138 matches found
EUVD-2017-16308
Malware in sbrugna...
EUVD-2020-29294
Malware in sbrugna...
EUVD-2021-27564
Malicious code in bioql PyPI...
EUVD-2021-29993
Malicious code in bioql PyPI...
EUVD-2021-29996
Malicious code in bioql PyPI...
EUVD-2021-29989
Malicious code in bioql PyPI...
EUVD-2021-27562
Malicious code in bioql PyPI...
EUVD-2021-29988
Malicious code in bioql PyPI...
EUVD-2021-29998
Malicious code in bioql PyPI...
EUVD-2021-29995
Malicious code in bioql PyPI...
EUVD-2021-29992
Malicious code in bioql PyPI...
EUVD-2021-29994
Malicious code in bioql PyPI...
CVE-2021-43035
An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. Two unauthenticated SQL injection vulnerabilities were discovered, allowing arbitrary SQL queries to be injected and executed under the postgres superuser account. Remote code execution was possible, leading to full acces...
CVE-2021-43043
An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The apache user could read arbitrary files such as /etc/shadow by abusing an insecure Sudo rule...
CVE-2021-43038
An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The wguest account could execute commands by injecting into PostgreSQL trigger functions. This allowed privilege escalation from the wguest user to the postgres user...
CVE-2021-43044
An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The SNMP daemon was configured with a weak default community...
CVE-2021-43041
An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. A crafted HTTP request could induce a format string vulnerability in the privileged vaultServer application...
CVE-2021-40385
An issue was discovered in the server software in Kaseya Unitrends Backup Software before 10.5.5-2. There is a privilege escalation from read-only user to admin...
CVE-2021-40387
An issue was discovered in the server software in Kaseya Unitrends Backup Software before 10.5.5-2. There is authenticated remote code execution...
CVE-2020-8427
In Unitrends Backup before 10.4.1, an HTTP request parameter was not properly sanitized, allowing for SQL injection that resulted in an authentication bypass...