CVE-2020-36167

An issue was discovered in the server in Veritas Backup Exec through 16.2, 20.6 before hotfix 298543, and 21.1 before hotfix 657517. On start-up, it loads the OpenSSL library from the Installation folder. This library in turn attempts to load the /usr/local/ssl/openssl.cnf configuration file, whi...

CVE-2020-36159

Veritas Desktop and Laptop Option DLO before 9.5 disclosed operational information on the backup processing status through a URL that did not require authentication...

CVE-2020-36159

Veritas Desktop and Laptop Option DLO before 9.5 disclosed operational information on the backup processing status through a URL that did not require authentication...

CVE-2020-36159

Veritas Desktop and Laptop Option DLO before 9.5 disclosed operational information on the backup processing status through a URL that did not require authentication...

Authentication flaw

Veritas Desktop and Laptop Option DLO before 9.5 disclosed operational information on the backup processing status through a URL that did not require authentication...

CVE-2020-36159

Veritas DLO (Desktop and Laptop Option) affected versions prior to 9.5 expose backup processing status via an unauthenticated URL, enabling information disclosure with partial confidentiality impact (per CVSS notes). The available sources (NVD/Red Hat advisory and CVE records) indicate no explici...

CVE-2020-36159

Veritas Desktop and Laptop Option DLO before 9.5 disclosed operational information on the backup processing status through a URL that did not require authentication...

Veritas Backup Exec Code Issue Vulnerability

Veritas Technologies Veritas Backup Exec is a powerful suite of data backup and recovery tools from Veritas Technologies. With a web-based management console and an intuitive graphical user interface with easy-to-use wizards, the software simplifies installation and improves manageability...

Veritas Desktop and Laptop Option Information Disclosure Vulnerability

Veritas Desktop and Laptop Option is a software from Veritas, USA that provides data backup and endpoint protection features for Windows and Mac desktop and laptop computers. The software supports network-less protection, instant backup, customized failover, self-service restore, and other...

CVE-2020-35948

An issue was discovered in the XCloner Backup and Restore plugin before 4.2.13 for WordPress. It gave authenticated attackers the ability to modify arbitrary files, including PHP files. Doing so would allow an attacker to achieve remote code execution. The xclonerrestore.php writefileaction could...

CVE-2020-35948

An issue was discovered in the XCloner Backup and Restore plugin before 4.2.13 for WordPress. It gave authenticated attackers the ability to modify arbitrary files, including PHP files. Doing so would allow an attacker to achieve remote code execution. The xclonerrestore.php writefileaction could...

CVE-2020-35950

An issue was discovered in the XCloner Backup and Restore plugin before 4.2.153 for WordPress. It allows CSRF via almost any endpoint...

Cross site request forgery (csrf)

An issue was discovered in the XCloner Backup and Restore plugin before 4.2.153 for WordPress. It allows CSRF via almost any endpoint...

Remote code execution

An issue was discovered in the XCloner Backup and Restore plugin before 4.2.13 for WordPress. It gave authenticated attackers the ability to modify arbitrary files, including PHP files. Doing so would allow an attacker to achieve remote code execution. The xclonerrestore.php writefileaction could...

CVE-2020-35948

The CVE-2020-35948 issue affects the WordPress plugin XCloner Backup and Restore (versions prior to 4.2.13). The root cause is an insecure write_file_action in xcloner_restore.php that can overwrite files (e.g., wp-config.php), enabling authenticated attackers to modify arbitrary files and achiev...

CVE-2020-35948

An issue was discovered in the XCloner Backup and Restore plugin before 4.2.13 for WordPress. It gave authenticated attackers the ability to modify arbitrary files, including PHP files. Doing so would allow an attacker to achieve remote code execution. The xclonerrestore.php writefileaction could...

CVE-2020-35950

CVE-2020-35950 affects the WordPress plugin “XCloner Backup and Restore” prior to version 4.2.153. The issue is a Cross-Site Request Forgery (CSRF) vulnerability that can be triggered via almost any endpoint. The available connected sources specify the affected product (XCloner Backup and Restore...

WordPress XCloner Backup and Restore plugin security vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A security vulnerability exists in the XCloner Backup and Restore plugin before 4.2.13 for WordPress...

WordPress XCloner Backup and Restore plugin 跨站请求伪造漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site request forgery vulnerability exists in WordPress XCloner Backup and Restore plugin...

The vulnerability of the Windows Backup Engine Elevation component of the operating system allows a hacker to escalate their privileges.

The vulnerability of the Windows Backup Engine Elevation component of the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...