4664 matches found
CVE-2019-11551
In Code42 Enterprise and Crashplan for Small Business through Client version 6.9.1, an attacker can craft a restore request to restore a file through the Code42 app to a location they do not have privileges to write...
CVE-2019-11551
CVE-2019-11551 — Code42 Enterprise / CrashPlan for Small Business (Client ≤ 6.9.1) : An attacker with local access can craft a restore request via the Code42 app to write a file to a location they should not be able to write. Root cause: insufficient validation of the restore target path in the c...
CVE-2019-11897
The CVE-2019-11897 issue is a Server-Side Request Forgery (SSRF) in the backup & restore functionality of older ProSyst mBS SDK releases (before 8.2.6) and Bosch IoT Gateway Software (before 9.3.0). The vulnerability allows a remote attacker to forge GET requests to arbitrary URLs, potentially en...
PT-2019-12409
Name of the Vulnerable Software and Affected Versions ProSyst mBS SDK versions prior to 8.2.6 Bosch IoT Gateway Software versions prior to 9.2.0 Description The issue allows remote attackers to gather information about the file system structure due to the leakage of stack traces in remote access ...
CVE-2019-11602: Generation of Error Message Containing Sensitive Information
Leakage of stack traces in remote access to backup & restore in earlier versions than ProSyst mBS SDK 8.2.6 and Bosch IoT Gateway Software 9.2.0 allows remote attackers to gather information about the file system structure...
PT-2019-12554
Name of the Vulnerable Software and Affected Versions ProSyst mBS SDK versions prior to 8.2.6 Bosch IoT Gateway Software versions prior to 9.3.0 Description A Server-Side Request Forgery SSRF issue in the backup and restore functionality allows a remote attacker to forge GET requests to arbitrary...
PT-2019-12408 · Bosch +1 · Bosch Iot Gateway +1
Name of the Vulnerable Software and Affected Versions: ProSyst mBS SDK versions prior to 8.2.6 Bosch IoT Gateway Software versions prior to 9.2.0 Description: A directory traversal issue exists in the remote access to backup and restore functionality, allowing remote attackers to write or delete...
PT-2019-12374
Name of the Vulnerable Software and Affected Versions Code42 Enterprise and Crashplan for Small Business versions through 6.9.1 Description An issue exists where an attacker can craft a restore request to restore a file through the Code42 app to a location they do not have privileges to write...
CVE-2019-11897: Server-Side Request Forgery (SSRF)
A Server-Side Request Forgery SSRF vulnerability in the backup & restore functionality in earlier versions than ProSyst mBS SDK 8.2.6 and Bosch IoT Gateway Software 9.3.0 allows a remote attacker to forge GET requests to arbitrary URLs. In addition, this could potentially allow an attacker to rea...
CVE-2019-11551: Improper Privilege Management
In Code42 Enterprise and Crashplan for Small Business through Client version 6.9.1, an attacker can craft a restore request to restore a file through the Code42 app to a location they do not have privileges to write...
CVE-2016-10804
The SQLite journal feature in cPanel before 57.9999.54 allows arbitrary file-overwrite operations during Horde Restore SEC-58...
CVE-2016-10804
The SQLite journal feature in cPanel before 57.9999.54 allows arbitrary file-overwrite operations during Horde Restore SEC-58...
Design/Logic Flaw
The SQLite journal feature in cPanel before 57.9999.54 allows arbitrary file-overwrite operations during Horde Restore SEC-58...
CVE-2016-10804
The CVE-2016-10804 issue affects cPanel prior to 57.9999.54, where the SQLite journal feature can cause arbitrary file overwrites during Horde Restore (SEC-58). Root cause: misuse of the SQLite journal leads to write operations to arbitrary files. Impact (per sources): High, with potential confid...
CVE-2016-10804
The SQLite journal feature in cPanel before 57.9999.54 allows arbitrary file-overwrite operations during Horde Restore SEC-58...
PT-2019-7600
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 57.9999.54 Description The issue concerns the SQLite journal feature in cPanel, allowing arbitrary file-overwrite operations during Horde Restore. Recommendations For versions prior to 57.9999.54, update to version...
CVE-2016-10804: Improper Input Validation
The SQLite journal feature in cPanel before 57.9999.54 allows arbitrary file-overwrite operations during Horde Restore SEC-58...
CVE-2017-18384
cPanel before 68.0.15 allows jailed accounts to restore files that are outside of the jail SEC-310...