18389 matches found
CVE-2022-40202
The database backup function in Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior lacks proper authentication. An attacker could provide malicious serialized objects which, when deserialized, could activate an opcode for a backup scheduling function without authentication...
Moderate: Red Hat Security Advisory: OpenShift API for Data Protection (OADP) 1.0.5 security and bug fix update
OpenShift API for Data Protection OADP 1.0.5 is now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...
CVE-2022-40202: Missing Authentication for Critical Function
The database backup function in Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior lacks proper authentication. An attacker could provide malicious serialized objects which, when deserialized, could activate an opcode for a backup scheduling function without authentication...
Fortinet FortiClient Privilege Escalation
The vulnerability of the backupConfig.sh script, which is used for creating a backup copy as part of the Fortinet FortiClient Linux security solution, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to enhance their privileges by sending special...
WordPress Backup Guard plugin <= 1.6.9.0 - Auth. Stored Cross-Site Scripting (XSS) vulnerability
Auth. Stored Cross-Site Scripting XSS vulnerability discovered by Muhammad Daffa Patchstack Alliance in the WordPress Backup Guard plugin versions = 1.6.9.0. Solution Update the WordPress Backup Guard plugin to the latest available version at least 1.6.9.1...
About the security content of iOS 15.7.1 and iPadOS 15.7.1
About the security content of iOS 15.7.1 and iPadOS 15.7.1 This document describes the security content of iOS 15.7.1 and iPadOS 15.7.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...
How to Create a Salesforce Connected App to Connect Veeam Backup for Salesforce to Salesforce.com
This article was designed to compliment the Veeam Backup for Salesforce User Guide Deployment Performing Initial Configuration Step 5. Create Connected App Purpose This article documents how to create a Connected App in Salesforce to integrate with Veeam Backup for Salesforce via Salesforce API. ...
How to Re-Initialize Veeam Backup for Salesforce Configuration Database Connection
Purpose This article documents how to change which account Veeam Backup for Salesforce uses to connect to its configuration database. Solution Scenario 1: Change Database Credentials When Existing Connection is Functioning This scenario assumes the current connection to the database is valid and...
How to Reset Password for Veeam Backup for Salesforce
Purpose This article documents how to reset the password used to access Veeam Backup for Salesforce. Solution 1. Connect to the Veeam Backup for Salesforce machine via SSH 2. Run the script for changing the password: For Veeam Backup for Salesforce version 3: sudo /opt/vbsf/resetpassword.sh For...
How to Manually Configure Nginx For Use by Veeam Backup for Salesforce
Purpose This article documents how to manually configure Nginx for use with Veeam Backup for Salesforce 3.1 and higher . Solution 1. Before making configuration changes, stop the Veeam Backup for Salesforce backend service: systemctl stop vbsf-backend.service Copy 2. Use Nginx template...
Build Numbers and Versions of Veeam Backup for Salesforce
This KB article lists all versions of Veeam Backup for Salesforce and their respective build numbers. For more information on downloading the latest version of Veeam Backup for Salesforce , visit: Veeam Backup for Salesforce Current Version Download Page Version | Build Number | Release Date |...
PT-2022-6378 · Cisco · Cisco Fxos +1
Name of the Vulnerable Software and Affected Versions: Cisco UCS Manager Software affected versions not specified Cisco FXOS Software affected versions not specified Description: A weakness in the encryption method used for the backup function could allow an unauthenticated attacker with access t...
PT-2022-25280 · Delta Electronics · Infrasuite Device Master
Name of the Vulnerable Software and Affected Versions: Delta Electronics InfraSuite Device Master versions 00.00.01a and prior Description: The database backup function in the software lacks proper authentication, allowing an attacker to provide malicious serialized objects. When deserialized,...
Path Traversal - Download remote files by exploiting the backup functionality (Authenticated)
Description The vulnerability found in the backup system allows an Administrator of the CMS to download any files on the remote file system not only backup files by exploiting a "Path Traversal". The vulnerability does not require any user interaction and is very simple to exploit. Proof of Conce...
Mozilla: Matrix SDK bundled with Thunderbird vulnerable to an impersonation attack
A flaw was found in Mozilla. According to the Mozilla Foundation Security Advisory, Thunderbird users who use the Matrix chat protocol are vulnerable to an impersonation attack. An attacker could spoof historical messages from other users, and use a malicious key backup to the user's account unde...
Mozilla: Matrix SDK bundled with Thunderbird vulnerable to an impersonation attack
A flaw was found in Mozilla. According to the Mozilla Foundation Security Advisory, Thunderbird users who use the Matrix chat protocol are vulnerable to an impersonation attack. An attacker could spoof historical messages from other users, and use a malicious key backup to the user's account unde...
VulnCheck KEV: CVE-2022-26501
The Veeam Distribution Service in the Backup & Replication application allows unauthenticated users to access internal API functions. A remote attacker can send input to the internal API which may lead to uploading and executing of malicious code...
VulnCheck KEV: CVE-2022-26504
Improper authentication in Veeam Backup & Replication 9.5U3, 9.5U4,10.x and 11.x component used for Microsoft System Center Virtual Machine Manager SCVMM allows attackers execute arbitrary code via Veeam.Backup.PSManager.exe...
VulnCheck KEV: CVE-2022-26500
The Veeam Distribution Service in the Backup & Replication application allows unauthenticated users to access internal API functions. A remote attacker can send input to the internal API which may lead to uploading and executing of malicious code...
About the security content of iOS 16.1 and iPadOS 16
About the security content of iOS 16.1 and iPadOS 16 This document describes the security content of iOS 16.1 and iPadOS 16. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...