CVE-2021-24079

Windows Backup Engine Information Disclosure Vulnerability...

Information disclosure

Windows Backup Engine Information Disclosure Vulnerability...

CVE-2021-24079 Windows Backup Engine Information Disclosure Vulnerability

...

CVE-2021-24079

CVE-2021-24079 is a Windows security vulnerability described as a Windows Backup Engine Information Disclosure Vulnerability. Connected sources show a CVSSv3.1 base score of 5.5 (LOCAL, LOW attack complexity, LOW privileges required, NONE user interaction) with a Confidentiality impact of HIGH an...

Dell EMC Avamar Server Authorization Issues Vulnerability

DELL Dell EMC Avamar Server is a suite of fully virtualized backup and recovery software for servers from Dell USA. An authorization issue vulnerability exists in Dell EMC Avamar Server, which arises from a lack of authentication measures or insufficient authentication strength in a networked...

Release Information for Veeam Backup for Microsoft Azure v2

Requirements You can check your build number under Configuration | Support Information | About | Server version by clicking the gear icon at the top-right corner of the main menu in Veeam Backup for Microsoft Azure. After installing, your build number will be 2.0.0.303. What's New Veeam Backup fo...

Release information for Veeam Backup & Replication 11

Requirements IMPORTANT NOTE: If you are using a cloud repository or cloud host powered by Veeam Cloud Connect, please contact your service provider to confirm that you can upgrade to Veeam Backup & Replication 11. Please confirm that you are running version 9.5 Update 4b build 9.5.4.2866 or later...

The vulnerability of the Backup Engine component for Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Backup Engine component for Windows operating systems lies in the lack of protection for service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

SQL Injection Vulnerability in Backup Management Server of Hangzhou Hikvision Digital Technology Co.

Hikvision is a video-centric IoT solution provider, offering integrated security, smart business and big data services. A SQL injection vulnerability exists in the backup management server of Hangzhou Hikvision Digital Technology Co. Ltd, which can be exploited by attackers to obtain sensitive...

CVE-2020-36248

The ownCloud application before 2.15 for Android allows attackers to use adb to include a PIN preferences value in a backup archive, and consequently bypass the PIN lock feature by restoring from this archive...

CVE-2020-36248

The ownCloud application before 2.15 for Android allows attackers to use adb to include a PIN preferences value in a backup archive, and consequently bypass the PIN lock feature by restoring from this archive...

Design/Logic Flaw

The ownCloud application before 2.15 for Android allows attackers to use adb to include a PIN preferences value in a backup archive, and consequently bypass the PIN lock feature by restoring from this archive...

Owncloud ownCloud 权限许可和访问控制问题漏洞

OwnCloud OwnCloud is a personal cloud storage solution from OwnCloud Owncloud, an American company. OwnCloud has a permission and access control issue vulnerability that can be exploited by an attacker to bypass the PIN locking feature by making a restore from this archive, using adb to include t...

WordPress Backup Guard plugin <= 1.5.9 - Authenticated Arbitrary File Upload vulnerability

Authenticated Arbitrary File Upload vulnerability found by Nguyen Van Khanh in WordPress Backup Guard plugin versions = 1.5.9. Solution Update the WordPress Backup Guard plugin to the latest available version at least 1.6.0...

Backup Guard < 1.6.0 - Authenticated Arbitrary File Upload

The plugin did not ensure that the imported files are of the SGBP format and extension, allowing high privilege users admin+ to upload arbitrary files, including PHP ones, leading to RCE. Additional Info, and Bypass of .htaccess protection found by WPScanTeam, while confirming the issue: There is...

Backup Guard < 1.6.0 - Authenticated Arbitrary File Upload

The plugin did not ensure that the imported files are of the SGBP format and extension, allowing high privilege users admin+ to upload arbitrary files, including PHP ones, leading to RCE. Additional Info, and Bypass of .htaccess protection found by WPScanTeam, while confirming the issue: There is...

Build Numbers and Versions of Veeam Backup for Microsoft 365

This KB article lists all versions of Veeam Backup for Microsoft 365 and their respective build numbers. For more information on downloading the latest version of Veeam Backup for Microsoft 365, visit: Veeam Backup for Microsoft 365 -- Current Version Download Page Veeam Backup for Microsoft 365 ...

Arbitrary File Write

microweber is vulnerable to arbitrary file write. The vulnerability exists because a user with administrative level privilege can write files via the backup restore feature by uploading a malicious constructed ZIP file with file paths including relative paths i.e., ../../, moving this file into t...

CVE-2021-21511

Dell EMC Avamar Server, versions 19.3 and 19.4 contain an Improper Authorization vulnerability in the web UI. A remote low privileged attacker could potentially exploit this vulnerability, to gain unauthorized read or modification access to other users' backup data...

CVE-2021-21511

Dell EMC Avamar Server, versions 19.3 and 19.4 contain an Improper Authorization vulnerability in the web UI. A remote low privileged attacker could potentially exploit this vulnerability, to gain unauthorized read or modification access to other users' backup data...