Lucene search
+L

17868 matches found

CNNVD
CNNVD
•added 2024/05/02 12:00 a.m.•16 views

WordPress plugin Backup & Migration 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

4.3CVSS6.2AI score0.00491EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/02 12:00 a.m.•7 views

CVE-2024-3546: Missing Authorization

The WordPress Backup & Migration plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the wpmgdppopulatepopup function in all versions up to, and including, 1.4.8. This makes it possible for authenticated attackers, with subscriber access or above...

4.3CVSS5.9AI score0.00491EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2024/05/02 12:00 a.m.•39 views

Veritas Backup Exec Remote Agent 21.0.x, 21.1.x, 21,2.x, 21,3.x, 21.4.x, 22.0.x, 22.1.x, 22.2.x Multiple Vulnerabilities

The version of Vertias Backup Exec Remote Agent installed on the remote Windows host is 21.0.x, 21.1.x, 21,2.x, 21,3.x, 21.4.x, 22.0.x, 22.1.x or 22.2.x prior to 22.2 HotFix 917391. It is therefore affectewd by multiple vulnerabilities: - An issue was discovered in Veritas Backup Exec before 22.2...

7.8CVSS5.9AI score0.00167EPSS
SaveExploits0References3
NVD
NVD
•added 2024/05/01 7:15 a.m.•46 views

CVE-2024-23335

MyBB is a free and open source forum software. The backup management module of the Admin CP may accept .htaccess as the name of the backup file to be deleted, which may expose the stored backup files over HTTP on Apache servers. MyBB 1.8.38 resolves this issue. Users are advised to upgrade. There...

4.7CVSS4.7AI score0.00559EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2024/05/01 6:27 a.m.•47 views

CVE-2024-23335 Backups directory .htaccess deletion in. MyBB

MyBB is a free and open source forum software. The backup management module of the Admin CP may accept .htaccess as the name of the backup file to be deleted, which may expose the stored backup files over HTTP on Apache servers. MyBB 1.8.38 resolves this issue. Users are advised to upgrade. There...

4.7CVSS5AI score0.00559EPSS
SaveExploits0References3
Mend
Mend
•added 2024/05/01 6:27 a.m.•5 views

CVE-2024-23335

MyBB is a free and open source forum software. The backup management module of the Admin CP may accept ".htaccess" as the name of the backup file to be deleted, which may expose the stored backup files over HTTP on Apache servers. MyBB 1.8.38 resolves this issue. Users are advised to upgrade. The...

5.1CVSS0.00559EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2024/05/01 6:27 a.m.•20 views

CVE-2024-23335 Backups directory .htaccess deletion in. MyBB

MyBB is a free and open source forum software. The backup management module of the Admin CP may accept .htaccess as the name of the backup file to be deleted, which may expose the stored backup files over HTTP on Apache servers. MyBB 1.8.38 resolves this issue. Users are advised to upgrade. There...

4.7CVSS6.6AI score0.00559EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/05/01 12:00 a.m.•18 views

MyBB 安全漏洞

MyBB MyBulletinBoard is a free and web-based forum software developed by MYBB team using PHP and MySQL. The software is easy to use, multi-language support, scalable and so on. A security vulnerability exists in MyBB versions prior to 1.8.38, which stems from exposing stored backup files over HTT...

4.7CVSS6.5AI score0.00559EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2024/05/01 12:00 a.m.•24 views

PT-2024-19816 · Apache · Apache

Name of the Vulnerable Software and Affected Versions: MyBB versions prior to 1.8.38 Description: The backup management module of the Admin CP in MyBB may accept .htaccess as the name of the backup file to be deleted, potentially exposing stored backup files over HTTP on Apache servers...

4.7CVSS6.1AI score0.00559EPSS
SaveExploits0References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/01 12:00 a.m.•5 views

CVE-2024-23335: Improper Input Validation

MyBB is a free and open source forum software. The backup management module of the Admin CP may accept .htaccess as the name of the backup file to be deleted, which may expose the stored backup files over HTTP on Apache servers. MyBB 1.8.38 resolves this issue. Users are advised to upgrade. There...

4.7CVSS5.8AI score0.00559EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/04/29 12:00 a.m.•16 views

PT-2024-9769 · Directadmin +3 · Directadmin +5

Name of the Vulnerable Software and Affected Versions: Acronis Backup plugin for cPanel & WHM Linux versions before build 818 Acronis Backup extension for Plesk Linux versions before build 599 Acronis Backup plugin for DirectAdmin Linux versions before build 181 Description: The issue is related ...

5.5CVSS7.4AI score0.00197EPSS
SaveExploits0References9
Patchstack
Patchstack
•added 2024/04/26 9:40 a.m.•8 views

WordPress Backup Migration plugin <= 1.4.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Plugin Backup Migration versions = 1.4.1...

7AI score0.00208EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2024/04/26 2:15 a.m.•43 views

CVE-2024-33673

An issue was discovered in Veritas Backup Exec before 22.2 HotFix 917391. Improper access controls allow for DLL Hijacking in the Windows DLL Search path...

7.8CVSS7.7AI score0.00156EPSS
SaveExploits0References1
OSV
OSV
•added 2024/04/26 2:15 a.m.•24 views

CVE-2024-33671

An issue was discovered in Veritas Backup Exec before 22.2 HotFix 917391. The Backup Exec Deduplication Multi-threaded Streaming Agent can be leveraged to perform arbitrary file deletion on protected files...

7.1CVSS5.9AI score0.00167EPSS
SaveExploits0References1
NVD
NVD
•added 2024/04/26 2:15 a.m.•40 views

CVE-2024-33671

An issue was discovered in Veritas Backup Exec before 22.2 HotFix 917391. The Backup Exec Deduplication Multi-threaded Streaming Agent can be leveraged to perform arbitrary file deletion on protected files...

7.7CVSS7.6AI score0.00167EPSS
SaveExploits0References1
OSV
OSV
•added 2024/04/26 2:15 a.m.•19 views

CVE-2024-33673

An issue was discovered in Veritas Backup Exec before 22.2 HotFix 917391. Improper access controls allow for DLL Hijacking in the Windows DLL Search path...

7.8CVSS5.8AI score0.00156EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/04/26 12:00 a.m.•21 views

Veritas Technologies Backup Exec 安全漏洞

Veritas Technologies Backup Exec is a powerful suite of data backup recovery tools from Veritas Technologies, USA. With a web-based management console and an intuitive graphical user interface with easy-to-use wizards, the software simplifies the installation process and improves manageability...

7.8CVSS6.6AI score0.00156EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2024/04/26 12:00 a.m.•25 views

WordPress WP STAGING – Backup Duplicator & Migration Plugin <= 3.4.3 is vulnerable to Sensitive Data Exposure

Software WP STAGING – Backup Duplicator & Migration Type Plugin Vulnerable versions = 3.4.3 Fixed in 3.5.0 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-3682 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID cd3d491b3da7 Credits...

5.3CVSS5.2AI score0.00581EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2024/04/26 12:00 a.m.•44 views

CVE-2024-33671

An issue was discovered in Veritas Backup Exec before 22.2 HotFix 917391. The Backup Exec Deduplication Multi-threaded Streaming Agent can be leveraged to perform arbitrary file deletion on protected files...

7.7CVSS7.8AI score0.00167EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/04/26 12:00 a.m.•23 views

PT-2024-25431 · Veritas · Veritas Backup Exec

Name of the Vulnerable Software and Affected Versions: Veritas Backup Exec versions prior to 22.2 HotFix 917391 Description: An issue was discovered that allows for DLL Hijacking in the Windows DLL Search path due to improper access controls. Recommendations: For versions prior to 22.2 HotFix...

7.8CVSS7.2AI score0.00156EPSS
SaveExploits0References2
Rows per page
Query Builder