PT-2024-4974 · Microsoft · Windows Backup Service +1

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Server Backup affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Windows Backup Service, which is caused by incorrect handling of symbolic links before accessi...

CVE-2024-38013: Improper Link Resolution Before File Access

Microsoft Windows Server Backup Elevation of Privilege Vulnerability...

CVE-2022-46900

An issue was discovered in Vocera Report Server and Voice Server 5.x through 5.8. There is Path Traversal in the Task Exec filename. The Vocera Report Console contains various jobs that are executed on the server at specified intervals, e.g., backup, etc. An authenticated user has the ability to...

CISA Issues Warning on Active Exploitation of ZK Java Web Framework Vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency CISA has added a high-severity flaw affecting the ZK Framework to its Known Exploited Vulnerabilities KEV catalog based on evidence of active exploitation. Tracked as CVE-2022-36537 CVSS score: 7.5, the issue impacts ZK Framework versions...

ZK Framework AuUploader Unspecified Vulnerability

ZK Framework AuUploader servlets contain an unspecified vulnerability that could allow an attacker to retrieve the content of a file located in the web context. The ZK Framework is an open-source Java framework. This vulnerability can impact multiple products, including but not limited to...

PT-2023-14162

Name of the Vulnerable Software and Affected Versions Couchbase Server versions 7.0.0 through 7.0.4 Couchbase Server versions 7.1.0 through 7.1.1 Description An issue was discovered in Couchbase Server where a crafted HTTP REST request from an administrator account to the "Couchbase Server Backup...

Exploit for CVE-2022-36537

CVE-2022-36537 Summary R1Soft Server Backup Manager uses t...

Critical RCE Vulnerability Reported in ConnectWise Server Backup Solution

IT service management software platform ConnectWise has released Software patches for a critical security vulnerability in Recover and R1Soft Server Backup Manager SBM. The issue, characterized as a "neutralization of Special Elements in Output Used by a Downstream Component," could be abused to...

CVE-2022-36537

ZK Framework v9.6.1, 9.6.0.1, 9.5.1.3, 9.0.1.2 and 8.6.4.1 allows attackers to access sensitive information via a crafted POST request sent to the component AuUploader. Recent assessments: ccondon-r7 at March 01, 2023 6:39pm UTC reported: The core vuln here is an info leak in ZK Framework, which ...

Opentext Carbonite Server Backup Portal Cross-Site Scripting Vulnerability

OpenText develops and markets Enterprise Information Management EIM software. A cross-site scripting vulnerability exists in OpenText Carbonite Server Backup Portal 8.8.7 and earlier versions, which originates from a failure to effectively filter user input at policy creation, allowing an...

CVE-2020-13116

OpenText Carbonite Server Backup Portal before 8.8.7 allows XSS by an authenticated user via policy creation...

CVE-2020-13116

OpenText Carbonite Server Backup Portal before 8.8.7 allows XSS by an authenticated user via policy creation...

Design/Logic Flaw

OpenText Carbonite Server Backup Portal before 8.8.7 allows XSS by an authenticated user via policy creation...

CVE-2020-13116

OpenText Carbonite Server Backup Portal before 8.8.7 allows XSS by an authenticated user via policy creation...

CVE-2020-13116

Affected product: OpenText Carbonite Server Backup Portal. Vulnerability: Cross‑Site Scripting (XSS) via policy creation. Root cause: failure to adequately filter user input at policy creation. Impact: authenticated attacker can inject JavaScript into a client browser (arbitrary code execution in...

CVE-2020-13116: Improper Neutralization of Input During Web Page Generation

OpenText Carbonite Server Backup Portal before 8.8.7 allows XSS by an authenticated user via policy creation...

Opentext Carbonite 跨站脚本漏洞

OpenText develops and markets Enterprise Information Management EIM software. A cross-site scripting vulnerability exists in OpenText Carbonite Server Backup Portal 8.8.7 and earlier versions, which originates from a failure to effectively filter user input at policy creation, allowing an...

PT-2021-9561

Name of the Vulnerable Software and Affected Versions OpenText Carbonite Server Backup Portal versions prior to 8.8.7 Description The issue allows for cross-site scripting XSS attacks by an authenticated user through policy creation. Recommendations For versions prior to 8.8.7, update to version...

Windows Server backup fails despite sufficient free space on target volume in Windows Server 2012 R2

Windows Server backup fails despite sufficient free space on target volume in Windows Server 2012 R2 This article describes an issue that occurs when you use Windows Server Backup to back up data in Windows Server 2012 R2. You can fix this issue by using the update in this article. Before you...

Cisco Prime Infrastructure server backup information disclosure vulnerability

Cisco Prime Infrastructure PI is a set of Cisco Prime LAN Management Solution LMS and Cisco Prime Network Control System NCS technologies for wireless management. solution. An information disclosure vulnerability exists in the 'server backup' function in Cisco PI, which originates from a program...