آخرین آسیب‌پذیری‌ها

A vulnerability allowing a low-privileged local user to write arbitrary files with SYSTEM privileges during the installation of Veeam Backup for Microsoft 365, which can lead to privilege escalation or denial of service.

A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to write attacker-controlled files to an arbitrary path on the backup server throug…

A vulnerability allowing an unauthenticated attacker to bypass REST API authentication with a forged federation token and receive responses from REST API endpoints that do not call the Veeam Backup for Microsoft 365 bac…

A vulnerability allowing an attacker with valid Administrator credentials to bypass multi-factor authentication by disabling it globally before completing MFA verification.

A vulnerability allowing an unauthenticated attacker to bypass authorization on the CDP Coordinator Service.

A vulnerability allowing a user with the Veeam Backup for Microsoft 365 Administrator role to read arbitrary files on the backup server with LocalSystem privileges.

A vulnerability allowing an authenticated organization-transfer peer to inject SQL into the configuration database of the source Veeam Backup for Microsoft 365 server, leading to cross-tenant read and write of configura…

A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to write attacker-controlled files to an arbitrary path on the backup server throug…

A vulnerability in Veeam Agent for Linux allows for local privilege escalation. Only installations that are managed by a Veeam Backup & Replication instance are affected.

When a team was configured as "visible to everyone", the web UI correctly blocked non-members from viewing the team ("You are not a member of ..."), but the resources API endpoint could still be called directly, allowin…

Abusing the federated share endpoint, an attacker can write arbitrary rows into the oc_share_external database table. These rows persist indefinitely — there is no automatic cleanup mechanism. Three distinct denial-of-s…

A user could create a docx or odt file with a # in the filename with confidential information such as a credit card number and have it not be marked as confidential.

A missing token type check allowed to retrieve more additional information about the WOPI configuration with a user or guest token.

A public shared collective always allowed recipients of the link to create pages.

App passwords were allowed to bypass password confirmation on sensitive endpoints.

A SSRF vulnerability found that enables access to internal Chrome Devtools Protocol APIs that can leak the JWT authentication token for another user. A low privileged attacker could continually exploit this vulnerabilit…

The Tables app's share-listing endpoint (GET /apps/tables/share/table/{tableId}) did not verify that the requesting user has manage-level permission on the table before returning the full list of share recipients (users…

The user in a group can bypass the group restriction set by an administrator on link sharing, creating share links for a table even though they shouldn't have that permission.

knative.dev/pkg admission webhooks allow unbounded request-body memory exhaustion

GFI KerioConnect < 10.0.8p2 Stored XSS via SVG Attachment

Dynamic Library Loading Process Control in Autodesk Fusion Desktop

libXi XGetDeviceControl Control Type Mismatch Heap Buffer Overflow

Electronic Library Description Stored Cross-Site Scripting (XSS) in Autodesk Fusion Desktop

Fusion Protocol URL Reflected Cross-Site Scripting (XSS) in Autodesk Fusion Desktop

Design Name Stored Cross-Site Scripting (XSS) in Autodesk Fusion Desktop