CVE-2018-20013

The CVE-2018-20013 issue affects UrBackup 2.2.6. A malformed network request can trigger an assertion in fileservplugin/CClientThread.cpp: CClientThread::ProcessPacket metadata_id!=0, causing the client application to shut down. The reports indicate a network-exposed vulnerability that can termin...

CVE-2018-20013

In UrBackup 2.2.6, an attacker can send a malformed request to the client over the network, and trigger a fileservplugin/CClientThread.cpp CClientThread::ProcessPacket metadataid!=0 assertion, leading to shutting down the client application...

PT-2019-9967

Name of the Vulnerable Software and Affected Versions UrBackup version 2.2.6 Description The issue allows an attacker to send a malformed request to the client over the network, triggering a metadata id!=0 assertion in fileservplugin/CClientThread.cpp CClientThread::ProcessPacket, which leads to...

CVE-2018-20013: Improper Input Validation

In UrBackup 2.2.6, an attacker can send a malformed request to the client over the network, and trigger a fileservplugin/CClientThread.cpp CClientThread::ProcessPacket metadataid!=0 assertion, leading to shutting down the client application...

UrBackup Buffer Overflow Vulnerability

UrBackup is an open source backup and recovery system for multiple platforms. A buffer overflow vulnerability exists in UrBackup version 2.2.6. The vulnerability stems from a networked system or product performing operations in memory without properly validating data boundaries, resulting in...

CVE-2018-20014

In UrBackup 2.2.6, an attacker can send a malformed request to the client over the network, and trigger a fileservplugin/CClientThread.cpp CClientThread::GetFileHashAndMetadata NULL pointer dereference, leading to shutting down the client application...

Null pointer dereference

In UrBackup 2.2.6, an attacker can send a malformed request to the client over the network, and trigger a fileservplugin/CClientThread.cpp CClientThread::GetFileHashAndMetadata NULL pointer dereference, leading to shutting down the client application...

CVE-2018-20014

In UrBackup 2.2.6, an attacker can send a malformed request to the client over the network, and trigger a fileservplugin/CClientThread.cpp CClientThread::GetFileHashAndMetadata NULL pointer dereference, leading to shutting down the client application...

CVE-2018-20014

In UrBackup 2.2.6, an attacker can send a malformed request to the client over the network, and trigger a fileservplugin/CClientThread.cpp CClientThread::GetFileHashAndMetadata NULL pointer dereference, leading to shutting down the client application...

CVE-2018-20014

CVE-2018-20014 affects UrBackup 2.2.6. A malformed network request can trigger a NULL pointer dereference in fileservplugin/CClientThread.cpp::GetFileHashAndMetadata, causing the client application to shut down. The available documents do not provide exploit details, affected versions beyond 2.2....

PT-2019-9968

Name of the Vulnerable Software and Affected Versions UrBackup version 2.2.6 Description The issue allows an attacker to send a malformed request to the client over the network, triggering a NULL pointer dereference in CClientThread::GetFileHashAndMetadata function in...

CVE-2018-20014: NULL Pointer Dereference

In UrBackup 2.2.6, an attacker can send a malformed request to the client over the network, and trigger a fileservplugin/CClientThread.cpp CClientThread::GetFileHashAndMetadata NULL pointer dereference, leading to shutting down the client application...

UrBackup Server Cross-Site Scripting Vulnerability

UrBackup is an easy to install open source client/server backup system . A cross-site scripting vulnerability exists in UrBackup Server before 2.1.20. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML via the action parameter...

Cross site scripting

Cross - site scripting XSS vulnerability in UrBackup Server before 2.1.20 allows remote attackers to inject arbitrary web script or HTML via the action parameter...

CVE-2017-16950

Cross - site scripting XSS vulnerability in UrBackup Server before 2.1.20 allows remote attackers to inject arbitrary web script or HTML via the action parameter...

CVE-2017-16950

Cross - site scripting XSS vulnerability in UrBackup Server before 2.1.20 allows remote attackers to inject arbitrary web script or HTML via the action parameter...

CVE-2017-16950

CVE-2017-16950 is an XSS in UrBackup Server prior to 2.1.20. The web UI fails to properly sanitize the action parameter, allowing a remote attacker to inject arbitrary web script or HTML via that parameter. Affected product: UrBackup Server (before 2.1.20); root cause: insufficient input sanitiza...

CVE-2017-16950

Cross - site scripting XSS vulnerability in UrBackup Server before 2.1.20 allows remote attackers to inject arbitrary web script or HTML via the action parameter...

CVE-2017-16950

Cross - site scripting XSS vulnerability in UrBackup Server before 2.1.20 allows remote attackers to inject arbitrary web script or HTML via the action parameter...

PT-2017-14653

Name of the Vulnerable Software and Affected Versions UrBackup Server versions prior to 2.1.20 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the action parameter. Recommendations For UrBackup Server versions prior to 2.1.20, update to...