Lucene search
+L

5773 matches found

OSV
OSV
added 2023/03/10 10:15 p.m.6 views

CVE-2023-27532

Vulnerability in Veeam Backup & Replication component allows encrypted credentials stored in the configuration database to be obtained. This may lead to gaining access to the backup infrastructure hosts...

7.5CVSS7.4AI score0.7761EPSS
SaveExploits4References2
NVD
NVD
added 2023/03/10 10:15 p.m.25 views

CVE-2023-27532

Vulnerability in Veeam Backup & Replication component allows encrypted credentials stored in the configuration database to be obtained. This may lead to gaining access to the backup infrastructure hosts...

7.5CVSS7.5AI score0.7761EPSS
SaveExploits4References2
Prion
Prion
added 2023/03/10 10:15 p.m.45 views

Design/Logic Flaw

Vulnerability in Veeam Backup & Replication component allows encrypted credentials stored in the configuration database to be obtained. This may lead to gaining access to the backup infrastructure hosts...

5CVSS7.5AI score0.7761EPSS
SaveExploits4References1Affected Software1
CNNVD
CNNVD
added 2023/03/10 12:0 a.m.13 views

Veeam Backup & Replication 访问控制错误漏洞

Veeam Backup & Replication is a backup and replication software from Veeam USA. A security vulnerability exists in Veeam Backup & Replication, which stems from allowing access to encrypted credentials stored in the configuration database, which can be exploited by an attacker to gain access to th...

7.5CVSS8.4AI score0.7761EPSS
SaveExploits4References2
ATTACKERKB
ATTACKERKB
added 2023/03/10 12:0 a.m.80 views

CVE-2023-27532

Vulnerability in Veeam Backup & Replication component allows encrypted credentials stored in the configuration database to be obtained. This may lead to gaining access to the backup infrastructure hosts. Recent assessments: sfewer-r7 at March 14, 2023 2:49pm UTC reported: On March 7, 2023, Veeam...

7.5CVSS8AI score0.7761EPSS
SaveIn wildExploits4References8
CVE
CVE
added 2023/03/10 12:0 a.m.797 views

CVE-2023-27532

CVE-2023-27532 affects Veeam Backup & Replication, specifically the Cloud Connect component. The vulnerability allows an unauthenticated actor inside the backup network perimeter to obtain encrypted credentials stored in the configuration database, potentially leading to access to backup infrastr...

7.5CVSS7.5AI score0.7761EPSS
SaveIn wildExploits4References2Affected Software1
Ubuntu
Ubuntu
added 2023/03/08 1:2 p.m.113 views

USN-5936-1: Samba vulnerabilities

Evgeny Legerov discovered that Samba incorrectly handled buffers in certain GSSAPI routines of Heimdal. A remote attacker could possibly use this issue to cause Samba to crash, resulting in a denial of service. CVE-2022-3437 Tom Tervoort discovered that Samba incorrectly used weak rc4-hmac Kerber...

9.8CVSS7.6AI score0.06419EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2023/03/07 12:0 a.m.8 views

PT-2023-1918

Name of the Vulnerable Software and Affected Versions Veeam Backup & Replication versions 11.0.1.1261 through 12.0.0.1420 Description A flaw exists in the Veeam Backup & Replication software that allows an unauthenticated user with network access to obtain encrypted credentials stored in the...

7.8CVSS7.7AI score0.7761EPSS
SaveExploits4References151
Veeam
Veeam
added 2023/03/07 12:0 a.m.124 views

CVE-2023-27532

Article Applicability This article documents a vulnerability discovered in a core service of Veeam Backup & Replication and Veeam Cloud Connect. This vulnerability does not affect other Veeam products e.g., Veeam Backup for Microsoft 365, Veeam Agent for Microsoft Windows , Veeam ONE, Veeam Servi...

7.5CVSS7.3AI score0.7761EPSS
SaveExploits4
BDU FSTEC
BDU FSTEC
added 2023/03/06 12:0 a.m.10 views

The vulnerability of the access control tool, Policy Manager, in the software for remote IT support and monitoring provided by Dell Secure Connect Gateway (SCG), allows a perpetrator to increase their privileges.

The vulnerability of the access control mechanism in the Policy Manager software for remote IT support and monitoring in Dell Secure Connect Gateway SCG is related to the use of a strictly encrypted cryptographic key. Exploiting this vulnerability could allow an attacker to increase their...

8CVSS7.8AI score0.00472EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/03/01 12:0 a.m.18 views

The vulnerability of the AMD Secure Encrypted Virtualization (SEV) technology in microprogramming software for AMD processors allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of AMD Secure Encrypted Virtualization SEV microprogramming software for processors is related to insufficient validation of input data. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

6.5CVSS6.5AI score0.00122EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/03/01 12:0 a.m.11 views

The vulnerability of the AMD Secure Encrypted Virtualization (SEV) technology in microprogramming software for AMD processors allows attackers to disclose protected information.

The vulnerability of AMD Secure Encrypted Virtualization SEV microprogramming software for processors is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to disclose protected information...

5.5CVSS6.2AI score0.00185EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/03/01 12:0 a.m.13 views

The vulnerabilities of AMD Secure Processor (ASP), System Management Unit (SMU), and Secure Encrypted Virtualization (SEV) related to initialization errors allow attackers to disclose protected information.

The vulnerabilities of AMD Secure Processor ASP, System Management Unit SMU, and Secure Encrypted Virtualization SEV related to initialization errors allow attackers to expose protected information...

5.5CVSS5.9AI score0.00185EPSS
SaveExploits0References5
HackRead
HackRead
added 2023/02/28 2:0 p.m.27 views

Bitdefender Releases Free MortalKombat Ransomware Decryptor

By Waqas The free Mortal Kombat ransomware decryptor is now available for victims to recover their encrypted files without having to pay the ransom. This is a post from HackRead.com Read the original post: Bitdefender Releases Free MortalKombat Ransomware Decryptor...

2AI score
SaveExploits0
The Hacker News
The Hacker News
added 2023/02/28 6:16 a.m.6 views

LastPass Reveals Second Attack Resulting in Breach of Encrypted Password Vaults

LastPass, which in December 2022 disclosed a severe data breach that allowed threat actors to access encrypted password vaults, said it happened as a result of the same adversary launching a second attack on its systems. The company said one of its DevOps engineers had their personal home compute...

7.8AI score
SaveExploits0
The Hacker News
The Hacker News
added 2023/02/28 6:16 a.m.38 views

LastPass Reveals Second Attack Resulting in Breach of Encrypted Password Vaults

LastPass, which in December 2022 disclosed a severe data breach that allowed threat actors to access encrypted password vaults, said it happened as a result of the same adversary launching a second attack on its systems. The company said one of its DevOps engineers had their personal home compute...

0.3AI score
SaveExploits0
NVD
NVD
added 2023/02/27 8:15 p.m.25 views

CVE-2023-23493

A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.2, macOS Monterey 12.6.3. An encrypted volume may be unmounted and remounted by a different user without prompting for the password...

3.3CVSS3.1AI score0.00208EPSS
SaveExploits0References2
OSV
OSV
added 2023/02/27 8:15 p.m.5 views

CVE-2023-23493

A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.2, macOS Monterey 12.6.3. An encrypted volume may be unmounted and remounted by a different user without prompting for the password...

3.3CVSS5.7AI score0.00208EPSS
SaveExploits0References2
Prion
Prion
added 2023/02/27 8:15 p.m.23 views

Design/Logic Flaw

A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.2, macOS Monterey 12.6.3. An encrypted volume may be unmounted and remounted by a different user without prompting for the password...

1.9CVSS5.2AI score0.00208EPSS
SaveExploits0References2Affected Software1
Veracode
Veracode
added 2023/02/27 4:10 p.m.23 views

Information Disclosure

accountsservice is vulnerable to Information Disclosure. The vulnerability exists in the userchangepasswordauthorizedcb function of user.c, which could let local users obtain encrypted passwords...

3.3CVSS4.3AI score0.00448EPSS
SaveExploits1References7Affected Software1
Rows per page
Query Builder