72 matches found
SUSE CVE-2012-3191
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.50, 8.51, and 8.52 allows remote authenticated users to affect availability via unknown vectors related to Data Mover...
Adding Linux Server Without Elevation: "Installing Installer service Error"
Challenge When adding a Linux Server to Veeam Backup & Replication using a non-root account and not enabling the "Elevate account privileges automatically" option, the following error is shown: RPM-based Linux distributions Installing Installer service Error: Error: error: can't create transactio...
Malicious code in azure-arm-resourcemover-samples-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 66f9357c207a31225a24735bdcfd23e802760ee71fc071cfe94158668c62076b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in azure-arm-resourcemover-samples-ts (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 329c777bc395bc11bfd51e112a8ac35155dde42b9911add8bd5536c54ea05669 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
How to Reinstall the Veeam Transport Service on a Linux Server
Article Use The steps outlined in this article are used as a troubleshooting step when an issue occurs with a Linux server that requires that the Veeam Transport service be manually reinstalled. When phasing out a Linux server, these steps are not necessary; In such a scenario, simply removing th...
Installing Veeam Data Mover service Error: scp: error: unexpected filename:
Challenge When adding a Linux server to Veeam Backup & Replication, the New Linux Server wizard displays the error: Installing Veeam Data Mover service Error: scp: error: unexpected filename: Copy Log Example C:\ProgramData\Veeam\Backup\Utils\Util.InfraItemSaver.log Info Uploading file to...
WordPress Migrate WordPress Website & Backups – Prime Mover plugin <= 1.4.9 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability
Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Migrate WordPress Website & Backups – Prime Mover plugin versions = 1.4.9. Solution Update the WordPress Migrate WordPress Website & Backups – Prime Mover plugin to the latest available version at leas...
U.S. Dept Of Defense: ██████ Authenticated User Data Disclosure
Background The Air Force’s ███ application is exposing members’ personal information to other users with access to the applocaton. We’ve identified two specific issues, but there may be other similar problems in the same vein as the ones described here. The underlying problem appears to be that...
Solaris 10 (x86) : 150313-06
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: iSCSI Data MoverIDM. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows successful unauthenticated network attacks via TCP/IP. Successful attack of this vulnerability...
The vulnerability of the datamover module of the Linux operating system-based backup software NovaBACKUP allows a hacker to execute arbitrary commands.
The vulnerability of the datamover module of the Linux operating system-based NovaBACKUP data center backup software exists due to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...
Oracle WebCenter Sites Unauthorized Operation Vulnerability
Oracle Fusion Middleware is a suite of business innovation platforms for enterprise and cloud environments from Oracle Corporation. Oracle WebCenter Sites is a web experience management component that enables marketers and business users to create and manage interactive social online experiences ...
CVE-2017-3591
Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware subcomponent: Catalog Mover. Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTT...
CVE-2017-3554
Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware subcomponent: Catalog Mover. Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows low privileged attacker with network access via HTTP...
CVE-2017-3591
CVE-2017-3591 affects Oracle WebCenter Sites (Oracle Fusion Middleware) in the Catalog Mover subcomponent. Affects listed versions: 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. The vulnerability can be exploited by an unauthenticated remote attacker over HTTP, with user interaction required...
CVE-2015-4366
Cross-site scripting XSS vulnerability in the Mover module 6.x-1.0 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in the Mover module 6.x-1.0 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors...
CVE-2015-4366
CVE-2015-4366 affects Drupal’s contributed Mover module (6.x-1.0). The issue stems from insufficient sanitization of user-supplied text in certain pages, enabling Cross-Site Scripting (XSS) by remote authenticated users who have permissions to create/edit nodes. No exploit details provided beyond...
Drupal Mover Module Cross-Site Scripting Vulnerability
Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.Mover is one of the modules used to provide content movement between Drupal sites. A cross-site scripting vulnerability exists in the Drupal Mover module that stems from the program's...
SA-CONTRIB-2015-070 - Mover - Cross Site Scripting (XSS) - Unsupported
The Mover modules provide the ability to move content between Drupal sites. The module doesn't sufficiently sanitize user supplied text in some pages, thereby exposing a Cross Site Scripting vulnerability. This vulnerability is mitigated by the fact that an attacker must have permission to...