(Pwn2Own) Rockwell Automation FactoryTalk View SE Backup Missing Authentication for Critical Function Vulnerability

This vulnerability allows remote attackers to create arbitrary files on affected installations of Rockwell Automation FactoryTalk View SE. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of project backups. The issue results from lack of...

Veeam Backup & Replication — Cannot find any supported licenses for current product version.

Challenge When attempting to install a license into Veeam Backup & Replication, the following error occurs: Cannot find any supported licenses for current product version. Cause This error most often occurs when the license file being installed is for an older version of Veeam Backup & Replicatio...

Product update: Virtuozzo Hybrid Server 7.0 Update 14 (7.0.14-249)

The Update 14 for Virtuozzo Hybrid Server 7.0 introduces new features and provides stability and usability bug fixes. It also introduces a new kernel 3.10.0-1127.8.2.vz7.151.14. Vulnerability id: PSBM-103700 VM migration by a non-root user could fail. Vulnerability id: PSBM-102841 Misconfiguring...

Veeam Cloud Connect jobs fail with "Authentication failed because the remote party has closed the transport stream" error

Challenge After upgrade of Veeam Backup & Replication on the Veeam Cloud Connect service provider's backup server to version 10, tenant jobs may start failing with the following error: "Authentication failed because the remote party has closed the transport stream ". At the same time, the...

CVE-2020-9289

Use of a hard-coded cryptographic key to encrypt password data in CLI configuration in FortiManager 6.2.3 and below, FortiAnalyzer 6.2.3 and below may allow an attacker with access to the CLI configuration or the CLI backup file to decrypt the sensitive data, via knowledge of the hard-coded key...

CVE-2020-9289

Use of a hard-coded cryptographic key to encrypt password data in CLI configuration in FortiManager 6.2.3 and below, FortiAnalyzer 6.2.3 and below may allow an attacker with access to the CLI configuration or the CLI backup file to decrypt the sensitive data, via knowledge of the hard-coded key...

Veeam Backup for Microsoft 365 4c cumulative patch KB3194

IMPORTANT This patch is intended only for Veeam Backup for Microsoft 365 version 4c build 4.0.1.519. Requirements Please confirm you are running Veeam Backup for Microsoft 365 build 4.0.1.519 prior to installing this cumulative patch KB3194. You can check this under Help About in Veeam Backup for...

[SECURITY] Fedora 32 Update: pdns-recursor-4.3.1-1.fc32

PowerDNS Recursor is a non authoritative/recursing DNS server. Use this package if you need a dns cache for your network...

CVE-2020-0135

In dump of RollbackManagerServiceImpl.java, there is a possible backup metadata exposure due to a missing permission check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2020-0135

In dump of RollbackManagerServiceImpl.java, there is a possible backup metadata exposure due to a missing permission check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

Information disclosure

In dump of RollbackManagerServiceImpl.java, there is a possible backup metadata exposure due to a missing permission check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2020-0135

In dump of RollbackManagerServiceImpl.java, there is a possible backup metadata exposure due to a missing permission check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2020-0135

CVE-2020-0135 affects Android 10, where in RollbackManagerServiceImpl.java a missing permission check can cause backup metadata exposure, enabling local information disclosure with System privileges (no user interaction required). The issue is documented across multiple sources (NVD/Red Hat/PRION...

SAP Business One Information Disclosure Vulnerability (CNVD-2020-53124)

SAP Business One is a set of enterprise management software from SAP. The software includes functions such as financial management, operations management and human resource management. A security vulnerability exists in the backup service in SAP Business One versions 9.3 and 10.0. An attacker cou...

CVE-2020-6239

Under certain conditions SAP Business One Backup service, versions 9.3, 10.0, allows an attacker with admin permissions to view SYSTEM user password in clear text, leading to Information Disclosure...

CVE-2020-6239

Under certain conditions SAP Business One Backup service, versions 9.3, 10.0, allows an attacker with admin permissions to view SYSTEM user password in clear text, leading to Information Disclosure...

Microsoft Windows Backup Service Elevation of Privilege Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, U.S.A. Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Windows Backup Service is one of the backup service components. A privilege...

CVE-2020-1271

An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Backup Service Elevation of Privilege Vulnerability'...

CVE-2020-1271

An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Backup Service Elevation of Privilege Vulnerability'...

Privilege escalation

An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Backup Service Elevation of Privilege Vulnerability'...