How to Change Where Logs are Stored on the Veeam Appliances

Purpose This article documents how to change the location where Veeam Appliances store their log files on the Linux filesystem. This article covers: Veeam Software Appliance Veeam Infrastructure Appliance JeOS Deployed Proxies and Repositories Veeam Hardened Repositories deployed using the JeOS I...

Backup Job to Cloud Provider Fails to Stop Running Health Check Session

Challenge Observed Behavior If the Health Check for a Tenant's backup is running, it cannot be stopped by the Backup Job for the same backup. The Tenant's Backup Job will wait until the Health Check completes and may fail if the Health Check does not complete in a timely manner. Expected Behavior...

EUVD-2021-24611

Malware in sbrugna...

CVE-2024-30896

InfluxDB OSS 2.x through 2.7.11 stores the administrative operator token under the default organization which allows authorized users with read access to the authorization resource of the default organization to retrieve the operator token. InfluxDB OSS 1.x, Enterprise, Cloud, Cloud Dedicated and...

CVE-2024-30896

InfluxDB OSS 2.x through 2.7.11 stores the administrative operator token under the default organization which allows authorized users with read access to the authorization resource of the default organization to retrieve the operator token. InfluxDB OSS 1.x, Enterprise, Cloud, Cloud Dedicated and...

CVE-2024-30896

InfluxDB OSS 2.x through 2.7.11 stores the administrative operator token under the default organization which allows authorized users with read access to the authorization resource of the default organization to retrieve the operator token. InfluxDB OSS 1.x, Enterprise, Cloud, Cloud Dedicated and...

CVE-2024-30896

InfluxDB OSS 2.x through 2.7.11 stores the administrative operator token under the default organization which allows authorized users with read access to the authorization resource of the default organization to retrieve the operator token. InfluxDB OSS 1.x, Enterprise, Cloud, Cloud Dedicated and...

CVE-2024-30896

In InfluxDB OSS versions 2.x through 2.7.11 , a business logic flaw allows users with an allAccess token to escalate privileges to the operator level. This occurs because the system stores the administrative operator token under the default organization, which can be retrieved by authorized users...

BELL-CVE-2024-49931

Bulletin has no description...

CVE-2024-42473

OpenFGA is an authorization/permission engine. OpenFGA v1.5.7 and v1.5.8 are vulnerable to authorization bypass when calling Check API with a model that uses but not and from expressions and a userset. Users should downgrade to v1.5.6 as soon as possible. This downgrade is backward compatible. As...

CVE-2024-42473 OpenFGA Authorization Bypass

OpenFGA is an authorization/permission engine. OpenFGA v1.5.7 and v1.5.8 are vulnerable to authorization bypass when calling Check API with a model that uses but not and from expressions and a userset. Users should downgrade to v1.5.6 as soon as possible. This downgrade is backward compatible. As...

CAN-2005-1260

The CAN-2005-1260 entry concerns bzip2 up to version 1.0.2 (and earlier). A crafted bzip2 file can trigger an infinite loop during decompression, leading to denial of service by exhausting disk space or CPU time. Several connected advisories confirm impact is via decompression of untrusted archiv...

Stack overflow

TensorFlow is an open source platform for machine learning. Inputs densefeatures or examplestatedata not of rank 2 will trigger a CHECK fail in SdcaOptimizer. We have patched the issue in GitHub commit 80ff197d03db2a70c6a111f97dcdacad1b0babfa. The fix will be included in TensorFlow 2.11. We will...

CVE-2021-39795

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: Pulled from Android ASB2022-04 publication https://source.android.com/security/bulletin/2022-04-01 due to a functional regression. We will re-release this CVE at a future date, in a future...

CVE-2021-38138

OneNav beta 0.9.12 allows XSS via the Add Link feature. NOTE: the vendor's position is that there intentionally is not any XSS protection at present, because the attack risk is largely limited to a compromised account; however, XSS protection is planned for a future release...

Design/Logic Flaw

OneNav beta 0.9.12 allows XSS via the Add Link feature. NOTE: the vendor's position is that there intentionally is not any XSS protection at present, because the attack risk is largely limited to a compromised account; however, XSS protection is planned for a future release...

CVE-2021-38138

OneNav beta 0.9.12 allows XSS via the Add Link feature. NOTE: the vendor's position is that there intentionally is not any XSS protection at present, because the attack risk is largely limited to a compromised account; however, XSS protection is planned for a future release...

Invision Power Top Site List 2.0 Alpha 3 - SQL Injection (PoC)

Invision Power Top Site List 2.0 Alpha 3 - SQL Injection PoC Invision Power Top Site List SQL Injection Vendor: Invision Power Services Product: Invision Power Top Site List Version: = 2.0 Alpha 3 Website: http://www.invisionpower.com/ BID: 9229 Description: Invision Power Top Site List is a...