Lucene search
+L

18149 matches found

CNNVD
CNNVD
•added 2024/02/15 12:00 a.m.•23 views

flusity CMS Security Vulnerability

flusity CMS is a user interactive interface solution where code can be easily changed or added. A security vulnerability exists in flusity CMS version v.2.4, which stems from a path traversal vulnerability in the component downloadbackup.php...

9.8CVSS7.1AI score0.01417EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
•added 2024/02/15 12:00 a.m.•24 views

Vinchin Backup & Recovery Privilege Escalation

The vulnerability of the Vinchin Backup & Recovery software for backup and restoration is related to the use of default user accounts. Exploiting this vulnerability could allow a malicious actor to gain increased privileges from a remote location...

10CVSS7.8AI score0.0111EPSS
SaveExploits3References5Affected Software1
Veeam
Veeam
•added 2024/02/15 12:00 a.m.•230 views

Migrating Veeam Backup & Replication from Socket to Veeam Universal License (VUL) Licensing

Purpose This article explains the advantages of upgrading from a legacy socket-based license to the improved Veeam Universal License VUL for Veeam Data Platform, allowing access to all the features that VUL offers. It also includes instructions for updating the license in Veeam Backup & Replicati...

6.9AI score
SaveExploits0
Veeam
Veeam
•added 2024/02/14 12:00 a.m.•238 views

Agent is managed by another Veeam server

Challenge During the Rescan of a Protection Group, a machine displays the warning: Agent is managed by another Veeam server Cause This occurs when configuration settings are present on the machine indicating that the Veeam Agent deployment on that machine is managed by a different Veeam Backup &...

5.7AI score
SaveExploits0Affected Software6
Veracode
Veracode
•added 2024/02/12 3:01 p.m.•59 views

Unrestricted File Upload

Apache Solr is vulnerable to Unrestricted File Upload. The vulnerability is due to the ConfigSets API accepting and uploading jar/class files without proper restriction of file type. When backing up Solr Collections, the configSet files will be saved to disk, but if the backup directory is includ...

8.8CVSS6.5AI score0.83719EPSS
SaveExploits6References7Affected Software1
osv_ghsa
osv_ghsa
•added 2024/02/09 6:31 p.m.•41 views

GHSA-37VR-VMG4-JWPW Apache Solr: Backup/Restore APIs allow for deployment of executables in malicious ConfigSets

Improper Control of Dynamically-Managed Code Resources, Unrestricted Upload of File with Dangerous Type, Inclusion of Functionality from Untrusted Control Sphere vulnerability in Apache Solr.This issue affects Apache Solr from 6.0.0 through 8.11.2, from 9.0.0 before 9.4.1. In the affected version...

8.8CVSS5.9AI score0.83719EPSS
SaveExploits6References8
Github Security Blog
Github Security Blog
•added 2024/02/09 6:31 p.m.•54 views

Apache Solr: Backup/Restore APIs allow for deployment of executables in malicious ConfigSets

Improper Control of Dynamically-Managed Code Resources, Unrestricted Upload of File with Dangerous Type, Inclusion of Functionality from Untrusted Control Sphere vulnerability in Apache Solr.This issue affects Apache Solr from 6.0.0 through 8.11.2, from 9.0.0 before 9.4.1. In the affected version...

8.8CVSS7.4AI score0.83719EPSS
SaveExploits6References9Affected Software1
NVD
NVD
•added 2024/02/09 6:15 p.m.•30 views

CVE-2023-50386

Improper Control of Dynamically-Managed Code Resources, Unrestricted Upload of File with Dangerous Type, Inclusion of Functionality from Untrusted Control Sphere vulnerability in Apache Solr.This issue affects Apache Solr: from 6.0.0 through 8.11.2, from 9.0.0 before 9.4.1. In the affected...

8.8CVSS8.8AI score0.83719EPSS
SaveExploits6References2
osv_debian
osv_debian
•added 2024/02/09 6:15 p.m.•18 views

DEBIAN-CVE-2023-50386

Improper Control of Dynamically-Managed Code Resources, Unrestricted Upload of File with Dangerous Type, Inclusion of Functionality from Untrusted Control Sphere vulnerability in Apache Solr.This issue affects Apache Solr: from 6.0.0 through 8.11.2, from 9.0.0 before 9.4.1. In the affected...

8.8CVSS7.5AI score0.83719EPSS
SaveExploits6References1
UbuntuCve
UbuntuCve
•added 2024/02/09 6:15 p.m.•71 views

CVE-2023-50386

Improper Control of Dynamically-Managed Code Resources, Unrestricted Upload of File with Dangerous Type, Inclusion of Functionality from Untrusted Control Sphere vulnerability in Apache Solr.This issue affects Apache Solr: from 6.0.0 through 8.11.2, from 9.0.0 before 9.4.1. In the affected...

8.8CVSS6.8AI score0.83719EPSS
SaveExploits6References3
Vulnrichment
Vulnrichment
•added 2024/02/09 5:28 p.m.•33 views

CVE-2023-50386 Apache Solr: Backup/Restore APIs allow for deployment of executables in malicious ConfigSets

Improper Control of Dynamically-Managed Code Resources, Unrestricted Upload of File with Dangerous Type, Inclusion of Functionality from Untrusted Control Sphere vulnerability in Apache Solr.This issue affects Apache Solr: from 6.0.0 through 8.11.2, from 9.0.0 before 9.4.1. In the affected...

8.2AI score0.83719EPSS
SaveExploits6References2
CVE
CVE
•added 2024/02/09 5:28 p.m.•483 views

CVE-2023-50386

Apache Solr versions 6.0.0 through 8.11.2 and 9.0.0 before 9.4.1 are vulnerable to Remote Code Execution (RCE) due to improper control of dynamically-managed code resources. The ConfigSets API allows users to upload Java jar and class files , which are saved to disk when using the LocalFileSystem...

8.8CVSS7.2AI score0.83719EPSS
SaveIn wildExploits6References2Affected Software1
Debian CVE
Debian CVE
•added 2024/02/09 5:28 p.m.•55 views

CVE-2023-50386

Improper Control of Dynamically-Managed Code Resources, Unrestricted Upload of File with Dangerous Type, Inclusion of Functionality from Untrusted Control Sphere vulnerability in Apache Solr.This issue affects Apache Solr: from 6.0.0 through 8.11.2, from 9.0.0 before 9.4.1. In the affected...

8.8CVSS7.6AI score0.83719EPSS
SaveExploits6
Cvelist
Cvelist
•added 2024/02/09 5:28 p.m.•63 views

CVE-2023-50386 Apache Solr: Backup/Restore APIs allow for deployment of executables in malicious ConfigSets

Improper Control of Dynamically-Managed Code Resources, Unrestricted Upload of File with Dangerous Type, Inclusion of Functionality from Untrusted Control Sphere vulnerability in Apache Solr.This issue affects Apache Solr: from 6.0.0 through 8.11.2, from 9.0.0 before 9.4.1. In the affected...

9.1AI score0.83719EPSS
SaveExploits6References2
BDU FSTEC
BDU FSTEC
•added 2024/02/09 12:00 a.m.•25 views

Vinchan Backup & Recovery Arbitrary Command Execution

The vulnerability of the Vinchin Backup & Recovery software regarding backup and restoration involves a lack of measures for cleaning input data. Exploiting this vulnerability allows a malicious actor operating remotely to execute arbitrary commands...

10CVSS8.1AI score0.20477EPSS
SaveExploits3References6Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/02/09 12:00 a.m.•21 views

Vinchin Backup & Recovery Command Execution

The vulnerability of the setNetworkCardInfo function in the Vinchin Backup & Recovery software relates to the lack of measures taken to neutralize special elements used in the operating system’s command when processing the NAME parameter. Exploiting this vulnerability allows a malicious actor to...

9CVSS8AI score0.01899EPSS
SaveExploits3References5Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/02/09 12:00 a.m.•23 views

Vinchan Backup & Recovery Data Compromise

The software for backup and recovery, Vinchin Backup & Recovery, has a vulnerability due to the rigid coding of registration data. Exploiting this vulnerability allows an attacker operating remotely to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS7.7AI score0.07887EPSS
SaveExploits3References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/09 12:00 a.m.•8 views

CVE-2024-0842: Uncontrolled Resource Consumption

The Backuply – Backup, Restore, Migrate and Clone plugin for WordPress is vulnerable to Denial of Service in all versions up to, and including, 1.2.6. This is due to direct access of the backuply/restoreins.php file and. This makes it possible for unauthenticated attackers to make excessive...

7.5CVSS5.7AI score0.00957EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2024/02/06 9:15 p.m.•31 views

CVE-2024-22514

An issue discovered in iSpyConnect.com Agent DVR 5.1.6.0 allows attackers to run arbitrary files by restoring a crafted backup file...

8.8CVSS5.9AI score0.01401EPSS
SaveExploits1References1
Prion
Prion
•added 2024/02/06 9:15 p.m.•37 views

Authorization

An issue discovered in iSpyConnect.com Agent DVR 5.1.6.0 allows attackers to run arbitrary files by restoring a crafted backup file...

6.5CVSS7.1AI score0.01401EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder