – Backup, Restore, Migrate and Clone Type Plugin Vulnerable versions = 1.2.3 Fixed in 1.2.4 OWASP Top 10 A6: Security Misconfiguration Classification Directory Traversal CVE CVE-2024-0697 Patch priority Low CVSS severity Low 4.9 Developer Claim ownership PSID 3064782c188c Credit...

6.5CVSS6.5AI score0.00764EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2024/01/27 12:0 a.m.13 views

PT-2024-1417 · Agent Dvr · Agent Dvr

Name of the Vulnerable Software and Affected Versions: Agent DVR version 5.1.6.0 Description: The issue is related to the Backup/Restore function in Agent DVR software, which is used for video surveillance. It involves incorrect restriction of the path name to a directory with limited access...

10CVSS8.2AI score0.01401EPSS
SaveExploits1References10
WPVulnDB
WPVulnDB
added 2024/01/26 12:0 a.m.18 views

WPvivid < 0.9.95 - Missing Authorization

Description The plugin vulnerable to unauthorized access of data due to a missing capability check on the restore and getrestoreprogress function, making it possible for unauthenticated attackers to invoke these functions and obtain full file paths if they have access to a back-up ID...

5CVSS6.6AI score0.00615EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2024/01/23 6:15 p.m.24 views

CVE-2023-6573

HPE OneView may have a missing passphrase during restore...

5.5CVSS5.5AI score0.00187EPSS
SaveExploits0References1
OSV
OSV
added 2024/01/23 6:15 p.m.7 views

CVE-2023-6573

HPE OneView may have a missing passphrase during restore...

5.5CVSS5.8AI score0.00187EPSS
SaveExploits0References1
Prion
Prion
added 2024/01/23 6:15 p.m.21 views

Design/Logic Flaw

HPE OneView may have a missing passphrase during restore...

1.9CVSS7.2AI score0.00187EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/01/23 5:13 p.m.27 views

CVE-2023-6573

HPE OneView may have a missing passphrase during restore...

5.5CVSS5.8AI score0.00187EPSS
SaveExploits0References1
Rows per page
Query Builder