4659 matches found
PT-2019-12554
Name of the Vulnerable Software and Affected Versions ProSyst mBS SDK versions prior to 8.2.6 Bosch IoT Gateway Software versions prior to 9.3.0 Description A Server-Side Request Forgery SSRF issue in the backup and restore functionality allows a remote attacker to forge GET requests to arbitrary...
PT-2019-12408 · Bosch +1 · Bosch Iot Gateway +1
Name of the Vulnerable Software and Affected Versions: ProSyst mBS SDK versions prior to 8.2.6 Bosch IoT Gateway Software versions prior to 9.2.0 Description: A directory traversal issue exists in the remote access to backup and restore functionality, allowing remote attackers to write or delete...
PT-2019-12374
Name of the Vulnerable Software and Affected Versions Code42 Enterprise and Crashplan for Small Business versions through 6.9.1 Description An issue exists where an attacker can craft a restore request to restore a file through the Code42 app to a location they do not have privileges to write...
CVE-2019-11551: Improper Privilege Management
In Code42 Enterprise and Crashplan for Small Business through Client version 6.9.1, an attacker can craft a restore request to restore a file through the Code42 app to a location they do not have privileges to write...
CVE-2019-11897: Server-Side Request Forgery (SSRF)
A Server-Side Request Forgery SSRF vulnerability in the backup & restore functionality in earlier versions than ProSyst mBS SDK 8.2.6 and Bosch IoT Gateway Software 9.3.0 allows a remote attacker to forge GET requests to arbitrary URLs. In addition, this could potentially allow an attacker to rea...
CVE-2016-10804
The SQLite journal feature in cPanel before 57.9999.54 allows arbitrary file-overwrite operations during Horde Restore SEC-58...
CVE-2016-10804
The SQLite journal feature in cPanel before 57.9999.54 allows arbitrary file-overwrite operations during Horde Restore SEC-58...
Design/Logic Flaw
The SQLite journal feature in cPanel before 57.9999.54 allows arbitrary file-overwrite operations during Horde Restore SEC-58...
CVE-2016-10804
The CVE-2016-10804 issue affects cPanel prior to 57.9999.54, where the SQLite journal feature can cause arbitrary file overwrites during Horde Restore (SEC-58). Root cause: misuse of the SQLite journal leads to write operations to arbitrary files. Impact (per sources): High, with potential confid...
CVE-2016-10804
The SQLite journal feature in cPanel before 57.9999.54 allows arbitrary file-overwrite operations during Horde Restore SEC-58...
PT-2019-7600
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 57.9999.54 Description The issue concerns the SQLite journal feature in cPanel, allowing arbitrary file-overwrite operations during Horde Restore. Recommendations For versions prior to 57.9999.54, update to version...
CVE-2016-10804: Improper Input Validation
The SQLite journal feature in cPanel before 57.9999.54 allows arbitrary file-overwrite operations during Horde Restore SEC-58...
CVE-2017-18384
cPanel before 68.0.15 allows jailed accounts to restore files that are outside of the jail SEC-310...
CVE-2018-20941
cPanel before 68.0.27 allows arbitrary file-read operations via restore adminbin SEC-349...
CVE-2018-20941
cPanel before 68.0.27 allows arbitrary file-read operations via restore adminbin SEC-349...
Design/Logic Flaw
cPanel before 68.0.27 allows arbitrary file-read operations via restore adminbin SEC-349...
PT-2019-10376
Name of the Vulnerable Software and Affected Versions: cPanel versions prior to 68.0.27 Description: The issue allows arbitrary file-read operations. This is achieved via the restore adminbin functionality. Recommendations: For versions prior to 68.0.27, update to version 68.0.27 or later to...
CVE-2018-20941: Exposure of Sensitive Information to an Unauthorized Actor
cPanel before 68.0.27 allows arbitrary file-read operations via restore adminbin SEC-349...
Fedora Update for deepin-clone FEDORA-2019-3d418f349c
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
