Lucene search
+L

3611 matches found

Positive Technologies
Positive Technologies
added 2024/02/29 12:00 a.m.8 views

PT-2024-18470 · WordPress · Wpvivid

Name of the Vulnerable Software and Affected Versions: Migration, Backup, Staging – WPvivid plugin for WordPress versions up to, and including, 0.9.68 Description: The issue is related to a missing capability check on the get restore progress and restore functions, allowing unauthorized access...

9.1CVSS9.7AI score0.00832EPSS
SaveExploits1References8
Fedora
Fedora
added 2024/02/21 1:33 a.m.33 views

[SECURITY] Fedora 39 Update: rear-2.7-8.fc39

Relax-and-Recover is the leading Open Source disaster recovery and system migration solution. It comprises of a modular frame-work and ready-to-go workflows for many common situations to produce a bootable image and restore from backup using this image. As a benefit, it allows to restore to...

5.5CVSS5.5AI score0.00291EPSS
SaveExploits1
Citrix
Citrix
added 2024/02/20 12:00 a.m.31 views

Warning:Table chb_State.Workers object definition does not match the expected reference schema

The Site test Report shows a warning "Table chbState.Workers object definition does not match the expected reference schema" CDF traces captured from the DDC while running the Ste test show the below messages:...

7AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2024/02/14 6:44 p.m.77 views

Critical: Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.8.5 security and bug fix container updates

Red Hat Advanced Cluster Management for Kubernetes 2.8.5 General Availability release images, which provide security updates and fix bugs. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a...

9.8CVSS7.9AI score0.0151EPSS
SaveExploits0References19
Github Security Blog
Github Security Blog
added 2024/02/09 6:31 p.m.46 views

Apache Solr: Backup/Restore APIs allow for deployment of executables in malicious ConfigSets

Improper Control of Dynamically-Managed Code Resources, Unrestricted Upload of File with Dangerous Type, Inclusion of Functionality from Untrusted Control Sphere vulnerability in Apache Solr.This issue affects Apache Solr from 6.0.0 through 8.11.2, from 9.0.0 before 9.4.1. In the affected version...

8.8CVSS7.4AI score0.8384EPSS
SaveExploits4References9Affected Software1
Cvelist
Cvelist
added 2024/02/09 5:28 p.m.54 views

CVE-2023-50386 Apache Solr: Backup/Restore APIs allow for deployment of executables in malicious ConfigSets

Improper Control of Dynamically-Managed Code Resources, Unrestricted Upload of File with Dangerous Type, Inclusion of Functionality from Untrusted Control Sphere vulnerability in Apache Solr.This issue affects Apache Solr: from 6.0.0 through 8.11.2, from 9.0.0 before 9.4.1. In the affected...

9.1AI score0.8384EPSS
SaveExploits4References2
Vulnrichment
Vulnrichment
added 2024/02/09 5:28 p.m.30 views

CVE-2023-50386 Apache Solr: Backup/Restore APIs allow for deployment of executables in malicious ConfigSets

Improper Control of Dynamically-Managed Code Resources, Unrestricted Upload of File with Dangerous Type, Inclusion of Functionality from Untrusted Control Sphere vulnerability in Apache Solr.This issue affects Apache Solr: from 6.0.0 through 8.11.2, from 9.0.0 before 9.4.1. In the affected...

8.2AI score0.8384EPSS
SaveExploits4References2
CNNVD
CNNVD
added 2024/02/09 12:00 a.m.8 views

WordPress Plugin Backuply Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...

7.5CVSS6.6AI score0.00957EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/02/08 12:00 a.m.7 views

PT-2024-15860 · WordPress · Backuply

Name of the Vulnerable Software and Affected Versions: The Backuply – Backup, Restore, Migrate and Clone plugin for WordPress versions 1.2.5 and earlier Description: The issue is related to a Denial of Service vulnerability. This vulnerability is due to direct access of the backuply/restore ins.p...

7.5CVSS7.9AI score0.00957EPSS
SaveExploits0References10
OSV
OSV
added 2024/02/06 9:15 p.m.13 views

CVE-2024-22514

An issue discovered in iSpyConnect.com Agent DVR 5.1.6.0 allows attackers to run arbitrary files by restoring a crafted backup file...

8.8CVSS5.9AI score0.01401EPSS
SaveExploits1References1
NVD
NVD
added 2024/02/06 9:15 p.m.30 views

CVE-2024-22514

An issue discovered in iSpyConnect.com Agent DVR 5.1.6.0 allows attackers to run arbitrary files by restoring a crafted backup file...

8.8CVSS8.5AI score0.01401EPSS
SaveExploits1References1
NVD
NVD
added 2024/02/05 10:15 p.m.41 views

CVE-2023-4637

The WPvivid plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the restore and getrestoreprogress function in versions up to, and including, 0.9.94. This makes it possible for unauthenticated attackers to invoke these functions and obtain full...

5.3CVSS4.7AI score0.00615EPSS
SaveExploits0References4
OSV
OSV
added 2024/02/05 10:15 p.m.9 views

CVE-2023-4637

The WPvivid plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the restore and getrestoreprogress function in versions up to, and including, 0.9.94. This makes it possible for unauthenticated attackers to invoke these functions and obtain full...

5.3CVSS5.9AI score0.00615EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/02/05 12:00 a.m.10 views

PT-2024-13356 · WordPress · Wpvivid

Name of the Vulnerable Software and Affected Versions: WPvivid plugin for WordPress versions up to, and including, 0.9.94 Description: The issue is related to a missing capability check on the restore and get restore progress functions. This allows unauthenticated attackers to invoke these...

5.3CVSS6.2AI score0.00615EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2024/02/05 12:00 a.m.9 views

WordPress plguin WPvivid Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

5.3CVSS6.5AI score0.00615EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2024/02/02 12:00 a.m.11 views

The vulnerability of the backup/restore function of the video surveillance software Agent DVR allows a intruder to execute arbitrary code and upload arbitrary files.

The vulnerability of the Backup/Restore function of the video surveillance software for DVR systems is related to incorrect restrictions on the path to the restricted-access directory. Exploiting this vulnerability could allow an attacker to execute arbitrary commands and upload arbitrary files...

10CVSS8AI score0.01401EPSS
SaveExploits1References4Affected Software1
Positive Technologies
Positive Technologies
added 2024/02/01 12:00 a.m.10 views

PT-2024-15911 · WordPress · Nex-Forms

Name of the Vulnerable Software and Affected Versions: NEX-Forms – Ultimate Form Builder – Contact forms and much more plugin for WordPress versions up to, and including, 8.5.6 Description: The issue is related to unauthorized access due to a missing capability check on the restore records...

5.3CVSS9.2AI score0.00598EPSS
SaveExploits0References10
Akamai Blog
Akamai Blog
added 2024/01/31 2:00 p.m.13 views

How Akamai Volunteers Helped Restore Costa Rica’s Most Polluted Beach

...

7AI score
SaveExploits0
Patchstack
Patchstack
added 2024/01/29 12:00 a.m.16 views

WordPress Backuply – Backup, Restore, Migrate and Clone Plugin <= 1.2.3 is vulnerable to Directory Traversal

Software Backuply – Backup, Restore, Migrate and Clone Type Plugin Vulnerable versions = 1.2.3 Fixed in 1.2.4 OWASP Top 10 A6: Security Misconfiguration Classification Directory Traversal CVE CVE-2024-0697 Patch priority Low CVSS severity Low 4.9 Developer Claim ownership PSID 3064782c188c Credit...

6.5CVSS6.5AI score0.00764EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2024/01/27 12:00 a.m.14 views

PT-2024-1417 · Agent Dvr · Agent Dvr

Name of the Vulnerable Software and Affected Versions: Agent DVR version 5.1.6.0 Description: The issue is related to the Backup/Restore function in Agent DVR software, which is used for video surveillance. It involves incorrect restriction of the path name to a directory with limited access...

10CVSS8.2AI score0.01401EPSS
SaveExploits1References10
Rows per page
Query Builder