Lucene search
+L

18051 matches found

Tenable Nessus
Tenable Nessus
•added 2022/12/19 12:00 a.m.•14 views

Veeam Backup And Replication Installed (Windows)

Binary data veeambackupandreplicationwininstalled.nbin...

7.3AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/12/19 12:00 a.m.•22 views

PT-2022-17905 · Undefined · Undefined

ParsedReport 19-12-2022 Veeam Fixes Critical Vulnerabilities in Backup & Replication Software CVE-2022-26500 & CVE-2022-26501 https://socradar.io/veeam-fixes-critical-vulnerabilities-in-backup-replication-software-cve-2022-26500-cve-2022-26501 Threats: Monti Yanluowang Empire loader CVEs:...

10CVSS9.2AI score0.05828EPSS
SaveExploits0References1
The Hacker News
The Hacker News
•added 2022/12/16 5:45 a.m.•144 views

CISA Alert: Veeam Backup and Replication Vulnerabilities Being Exploited in Attacks

The U.S. Cybersecurity and Infrastructure Security Agency CISA has added two vulnerabilities impacting Veeam Backup & Replication software to its Known Exploited Vulnerabilities KEV Catalog, citing evidence of active exploitation in the wild. The now-patched critical flaws, tracked as...

10CVSS1.9AI score0.05828EPSS
SaveExploits0
Veeam
Veeam
•added 2022/12/16 12:00 a.m.•319 views

Feature Deprecation: "Transform previous backup chains into rollbacks"

Prepare for Veeam Backup & Replication 12 This article concerns a feature that will be fully deprecated in Veeam Backup & Replication 12. This article documents how to identify if this feature is in use and how to phase out this feature to ensure the existing Veeam Backup & Replication deployment...

7.1AI score
SaveExploits0
zdt
zdt
•added 2022/12/15 12:00 a.m.•256 views

Syncovery For Linux Web-GUI Authenticated Remote Command Execution Exploit

This Metasploit module exploits an authenticated command injection vulnerability in the Web GUI of Syncovery File Sync and Backup Software for Linux. Successful exploitation results in remote code execution under the context of the root user. Syncovery allows an authenticated user to create jobs,...

8.8CVSS9.2AI score0.52085EPSS
SaveExploits4
Citrix
Citrix
•added 2022/12/14 12:00 a.m.•21 views

Driver Disk for Microsemi smartpqi 2.1.20-035 - For Citrix Hypervisor 8.2 LTSR

Who Should Install this Driver Disk? Customers running the Citrix Hypervisor 8.2 LTSR release who use Microsemi's smartpqi driver and wish to use the latest version of the following: Driver Module| Version ---|--- smartpqi| 2.1.20-035 Issues Resolved In this Driver Disk Includes general...

7AI score
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
•added 2022/12/13 3:58 p.m.•37 views

Security Bulletin: Vulnerability in OAuthlib affects IBM Spectrum Protect Plus Container backup and restore for Kubernetes and OpenShift (CVE-2022-36087)

Summary Denial of service vulnerability in OAuthlib may affect IBM Spectrum Protect Plus Container backup and restore for Kubernetes and OpenShift. Vulnerability Details CVEID:CVE-2022-36087 DESCRIPTION: OAuthlib is vulnerable to a denial of service, caused by improper input validation. By sendin...

6.5CVSS5.9AI score0.01672EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2022/12/13 3:56 p.m.•86 views

Security Bulletin: Vulnerabilities in Redis affect IBM Spectrum Protect Plus Container backup and restore for Kubernetes and OpenShift (CVE-2022-24736, CVE-2022-24735)

Summary Vulnerabilities in Redis, such as denial of service and execution of arbitrary code on the system, may affect IBM Spectrum Protect Plus Container backup and restore for Kubernetes and OpenShift. Vulnerability Details CVEID:CVE-2022-24736 DESCRIPTION: Redis is vulnerable to a denial of...

7.8CVSS7.2AI score0.02264EPSS
SaveExploits2Affected Software1
CISA KEV Catalog
CISA KEV Catalog
•added 2022/12/13 12:00 a.m.•128 views

Veeam Backup & Replication Remote Code Execution Vulnerability

The Veeam Distribution Service in the Backup & Replication application allows unauthenticated users to access internal API functions. A remote attacker can send input to the internal API which may lead to uploading and executing of malicious code...

8.8CVSS7.2AI score0.05828EPSS
SaveIn wildExploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2022/12/13 12:00 a.m.•182 views

Veeam Backup & Replication Remote Code Execution Vulnerability

The Veeam Distribution Service in the Backup & Replication application allows unauthenticated users to access internal API functions. A remote attacker can send input to the internal API which may lead to uploading and executing of malicious code...

10CVSS7.2AI score0.04104EPSS
SaveIn wildExploits0
CNNVD
CNNVD
•added 2022/12/13 12:00 a.m.•17 views

Gym Management System Cross-Site Request Forgery Vulnerability

Gym Management System is a gym management system. The system is developed in C and sql server and features customer and supplier management, product management, sales management, gym membership management, fitness assessment, system logging, database backup and restore. A security vulnerability...

4.5CVSS4.9AI score0.00331EPSS
SaveExploits1References2
NVD
NVD
•added 2022/12/12 3:15 a.m.•36 views

CVE-2022-45227

The web portal of Dragino Lora LG01 18ed40 IoT v4.3.4 has the directory listing at the URL https://10.10.20.74/lib/. This address has a backup file which can be downloaded without any authentication...

7.5CVSS0.00752EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2022/12/12 3:15 a.m.•19 views

CVE-2022-45227

The web portal of Dragino Lora LG01 18ed40 IoT v4.3.4 has the directory listing at the URL https://10.10.20.74/lib/. This address has a backup file which can be downloaded without any authentication...

7.5CVSS5.8AI score0.00752EPSS
SaveExploits1References1
Prion
Prion
•added 2022/12/12 3:15 a.m.•37 views

Authentication flaw

The web portal of Dragino Lora LG01 18ed40 IoT v4.3.4 has the directory listing at the URL https://10.10.20.74/lib/. This address has a backup file which can be downloaded without any authentication...

5CVSS7.5AI score0.00752EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2022/12/12 12:00 a.m.•42 views

CVE-2022-45227

The web portal of Dragino Lora LG01 18ed40 IoT v4.3.4 has the directory listing at the URL https://10.10.20.74/lib/. This address has a backup file which can be downloaded without any authentication...

7.7AI score0.00752EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2022/12/12 12:00 a.m.•9 views

CVE-2022-45227

The web portal of Dragino Lora LG01 18ed40 IoT v4.3.4 has the directory listing at the URL https://10.10.20.74/lib/. This address has a backup file which can be downloaded without any authentication...

7.5AI score0.00752EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/12 12:00 a.m.•8 views

CVE-2022-45227: Files or Directories Accessible to External Parties

The web portal of Dragino Lora LG01 18ed40 IoT v4.3.4 has the directory listing at the URL https://10.10.20.74/lib/. This address has a backup file which can be downloaded without any authentication...

7.5CVSS5.8AI score0.00752EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2022/12/12 12:00 a.m.•19 views

Dragino Lora LG01 18ed40 IoT security vulnerabilities

Dragino Lora LG01 18ed40 IoT is a gateway portal from Dragino. A security vulnerability exists in Dragino Lora LG01 18ed40 IoT v4.3.4, which stems from the portal having a directory listing at the URL https://10.10.20.74/lib/, which has a backup file that can be downloaded without any...

7.5CVSS7.3AI score0.00752EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/12/12 12:00 a.m.•21 views

PT-2022-27446 · Dragino · Dragino Lora Lg01

Name of the Vulnerable Software and Affected Versions: Dragino Lora LG01 18ed40 IoT version 4.3.4 Description: The web portal of the affected device has a directory listing at the URL "https://10.10.20.74/lib/". This directory contains a backup file that can be downloaded without any...

7.5CVSS7.5AI score0.00752EPSS
SaveExploits1References4
IBM Security Bulletins
IBM Security Bulletins
•added 2022/12/10 12:19 a.m.•46 views

Security Bulletin: Vulnerabilities in IBM WebSphere Application Server Liberty, FasterXML jackson-databind, and Zlib affect IBM Spectrum Protect Backup-Archive Client (CVE-2022-34165, CVE-2022-42003, CVE-2022-42004, CVE-2018-25032)

Summary IBM Spectrum Protect Backup-Archive Client can be affected by vulnerabilities in IBM WebSphere Application Server Liberty, FasterXML jackson-databind, and Zlib. Vulnerabilities include HTTP header injection and denial of service, as described by the CVEs in the "Vulnerability Details"...

7.5CVSS7.6AI score0.51733EPSS
SaveExploits4Affected Software1
Rows per page
Query Builder