(0Day) Lepide Active Directory Self Service Backup Missing Authentication Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Lepide Active Directory Self Service. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of backup functionality. The issue results fro...

Percona XtraBackup 安全漏洞

Percona XtraBackup is an open source hot backup utility for MySQL databases from Percona, USA. A security vulnerability exists in Percona XtraBackup, no information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor's announcement...

Monthly License Usage report is not generated when using Veeam Backup Enterprise Manager in the Veeam Cloud Connect infrastructure

This issue is fixed in thePatch 2 Challenge Monthly Licensing Report generation fails with "ReportingJob task error: System.ArgumentException: An item with the same key has already been added. " error if there is Veeam Backup Enterprise Manager in the Veeam Cloud Connect infrastructure. Solution ...

CVE-2020-35454

The Taidii Diibear Android application 2.4.0 and all its derivatives allow attackers to obtain user credentials from an Android backup because of insecure application configuration...

CVE-2020-35454

The Taidii Diibear Android application 2.4.0 and all its derivatives allow attackers to obtain user credentials from an Android backup because of insecure application configuration...

Design/Logic Flaw

The Taidii Diibear Android application 2.4.0 and all its derivatives allow attackers to obtain user credentials from an Android backup because of insecure application configuration...

CVE-2020-35454

The Taidii Diibear Android application 2.4.0 and all its derivatives allow attackers to obtain user credentials from an Android backup because of insecure application configuration...

Grav Path Traversal Vulnerability

Grav is a flat file CMS that uses Markdown files for content management. A path traversal vulnerability exists in the backup feature of Grav 1.7.0-rc.17 and earlier versions. An attacker can exploit this vulnerability to read arbitrary local files on the underlying server...

Managed Veeam Backup Agents are offline after Veeam Service Provider Console upgrade

Challenge After upgrading Veeam Service Provider Console, all Veeam Management Agents are listed as offline. Cause This may be caused by an incorrect security certificate configuration, which leads to the disconnection of the management agent on the Veeam Cloud Connect server after the upgrade. S...

USN-4871-1: targetcli-fb vulnerabilities

It was discovered that targetcli-fb did not properly manage socket permissions. A local attacker could use this issue to modify the iSCSI configuration resulting in a denial of service, obtain sensitive information or execute arbitrary code. CVE-2020-10699 It was discovered that targetcli-fb did...

CVE-2020-29556

The Backup functionality in Grav CMS through 1.7.0-rc.17 allows an authenticated attacker to read arbitrary local files on the underlying server by exploiting a path-traversal technique. This vulnerability can also be exploited by an unauthenticated attacker due to a lack of CSRF protection...

Path traversal

The Backup functionality in Grav CMS through 1.7.0-rc.17 allows an authenticated attacker to read arbitrary local files on the underlying server by exploiting a path-traversal technique. This vulnerability can also be exploited by an unauthenticated attacker due to a lack of CSRF protection...

CVE-2020-29556

CVE-2020-29556 (Grav CMS) : The Backup functionality in Grav CMS up to 1.7.0-rc.17 enables an attacker to read arbitrary local files on the server via path traversal. The issue can be exploited by an unauthenticated attacker due to missing CSRF protection. This is supported by Red Hat and vulnera...

CVE-2020-29556

The Backup functionality in Grav CMS through 1.7.0-rc.17 allows an authenticated attacker to read arbitrary local files on the underlying server by exploiting a path-traversal technique. This vulnerability can also be exploited by an unauthenticated attacker due to a lack of CSRF protection...

Grav 路径遍历漏洞

Grav is a flat file CMS that uses Markdown files for content management. A path traversal vulnerability exists in the backup feature of Grav 1.7.0-rc.17 and earlier versions. An attacker can exploit this vulnerability to read arbitrary local files on the underlying server...

Release Information for DataCore Plug-In for Veeam Backup & Replication

This plug-in leverages the Veeam Universal Storage API, which enables storage OEMs to allow Veeam Backup & Replication integration to the arrays for backup and replication jobs. Requirements Before installing DataCore Plug-In v1.2.2, ensure that you are running Veeam Backup & Replication 12.3.0.3...

Release Information for Everpure FlashArray Plug-In for Veeam Backup & Replication

This plug-in leverages the Veeam Universal Storage API, which enables storage OEMs to allow Veeam Backup & Replication integration to the arrays for backup and replication jobs. Requirements Before installing Everpure FlashArray Plug-In v2.2.331, ensure that you are running Veeam Backup &...

VM Backups <= 1.0 - CSRF to Database Backup Download

The plugin does not have CSRF checks, allowing attackers to make a logged in user unwanted actions, such as generate backups of the DB, plugins, and current theme. The files will be created in the uploads directory by default, with a timestamp in their filenames, without any access restriction,...

VM Backups <= 1.0 - CSRF to Database Backup Download

The plugin does not have CSRF checks, allowing attackers to make a logged in user unwanted actions, such as generate backups of the DB, plugins, and current theme. The files will be created in the uploads directory by default, with a timestamp in their filenames, without any access restriction,...

Release Notes for Veeam Backup & Replication 11 Cumulative Patches

More Recent Version Available Please find the latest version of Veeam Backup & Replication here: Veeam Downloads - Latest Version Requirements Please confirm that you are running V11 GA build 11.0.0.837 of any earlier patch level prior to installing this update. You can check this under Help |...