3641 matches found
Design/Logic Flaw
The affected product is vulnerable to a missing permission validation on system backup restore, which could lead to account take over and unapproved settings change...
CVE-2021-38485 Emerson WirelessHART Gateway
The affected product is vulnerable to improper input validation in the restore file. This enables an attacker to provide malicious config files to replace any file on disk...
Emerson WirelessHART Gateway 输入验证错误漏洞
The Emerson WirelessHART Gateway is a wireless gateway from Emerson USA. The Emerson WirelessHART Gateway has an input validation error vulnerability that stems from the susceptibility of the affected product to incorrect input validation in a restore file. This allows an attacker to provide a...
CVE-2021-38485
The affected product is vulnerable to improper input validation in the restore file. This enables an attacker to provide malicious config files to replace any file on disk...
CVE-2021-42539
The affected product is vulnerable to a missing permission validation on system backup restore, which could lead to account take over and unapproved settings change...
Nextcloud: Read-only users can restore old versions
Read-only users were able to restore old versions of files in Nextcloud...
Veeam Explorer for Oracle restore fails with: "You have new mail in /var/spool/mail/root"
Challenge Restoring an Oracle Database to a Linux server using Veeam Explorer for Oracle fails with: Error: Wrong SCP response: 1.scp: /root You have new mail in /var/spool/mail/root/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxxx: No such file or directory Copy Log Example Uploading file Unix mask: 0766,...
Top Steps for Ransomware Recovery and Preparation
When it comes to ransomware attacks, it’s no longer a question of if or even when, but how often. A business falls victim to a ransomware attack every 11 seconds, making ransomware the fastest-growing type of cybercrime. Businesses today need to not only think about strategies to prevent...
Fedora: Security Advisory for partclone (FEDORA-2021-4dd269a76c)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 33 Update: partclone-0.3.17-4.fc33
Partclone provides utilities to clone and restore used blocks on a partition and is designed for higher compatibility of the file system by using existing libraries, e.g. e2fslibs is used to read and write the ext2 partition...
[SECURITY] Fedora 34 Update: partclone-0.3.17-4.fc34
Partclone provides utilities to clone and restore used blocks on a partition and is designed for higher compatibility of the file system by using existing libraries, e.g. e2fslibs is used to read and write the ext2 partition...
Security Bulletin: Vulnerability in Urllib3 affects IBM Spectrum Protect Plus Microsoft File Systems Backup and Restore (CVE-2021-33503)
Summary Denial of Service vulnerability in Urllib3 may affect IBM Spectrum Protect Plus Microsoft® File Systems backup and restore. Vulnerability Details CVEID: CVE-2021-33503 DESCRIPTION: urllib3 is vulnerable to a denial of service, caused by a regular expression denial of service ReDoS flaw du...
What It'll Take to Get Power Back in New Orleans After Ida
It could take weeks to get the lights on in parts of Louisiana, but the playbook on how to do it is clear...
GHSA-GH6X-4WHR-2QV4 Null pointer dereference and heap OOB read in operations restoring tensors
Impact When restoring tensors via raw APIs, if the tensor name is not provided, TensorFlow can be tricked into dereferencing a null pointer: python import tensorflow as tf tf.rawops.Restore filepattern='/tmp', tensorname=, defaultvalue=21, dt=tf.int, preferredshard=1 The same undefined behavior c...
PYSEC-2021-261
TensorFlow is an end-to-end open source platform for machine learning. When restoring tensors via raw APIs, if the tensor name is not provided, TensorFlow can be tricked into dereferencing a null pointer. Alternatively, attackers can read memory outside the bounds of heap allocated data by...
PYSEC-2021-750
TensorFlow is an end-to-end open source platform for machine learning. When restoring tensors via raw APIs, if the tensor name is not provided, TensorFlow can be tricked into dereferencing a null pointer. Alternatively, attackers can read memory outside the bounds of heap allocated data by...
CVE-2021-37639
TensorFlow is an end-to-end open source platform for machine learning. When restoring tensors via raw APIs, if the tensor name is not provided, TensorFlow can be tricked into dereferencing a null pointer. Alternatively, attackers can read memory outside the bounds of heap allocated data by...
Microsoft Issues Windows 10 Workaround Fix for ‘SeriousSAM’ Bug
A privilege escalation bug, affecting versions of Windows 10, received a workaround fix by Microsoft Wednesday to prevent attackers from accessing data and creating new accounts on compromised systems. The bug, dubbed SeriousSAM, affects the Security Accounts Manager SAM database in all versions ...
Acronis True Image 安全漏洞
Acronis True Image is a well-known data backup and restore software from Singapore-based Acronis. The software can be used to create drive and disk images and can restore images when a clean system is needed.Acronis True Image has a security vulnerability that can be exploited by attackers for...
QSAN SANOS 操作系统命令注入漏洞
QSAN SANOS is the SAN storage management operating system from QSAN China. It comes with a refreshingly easy-to-use Web GUI and can be easily deployed into any infrastructure. A security vulnerability exists in QSAN SANOS that stems from the QSAN SANOS Restore Factory Settings feature not filteri...