80 matches found
EUVD-2021-27562
Malicious code in bioql PyPI...
EUVD-2021-29996
Malicious code in bioql PyPI...
EUVD-2021-29993
Malicious code in bioql PyPI...
EUVD-2021-29991
Malicious code in bioql PyPI...
EUVD-2021-29998
Malicious code in bioql PyPI...
EUVD-2021-29994
Malicious code in bioql PyPI...
EUVD-2021-27564
Malicious code in bioql PyPI...
EUVD-2021-27563
Malicious code in bioql PyPI...
EUVD-2021-29988
Malicious code in bioql PyPI...
EUVD-2021-29992
Malicious code in bioql PyPI...
EUVD-2021-29989
Malicious code in bioql PyPI...
EUVD-2021-29997
Malicious code in bioql PyPI...
EUVD-2021-29995
Malicious code in bioql PyPI...
CVE-2021-43035
An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. Two unauthenticated SQL injection vulnerabilities were discovered, allowing arbitrary SQL queries to be injected and executed under the postgres superuser account. Remote code execution was possible, leading to full acces...
CVE-2021-43043
An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The apache user could read arbitrary files such as /etc/shadow by abusing an insecure Sudo rule...
CVE-2021-43038
An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The wguest account could execute commands by injecting into PostgreSQL trigger functions. This allowed privilege escalation from the wguest user to the postgres user...
CVE-2021-43040
An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The privileged vaultServer could be leveraged to create arbitrary writable files, leading to privilege escalation...
CVE-2021-43044
An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The SNMP daemon was configured with a weak default community...
CVE-2021-43041
An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. A crafted HTTP request could induce a format string vulnerability in the privileged vaultServer application...
CVE-2021-43042
An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. A buffer overflow existed in the vaultServer component. This was exploitable by a remote unauthenticated attacker...