WordPress Plugin Backup Scheduler Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

WordPress Backup Scheduler plugin <= 1.5.13 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability discovered by Lana Codes in WordPress Backup Scheduler plugin versions = 1.5.13. Solution Deactivate and delete. This plugin has been closed as of September 19, 2022 and is not available for download. This closure is temporary, pending a full review...

PT-2022-24189 · WordPress · Backup Scheduler

Name of the Vulnerable Software and Affected Versions: Backup Scheduler plugin versions = 1.5.13 at WordPress. Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing unintended actions on the web...

CVE-2022-38079: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability Backup Scheduler plugin = 1.5.13 at WordPress...

Security Bulletin: IBM Maximo Asset Management contains a misconfiguration that could allow an authenticated user to view backup and debug application files which could contain sensitive information (CVE-2015-4965)

Summary IBM Maximo Asset Management configuration allows an authenticated user to view backup and debug application files. This vulnerability could allow a local attacker to obtain sensitive information. The vulnerability affects Maximo Asset Management, Maximo Asset Management Essentials, Maximo...

Build Numbers and Versions of Veeam Plug-In for Microsoft Azure

This KB article lists all versions of the Veeam Plug-In for Microsoft Azure and their respective plug-in and appliance build numbers. Version | Plug-In Build | Appliance Build | Release Date | Release Notes ---|---|---|---|--- Veeam Plug-In for Microsoft Azure 9 Releases Veeam Plug-In for Microso...

Build Numbers and Versions of Veeam Plug-In for AWS

This KB article lists all versions of the Veeam Plug-In for AWS and their respective plug-in and appliance build numbers. Version | Plug-In Build | Appliance Build | Release Date | Release Notes ---|---|---|---|--- Veeam Plug-In for AWS 11 Releases Veeam Plug-In for AWS 11 Included with Veeam...

Build Numbers and Versions of Veeam Plug-In for Google Cloud

This KB article lists all versions of the Veeam Plug-In for Google Cloud and their respective plug-in and appliance build numbers. Version | Plug-In Build | Appliance Build | Release Date | Release Notes ---|---|---|---|--- Veeam Plug-In for Google Cloud 8 Releases Veeam Plug-In for Google Cloud ...

Ahsay Systems Cloud Backup Suite parameter injection vulnerability

Ahsay Systems Cloud Backup Suite is a centralized cloud backup solution from Ahsay Systems in Hong Kong, China. The product supports features such as database backup and physical server backup. A parameter injection vulnerability exists in Ahsay Systems Cloud Backup Suite version 9.1.4.0. An...

Syncovery Login Session Token Decode Privilege Increase

The vulnerability of the Login component in the postapplogin.php file is related to the possibility of decoding the session token of the Syncovery backup tool. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

Citrix Endpoint Management (aka XenMobile Server) 10.14.0 Rolling Patch 8

Package name: xms10.14.0.10813.bin For: XenMobile Server 10.14.0 Deployment type: On-premises only Replaces: xms10.14.0.10742.bin, xms10.14.0.10628.bin, xms10.14.0.10521.bin, xms10.14.0.10424.bin, xms10.14.0.10303.bin, xms10.14.0.10206.bin, and xms10.14.0.10118.bin. Date: September 2022 Languages...

WordPress Migration, Backup, Staging - WPvivid Plugin < 0.9.76 Directory Traversal Vulnerability

The WordPress plugin Migration, Backup, Staging - WPvivid is prone to a directory traversal vulnerability. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Security Bulletin: Vulnerabilities in Golang Go and MinIO may affect IBM Spectrum Plus Container Backup and Restore for Kubernetes and Red Hat OpenShift (CVE-2022-29804, CVE-2022-30580, CVE-2022-30629, CVE-2022-30634, CVE-2022-35919, CVE-2022-31028)

Summary Multiple vulnerabilities in Golang Go and MinIO may affect IBM Spectrum Protect Plus Container Backup and Restore for Kubernetes and Red Hat OpenShift. Vulnerabilities include bypassing of security restrictions, execution of arbitrary code, obtaining sensitive information, denial of...

CVE-2022-2863

The Migration, Backup, Staging WordPress plugin before 0.9.76 does not sanitise and validate a parameter before using it to read the content of a file, allowing high privilege users to read any file from the web server via a Traversal attack...

CVE-2022-2863

The Migration, Backup, Staging WordPress plugin before 0.9.76 does not sanitise and validate a parameter before using it to read the content of a file, allowing high privilege users to read any file from the web server via a Traversal attack...

WordPress plugin Migration, Backup, Staging: Path traversal vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A path traversal vulnerability exists in th...

CVE-2022-2863: Improper Limitation of a Pathname to a Restricted Directory

The Migration, Backup, Staging WordPress plugin before 0.9.76 does not sanitise and validate a parameter before using it to read the content of a file, allowing high privilege users to read any file from the web server via a Traversal attack...

Moderate: Red Hat Security Advisory: OpenShift API for Data Protection (OADP) 1.0.4 security and bug fix update

OpenShift API for Data Protection OADP 1.0.4 is now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

Amanda path traversal vulnerability

Amanda is an automated network disk archiver organized by the University of Maryland at College Park. Allows IT administrators to set up a single primary backup server to back up multiple hosts to tape drives/converters or disk or optical media over a network. A security vulnerability exists in...

Veeam Backup & Replication server does not have Virtual Machine Manager Administrator Console installed.

Challenge When attempting to add Microsoft Hyper-V Servers to Veeam Backup & Replication the following error is displayed: Veeam Backup & Replication server does not have Virtual Machine Manager Administrator Console installed. If you installed VMM Console while Veeam Backup & Replication UI was...