41 matches found
CVE-2025-11759 Backup, Restore and Migrate your sites with XCloner <= 4.8.2 - Cross-Site Request Forgery in Xcloner_Remote_Storage:save()
The Backup, Restore and Migrate your sites with XCloner plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.8.2. This is due to missing or incorrect nonce validation on the XclonerRemoteStorage:save function. This makes it possible for...
How to offboard a single protection unit from an Express backup policy in Veeam Data Cloud for M365
Challenge Issue Summary After creating an Express Protection Policy in Veeam Data Cloud for Microsoft 365, backups are retained for one year. These Express Protection Policies are built on the Microsoft 365 Backup storage backend. Over time, a situation may arise where you need to offboard a sing...
ExaGrid EX10 安全漏洞
ExaGrid EX10 is a backup storage server from ExaGrid USA. A security vulnerability exists in ExaGrid EX10 versions 6.3 through 7.0.1.P08, which stems from improper handling of API requests and could lead to bypassing privilege restrictions...
Important: Red Hat Security Advisory: OpenShift API for Data Protection (OADP) 1.4.2 security and bug fix update
OpenShift API for Data Protection OADP 1.4.2 is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...
Important: Red Hat Security Advisory: OpenShift API for Data Protection (OADP) 1.3.3 security and bug fix update
OpenShift API for Data Protection OADP 1.3.3 is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...
Dell PowerProtect Data Domain Improper Resource Control Vulnerability
Dell PowerProtect Data Domain is a suite of hardware appliances for data protection, backup, storage, and deduplication from Dell USA. A resource miscontrol vulnerability exists in Dell PowerProtect Data Domain, which can be exploited by an attacker to cause a denial of service...
Dell PowerProtect Data Domain Log Information Disclosure Vulnerability
Dell PowerProtect Data Domain is a suite of hardware appliances for data protection, backup, storage, and deduplication from Dell USA. A log information disclosure vulnerability exists in Dell PowerProtect Data Domain, which could be exploited by an attacker to cause reuse of publicly available...
Arbitrary File Creation
Overview opencart/opencart is a shopping cart system Affected versions of this package are vulnerable to Arbitrary File Creation. An Arbitrary File Creation issue was identified via the database restoration functionality. By injecting PHP code into the database, an attacker with admin privileges...
Virtuozzo Hybrid Infrastructure 6.0 Update 1 (6.0.1-76)
In this release, Virtuozzo Hybrid Infrastructure provides a range of new features that cover improvements in the compute service, object storage, alerts and monitoring. Additionally, this release delivers stability and security improvements, and addresses issues found in previous releases...
Virtuozzo Hybrid Infrastructure 6.0 (6.0.0-243)
In this release, Virtuozzo Hybrid Infrastructure provides an upgrade of the Linux distribution, kernel, and toolset packages. This release also contains a range of new features that cover storage performance, object storage, as well as monitoring and alerts. Additionally, this release delivers...
Moderate: Red Hat Security Advisory: OpenShift API for Data Protection (OADP) 1.0.5 security and bug fix update
OpenShift API for Data Protection OADP 1.0.5 is now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...
Virtuozzo Hybrid Infrastructure 4.7 Update 1
This update provides new features, as well as bug fixes and improvements. Vulnerability id: VSTOR-48360 Fixed the false-positive alert "MN backup does not exist." Vulnerability id: VSTOR-48337 After a power failure of all nodes in the high availability cluster, the virtual IP address may be unset...
Virtuozzo Hybrid Infrastructure 4.5 Update 2
This update provides bug fixes and improvements. Vulnerability id: VSTOR-44043 With backup storage geo-replication, promotion to the primary cluster fails with the error: "name 'payload' is not defined." Vulnerability id: VSTOR-43126 A deadlock is possible between atomic and non-atomic commands i...
Product release: Virtuozzo Hybrid Infrastructure 4.0 (4.0.0-734)
In this release, Virtuozzo Hybrid Infrastructure provides a wide range of new features that enhance the end-user experience and service providers' interoperability. The improvements cover networking, storage core, appliance, object storage, monitoring, performance charts, and localization...
PT-2019-16763 · Premisys · Premisys Identicard
Name of the Vulnerable Software and Affected Versions: Premisys Identicard version 3.1.190 Description: The issue concerns the storage of backup files as encrypted zip files with a hard-coded and unchangeable password. This allows an attacker with access to these backups to decrypt them and obtai...
How to Change Where SQL Transaction Log Backups Are Temporarily Stored on SQL Server
Purpose This article documents how to change the location where SQL transaction log backups are temporarily stored on a SQL server before being transferred to the repository. This article is relevant to the following parent-job types where SQL Transaction Log Backup can be used as a child-job:...
Creating a backup storage dump
Purpose This article documents how to create a "storage dump" from a Veeam backup file. The storage dump is a human-readable output of the backup file's metadata containing: Backup file parameters FIB files-in-backup hierarchy FIB blocks map Offset / size / compression type of data blocks...
WordPress Better WP Security Plugin <= 3.6.3 - XSS
This plugin is prone to online backup storage currenttime function brute force disclosure vulnerability. Solution Upgrade the plugin...
