Lucene search
+L

17060 matches found

BDU FSTEC
BDU FSTEC
•added 2026/05/13 12:00 a.m.•15 views

The vulnerability of the data protection software through backup using PowerProtect Data Domain for Dell EMC Data Domain Operating Systems allows a hacker to execute arbitrary commands with root privileges.

The vulnerability of the data protection software through PowerProtect Data Domain’s backup solution for Dell EMC Data Domain Operating Systems is related to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability could allow an attacker to execute arbitrary...

6.8CVSS6AI score0.00624EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/05/13 12:00 a.m.•18 views

The vulnerability of the data protection software through backup using PowerProtect Data Domain for Dell EMC Data Domain Operating Systems allows attackers to gain unauthorized access to protected information.

The vulnerability of the data protection software through backup using PowerProtect Data Domain for Dell EMC Data Domain Operating Systems is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability could allow an attacker to gain unauthorized access to...

6.8CVSS5.8AI score0.00368EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/05/13 12:00 a.m.•15 views

The vulnerability of the data protection software through backup using PowerProtect Data Domain for Dell EMC Data Domain Operating Systems allows a hacker to execute arbitrary commands with root privileges.

The vulnerability of the data protection software through backup using PowerProtect Data Domain for Dell EMC Data Domain Operating Systems is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary commands with root privileges...

9CVSS6AI score0.00417EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/05/13 12:00 a.m.•15 views

The vulnerability of the data protection software through backup using PowerProtect Data Domain for Dell EMC Data Domain Operating Systems allows a hacker to execute arbitrary commands with root privileges.

The vulnerability of the data protection software through backup operations using PowerProtect Data Domain for Dell EMC Data Domain Operating Systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary...

6.8CVSS6.3AI score0.00193EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/05/13 12:00 a.m.•20 views

The vulnerability of the data protection software through backup using PowerProtect Data Domain for Dell EMC Data Domain Operating Systems allows attackers to perform cross-site scripting attacks.

The vulnerability of the data protection software through backup using PowerProtect Data Domain for Dell EMC Data Domain Operating Systems is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site...

6.5CVSS5.6AI score0.00242EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/05/13 12:00 a.m.•18 views

The vulnerability of the data protection software through backup using PowerProtect Data Domain for Dell EMC Data Domain Operating Systems allows a hacker to execute arbitrary commands with root privileges.

The vulnerability of the data protection software through PowerProtect Data Domain’s backup solution for Dell EMC Data Domain Operating Systems is related to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability could allow an attacker to execute arbitrary...

6.8CVSS6AI score0.01435EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/05/13 12:00 a.m.•16 views

The vulnerability of the data protection software through backup using PowerProtect Data Domain for Dell EMC Data Domain Operating Systems allows a hacker to execute arbitrary commands with root privileges.

The vulnerability of the data protection software through PowerProtect Data Domain’s backup solution for Dell EMC Data Domain Operating Systems is related to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability could allow a malicious actor to execute arbitrar...

9CVSS6AI score0.02003EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/05/13 12:00 a.m.•13 views

The vulnerability of the data protection software through backup using PowerProtect Data Domain for Dell EMC Data Domain Operating Systems allows attackers to enhance their privileges.

The vulnerability of the data protection software through backup using PowerProtect Data Domain for Dell EMC Data Domain Operating Systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges and gain unauthorized access to...

6.3CVSS5.8AI score0.00127EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/05/13 12:00 a.m.•13 views

The vulnerability of the data protection software through backup using PowerProtect Data Domain for Dell EMC Data Domain Operating Systems allows a hacker to execute arbitrary commands with root privileges.

The vulnerability of the data protection software through PowerProtect Data Domain’s backup solution for Dell EMC Data Domain Operating Systems is related to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability could allow a malicious actor to execute arbitrar...

9CVSS6AI score0.01191EPSS
SaveExploits0References2Affected Software2
RedhatCVE
RedhatCVE
•added 2026/05/12 7:38 p.m.•23 views

CVE-2026-40197

A flaw was found in Incus, a system container and virtual machine manager. An authenticated user with access to the storage volume feature can exploit a nil-pointer dereference vulnerability during custom volume import operations. By supplying a specially crafted backup archive, the user can caus...

7.1CVSS5.7AI score0.00444EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2026/05/12 7:38 p.m.•16 views

CVE-2026-41647

A flaw was found in Incus, a system container and virtual machine manager. An authenticated Incus user can exploit a missing error handling vulnerability by importing a truncated storage bucket backup file. This can lead to a daemon crash, resulting in a Denial of Service DoS for the Incus servic...

6.5CVSS5.7AI score0.00471EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2026/05/12 7:38 p.m.•18 views

CVE-2026-40251

A flaw was found in Incus, a system container and virtual machine manager. An authenticated user with access to the storage volume feature can exploit missing validation logic in the storage volume import process or an out-of-bounds panic vulnerability in the backup restore subsystem. By submitti...

7.1CVSS5.8AI score0.00471EPSS
SaveExploits1References2
PyPA
PyPA
•added 2026/05/12 6:17 p.m.•33 views

PYSEC-2026-30

changedetection.io is a free open source web page change detection tool. Prior to 0.55.1, the vulnerability is caused by trusting attacker-controlled snapshot paths restored from backup files. The vulnerable flow starts in the backup restore logic. When a backup ZIP is restored, the application...

7.5CVSS5.8AI score0.00495EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2026/05/12 6:17 p.m.•29 views

PYSEC-2026-30

changedetection.io is a free open source web page change detection tool. Prior to 0.55.1, the vulnerability is caused by trusting attacker-controlled snapshot paths restored from backup files. The vulnerable flow starts in the backup restore logic. When a backup ZIP is restored, the application...

7.5CVSS5.8AI score0.00495EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2026/05/12 4:56 p.m.•13 views

CVE-2026-43891 changedetection.io: Arbitrary Local File Read via crafted backup restore

changedetection.io is a free open source web page change detection tool. Prior to 0.55.1, the vulnerability is caused by trusting attacker-controlled snapshot paths restored from backup files. The vulnerable flow starts in the backup restore logic. When a backup ZIP is restored, the application...

7.5CVSS5.8AI score0.00495EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2026/05/12 4:56 p.m.•25 views

CVE-2026-43891

changedetection.io is a free open source web page change detection tool. Prior to 0.55.1, the vulnerability is caused by trusting attacker-controlled snapshot paths restored from backup files. The vulnerable flow starts in the backup restore logic. When a backup ZIP is restored, the application...

7.5CVSS5.8AI score0.00495EPSS
SaveExploits1References2Affected Software1
OSV
OSV
•added 2026/05/12 4:56 p.m.•14 views

CVE-2026-43891 changedetection.io: Arbitrary Local File Read via crafted backup restore

changedetection.io is a free open source web page change detection tool. Prior to 0.55.1, the vulnerability is caused by trusting attacker-controlled snapshot paths restored from backup files. The vulnerable flow starts in the backup restore logic. When a backup ZIP is restored, the application...

7.5CVSS5.9AI score
SaveExploits0References4
CVE
CVE
•added 2026/05/12 4:56 p.m.•60 views

CVE-2026-43891

Summary: CVE-2026-43891 and related advisories describe an arbitrary local file read in changedetection.io caused by trusting attacker-controlled history.txt entries restored via crafted backups. Prior to 0.55.1, history values containing path separators are treated as filesystem paths and can re...

7.5CVSS5.8AI score0.00495EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2026/05/12 4:56 p.m.•54 views

CVE-2026-43891 changedetection.io: Arbitrary Local File Read via crafted backup restore

changedetection.io is a free open source web page change detection tool. Prior to 0.55.1, the vulnerability is caused by trusting attacker-controlled snapshot paths restored from backup files. The vulnerable flow starts in the backup restore logic. When a backup ZIP is restored, the application...

7.5CVSS0.00495EPSS
SaveExploits1References1
EUVD
EUVD
•added 2026/05/12 3:31 p.m.•21 views

EUVD-2026-29493

Sandbox escape in the Profile Backup component. This vulnerability was fixed in Firefox 150.0.3...

5.8AI score0.00596EPSS
SaveExploits0References3
Rows per page
Query Builder