CVE-2017-18405

cPanel before 68.0.15 allows arbitrary file-read operations because of the backup .htaccess modification logic SEC-345...

EUVD-2016-4772

Malware in sbrugna...

EUVD-2025-8864

Xorcom CompletePBX is vulnerable to an authenticated path traversal, allowing for arbitrary file reads via the Backup and Restore functionality.This issue affects CompletePBX: through 5.2.35...

CVE-2024-29852: Improper Handling of Insufficient Permissions or Privileges

Veeam Backup Enterprise Manager allows high-privileged users to read backup session logs...

Veeam Backup Enterprise Manager security vulnerabilities

Veeam Backup Enterprise Manager is a centralized management and monitoring tool from Veeam USA. A security vulnerability exists in Veeam Backup Enterprise Manager that originates from allowing an elevated privilege user to read backup session logs...

CVE-2024-1343

A weak permission was found in the backup directory in LaborOfficeFree affecting version 19.10. This vulnerability allows any authenticated user to read backup files in the directory '%programfilesx86% LaborOfficeFree BackUp'...

CVE-2024-1343: Improper Access Control

A weak permission was found in the backup directory in LaborOfficeFree affecting version 19.10. This vulnerability allows any authenticated user to read backup files in the directory '%programfilesx86% LaborOfficeFree BackUp'...

CVE-2023-28330 Moodle: authenticated arbitrary file read through malformed backup file

Insufficient sanitizing in backup resulted in an arbitrary file read risk. The capability to access this feature is only available to teachers, managers and admins by default...

DELL Dell EMC Avamar Server security vulnerabilities

DELL Dell EMC Avamar Server is a suite of fully virtualized backup and recovery software for servers from Dell USA. A security vulnerability exists in Dell EMC Avamar, which can be exploited by an attacker to bypass access restrictions via user backup data on a Dell EMC Avamar Server in order to...

PT-2018-4165

Name of the Vulnerable Software and Affected Versions wp-db-backup plugin version 2.2.4 Description The issue allows remote attackers to read backup archives via a brute-force attack due to the plugin relying on a short string for access control. Recommendations For wp-db-backup plugin version...

PT-2017-14999

Name of the Vulnerable Software and Affected Versions BlogoText versions prior to 3.7.7 Description The issue allows remote attackers to read backup archives on Windows servers by defeating a filename-randomization protection mechanism. This can be achieved by providing the archiv1.zip name, whic...

CVE-2016-0903

Avamar Data Store ADS and Avamar Virtual Edition AVE in EMC Avamar Server before 7.3.0-233 rely on client-side authentication, which allows remote attackers to spoof clients and read backup data via a modified client agent...

PT-2016-4457

Name of the Vulnerable Software and Affected Versions EMC Avamar Server versions prior to 7.3.0-233 Description The issue allows remote attackers to spoof clients and read backup data by modifying the client agent, due to the reliance on client-side authentication. Recommendations For versions...

CVE-2016-3759

The Framework APIs in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allow attackers to read backup data via a crafted application that leverages priv-app access to insert a backup transport, aka internal bug 28406080...

PT-2016-3761

Name of the Vulnerable Software and Affected Versions IBM Spectrum Protect versions 5.5 through 6.3.5.0 IBM Spectrum Protect versions 7.x through 7.1.3 Description The issue concerns the server in IBM Spectrum Protect, where it fails to properly restrict the use of the ASNODENAME option. This...

CVE-2015-4965

maximouiweb/webmodule/webclient/utility/merlin.jsp in IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX004, and 7.6.0 before 7.6.0.1 IFIX002; Maximo Asset Management 7.5.x before 7.5.0.8 IFIX004 and 7.6.0 before 7.6.0.1 IFIX002 for SmartCloud Control Desk; and Maximo Ass...

PAD Site Scripts 3.6 - Arbitrary Database Backup

--------------------------------------------------------------- --------------------------------------------------------------- PAD Site Scripts v3.6 Bypass DB Backup Vulnerability --------------------------------------------------------------- Founder : TiGeR-Dz...

CVE-2001-0067: Undefined Security Weakness

The installation of J-Pilot creates the .jpilot directory with the user's umask, which could allow local attackers to read other users' PalmOS backup information if their umasks are not securely set...