SQL Plugin Job Fails with Error: "Mandatory arguments not set" or "Starting retention policy task"

Challenge After the upgrade or installation of the patch for Veeam Backup & Replication 12.3.2.4165, existing Veeam Plug-In for Microsoft SQL jobs fail with the following error: Failed to backup database. Error: Mandatory arguments not set Session failed: Mandatory arguments not set. Starting...

Vulnerabilities fixed in Veeam Backup & Replication

Veeam has fixed vulnerabilities in Veeam Backup & Replication. The vulnerabilities are in Veeam Backup & Replication's Mount service and Backup Server, both of which are vulnerable to remote code execution RCE by authenticated domain users. This can lead to unauthorized access and manipulation of...

EUVD-2024-55036

Huijietong Cloud Video Platform contains a path traversal vulnerability that allows an unauthenticated attacker can supply arbitrary file paths to the fullPath parameter of the /fileDownload?action=downloadBackupFile endpoint and retrieve files from the server filesystem. VulnCheck has observed...

HuiJieTong Cloud Video Platform 安全漏洞

HuiJieTong Cloud Video Platform is a cloud video platform from China-based HuiJieTong. A security vulnerability exists in HuiJieTong Cloud Video Platform, which can be exploited by an unauthenticated attacker to provide an arbitrary file path to the fullPath parameter of the...

The vulnerability of the RestAPI interface of the data protection software through backup with PowerProtect DataDomain, a data protection software in the corporate environment using cloud technologies like APEX Protection Storage, the PowerProtect DD Virtual Edition data protection platform, and the DataDomain OS operating system, allows unauthorized access to the compromised system by attackers.

The vulnerability of the RestAPI interface of the data protection software through backup using PowerProtect Data Domain, the data protection software in the corporate environment using cloud technologies like APEX Protection Storage, the PowerProtect DD Virtual Edition data protection platform,...

Vulnerabilities of data protection software through PowerProtect Data Domain backup, data protection software for corporate environments using cloud technologies APEX Protection Storage, PowerProtect DD Virtual Edition data protection platform, PowerProtect Data Domain Management Center for centralized management of data storage systems, Data Domain OS – an operating system related to the implementation or modification of arguments, allowing attackers to execute arbitrary commands and enhance their privileges.

The vulnerabilities of the data protection software through PowerProtect Data Domain backup, the data protection software for corporate environments using cloud technologies like APEX Protection Storage, the PowerProtect DD Virtual Edition data protection platform, and the PowerProtect Data Domai...

The vulnerability of the DDSH CLI command-line interface of the data protection software, through backup with PowerProtect Data Domain; the data protection software for corporate environments using cloud technologies, such as APEX Protection Storage; the PowerProtect DD Virtual Edition data protection platform; the PowerProtect Data Domain Management Center, a software tool for centralized management of Data Domain storage systems; and the Data Domain OS operating system, which allows attackers to trigger service interruptions.

The vulnerability of the DDSH CLI command-line interface of the data protection software lies in the fact that it relies on buffer overflow attacks within memory. This vulnerability can be exploited by attackers to cause service failures...

Vulnerabilities Resolved in Veeam Backup & Replication 12.3.2.4165 Patch

All vulnerabilities documented in this article were resolved in Veeam Backup & Replication 12.3.2.4165 Patch. Veeam Product Latest Version Download Page Veeam Software Security Commitment Veeam® is committed to ensuring its products protect customers from potential risks. As part of that...

Virtuozzo Hybrid Infrastructure 6.3 Update 1 Hotfix 3 (6.3.1-133)

This update provides stability fixes and support for cumulative updates. Clusters running version 6.3.1 or later can now upgrade directly to the latest available version in a single step. Vulnerability id: VSTOR-105770 A stability fix for vstorage-mount. Vulnerability id: VSTOR-104585, VSTOR-1065...

Virtuozzo Hybrid Infrastructure 6.2 Update 1 Hotfix 7 (6.2.1-97)

This update provides stability fixes and support for cumulative updates. Clusters running version 6.2.1 or later can now upgrade directly to the latest available version in a single step. Vulnerability id: VSTOR-91715 Failed to retry updating the kernel. Vulnerability id: VSTOR-93149, VSTOR-10082...

Microsoft Windows BitLocker 安全漏洞

Microsoft Windows BitLocker is a Microsoft Corporation USA BitLocker Ensure secure backup of recovery keys before activating protection. A security vulnerability exists in Microsoft Windows BitLocker that originates from an attacker's ability to bypass certain features by exploiting the...

Vulnerabilities of data protection software through PowerProtect Data Domain backup, data protection software for corporate environments using cloud technologies APEX Protection Storage, PowerProtect DD Virtual Edition data protection platform, PowerProtect Data Domain Management Center – software for centralized management of data storage systems, Data Domain OS – operating system related to the lack of measures to neutralize special elements, allowing attackers to execute arbitrary commands.

The vulnerability of the data protection software through backup using PowerProtect Data Domain, the data protection software in the corporate environment using cloud technologies like APEX Protection Storage, the PowerProtect DD Virtual Edition data protection platform, and the PowerProtect Data...

WordPress Backup Bolt plugin Arbitrary File Download Vulnerability

WordPress Backup Bolt plugin is a backup plugin for WordPress websites, mainly used to automate the backup of website data including files, databases, etc., and support the recovery function. WordPress Backup Bolt plugin has an arbitrary file download vulnerability, which stems from a flaw in the...

CVE-2025-11380

The Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'everestprocessstatus' AJAX action in all versions up to, and including, 2.3.5. This makes it possible for...

Experts Warn of Widespread SonicWall VPN Compromise Impacting Over 100 Accounts

Cybersecurity company Huntress on Friday warned of "widespread compromise" of SonicWall SSL VPN devices to access multiple customer environments. "Threat actors are authenticating into multiple accounts rapidly across compromised devices," it said. "The speed and scale of these attacks imply that...

CVE-2025-21060

Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access backup data from applications. User interaction is required for triggering this vulnerability...

EUVD-2025-33805

The Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'everestprocessstatus' AJAX action in all versions up to, and including, 2.3.5. This makes it possible for...

CVE-2025-11380

The Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'everestprocessstatus' AJAX action in all versions up to, and including, 2.3.5. This makes it possible for...

CVE-2025-11380 Everest Backup <= 2.3.5 - Missing Authorization to Unauthenticated Information Exposure

The Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'everestprocessstatus' AJAX action in all versions up to, and including, 2.3.5. This makes it possible for...

CVE-2025-11380

CVE-2025-11380 affects the Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin. Public details in connected docs confirm a missing capability check on the AJAX action named ‘everest_process_status’ that can allow unauthenticated attackers to discover backup file locations...