15167 matches found
June 26, 2025—KB5060829 (OS Build 26100.4484) Preview
None None...
CVE-2025-49135
CVAT (open source CV annotation tool) versions 2.2.0–2.39.0 have a missing validation during the import of project/task backups, where the filename in the query parameter is not verified to refer to a TUS-uploaded file owned by the same user. An account with a user role who knows other users’ fil...
CVE-2025-49135 CVAT missing validation for in-progress backup upload names
CVAT is an open source interactive video and image annotation tool for computer vision. Versions 2.2.0 through 2.39.0 have no validation during the import process of a project or task backup to check that the filename specified in the query parameter refers to a TUS-uploaded file belonging to the...
CVE-2025-32977
Quest KACE Systems Management Appliance SMA 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183, 14.0.x before 14.0.341 Patch 5, and 14.1.x before 14.1.101 Patch 4 allows unauthenticated users to upload backup files to the system. While signature validation is implemented,...
Quest KACE Systems Management Appliance 安全漏洞
Quest Software Quest KACE Systems Management Appliance is an IT asset management appliance from Quest Software, Inc. A security vulnerability exists in the Quest KACE Systems Management Appliance that stems from insufficient validation of backup file uploads, which could result in the upload of a...
Quest KACE Systems Management Appliance 14.1 Unauthenticated Backup Upload
Seralys Security Advisory - Quest KACE SMA allows unauthenticated users to upload backup files to the system. While signature validation is implemented, weaknesses in the validation process can be exploited to upload malicious backup content that could compromise system integrity. Version 14.1 is...
CVE-2025-32977
Quest KACE Systems Management Appliance SMA 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183, 14.0.x before 14.0.341 Patch 5, and 14.1.x before 14.1.101 Patch 4 allows unauthenticated users to upload backup files to the system. While signature validation is implemented,...
CVE-2025-24286
A vulnerability allowing an authenticated user with the Backup Operator role to modify backup jobs, which could execute arbitrary code...
The vulnerability of the QBRM library in the IBM Backup, Recovery, and Media Services (BRMS) operating system for IBM i allows a perpetrator to escalate their privileges and execute arbitrary code.
The vulnerability of the QBRM library in the IBM Backup, Recovery, and Media Services BRMS operating system involves deficiencies in access control. Exploiting this vulnerability allows an attacker to enhance their privileges and execute arbitrary code...
Security Bulletin: Vulnerabilities in Jinja , cryptography & OpenSSL can affect IBM Storage Protect Plus File Systems Agent Backup and Restore
Summary IBM Storage Protect Plus File Systems Agent Backup and Restore can be affected by vulnerabilities in Jinja & cryptography which includes execution of untrusted templates, man-in-middle attacks & a denial of service, as described by the CVEs in the "Vulnerability Details" section. These...
CVE-2025-24286
A vulnerability allowing an authenticated user with the Backup Operator role to modify backup jobs, which could execute arbitrary code...
CVE-2025-24286
A vulnerability allowing an authenticated user with the Backup Operator role to modify backup jobs, which could execute arbitrary code...
CVE-2025-23121
A vulnerability allowing remote code execution RCE on the Backup Server by an authenticated domain user...
CVE-2025-23121
A vulnerability allowing remote code execution RCE on the Backup Server by an authenticated domain user...
How to Upgrade the NATS Server Used by Veeam Backup for Microsoft 365
Purpose This article provides information about upgrading the NATS Server used by Veeam Backup for Microsoft 365. NATS Server Version Impact It is recommended that customers use the latest supported version of NATS Server with Veeam Backup for Microsoft 365 to avoid any potential performance...
CVE-2025-24286
A vulnerability allowing an authenticated user with the Backup Operator role to modify backup jobs, which could execute arbitrary code...
CVE-2025-24286
CVE-2025-24286 affects Veeam Backup & Replication (12.x) where an authenticated user with the Backup Operator role can modify backup jobs, potentially enabling arbitrary code execution. The Red Hat/NC SC engagement notes and other sources corroborate this as a vulnerability in the backup server t...
CVE-2025-24286
A vulnerability allowing an authenticated user with the Backup Operator role to modify backup jobs, which could execute arbitrary code...
CVE-2025-23121
CVE-2025-23121 affects Veeam Backup & Replication (Backup Server) with remote code execution achievable by an authenticated domain user on domain-joined servers. Public details consistently cite version pre-12.3.2.3617 as vulnerable; remediation is to upgrade to 12.3.2.3617 or newer. Multiple sou...