bacula kayıtları
bacula üreticisine ait 7 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %85,7
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')3
- CWE-264 Permissions, Privileges, and Access Controls1
- CWE-319 Cleartext Transmission of Sensitive Information1
- CWE-59 Improper Link Resolution Before File Access ('Link Following')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
7 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
46Planlayın | CVE-2017-15367Kavram kanıtı | Bacula-web before 8.0.0-rc2 is affected by multiple SQL Injection vulnerabilities that could allow an attacker to access the Bacula databasebacula · bacula-web · CWE-89 | Kritik9,8 | — | %23,1 | 7 Mar 2018 |
32İzleyin | CVE-2025-45346Kavram kanıtı | SQL Injection vulnerability in Bacula-web before v.9.7.1 allows a remote attacker to execute arbitrary code via a crafted HTTP GET request.bacula · bacula-web · CWE-89 | Yüksek8,1 | — | %0,7 | 29 Tem 2025 |
31İzleyin | CVE-2014-8295Kavram kanıtı | SQL injection vulnerability in joblogs.php in Bacula-Web 5.2.10 allows remote attackers to execute arbitrary SQL commands via the jobid parabacula · bacula-web · CWE-89 | Yüksek7,5 | — | %2,3 | 15 Eki 2014 |
27İzleyin | CVE-2008-5373İstismar yok | mtx-changer.Adic-Scalar-24 in bacula-common 2.4.2 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/mtx.##### tbacula · bacula · CWE-59 | Orta6,9 | — | %0,4 | 8 Ara 2008 |
22İzleyin | CVE-2007-5626İstismar yok | make_catalog_backup in Bacula 2.2.5, and probably earlier, sends a MySQL password as a command line argument, and sometimes transmits cleartbacula · bacula · CWE-319 | Orta5,5 | — | %0,3 | 23 Eki 2007 |
17İzleyin | CVE-2012-4430İstismar yok | The dump_resource function in dird/dird_conf.c in Bacula before 5.2.11 does not properly enforce ACL rules, which allows remote authenticatebacula · bacula · CWE-264 | Orta4,0 | — | %2,7 | 10 Eki 2012 |
14İzleyin | CVE-2005-2995İstismar yok | bacula 1.36.3 and earlier allows local users to modify or read sensitive files via symlink attacks on (1) the temporary file used by autoconbacula · bacula | Düşük3,6 | — | %0,4 | 20 Eyl 2005 |
- CVE-2017-1536746Planlayın
Bacula-web before 8.0.0-rc2 is affected by multiple SQL Injection vulnerabilities that could allow an attacker to access the Bacula database
KritikCVSS 9,8Kavram kanıtıEPSS %23bacula · bacula-web7 Mar 2018
- CVE-2025-4534632İzleyin
SQL Injection vulnerability in Bacula-web before v.9.7.1 allows a remote attacker to execute arbitrary code via a crafted HTTP GET request.
YüksekCVSS 8,1Kavram kanıtıEPSS %1bacula · bacula-web29 Tem 2025
- CVE-2014-829531İzleyin
SQL injection vulnerability in joblogs.php in Bacula-Web 5.2.10 allows remote attackers to execute arbitrary SQL commands via the jobid para
YüksekCVSS 7,5Kavram kanıtıEPSS %2bacula · bacula-web15 Eki 2014
- CVE-2008-537327İzleyin
mtx-changer.Adic-Scalar-24 in bacula-common 2.4.2 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/mtx.##### t
OrtaCVSS 6,9İstismar yokEPSS %0bacula · bacula8 Ara 2008
- CVE-2007-562622İzleyin
make_catalog_backup in Bacula 2.2.5, and probably earlier, sends a MySQL password as a command line argument, and sometimes transmits cleart
OrtaCVSS 5,5İstismar yokEPSS %0bacula · bacula23 Eki 2007
- CVE-2012-443017İzleyin
The dump_resource function in dird/dird_conf.c in Bacula before 5.2.11 does not properly enforce ACL rules, which allows remote authenticate
OrtaCVSS 4,0İstismar yokEPSS %3bacula · bacula10 Eki 2012
- CVE-2005-299514İzleyin
bacula 1.36.3 and earlier allows local users to modify or read sensitive files via symlink attacks on (1) the temporary file used by autocon
DüşükCVSS 3,6İstismar yokEPSS %0bacula · bacula20 Eyl 2005