ZM
Vendor
Zmanda
7
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2023-30577 | AM Amanda Zmanda | 7.8 | Jul 26 | AMANDA (Advanced Maryland Automatic Network Disk Archiver) before tag-community-3.5.4 mishandles argument checking for runtar.c, a different vulnerability than CVE-2022-37705 |
| CVE-2022-37705 | AM Amanda Zmanda | 6.7 | Apr 16 | A privilege escalation flaw was found in Amanda 3.5.1 in which the backup user can acquire root privileges |
| CVE-2022-37704 | AM Amanda Zmanda | 6.7 | Apr 16 | Amanda 3.5.1 allows privilege escalation from the regular user backup to root |
| CVE-2019-19469 | AM Amanda Zmanda | 8.8 | Dec 1 | In Zmanda Management Console 3.3.9, ZMC_Admin_Advanced?form=adminTasks&action=Apply&command= allows CSRF, as demonstrated by command injection with shell metacharacters |
| CVE-2016-10730 | AM Amanda Zmanda | 7.8 | Oct 24 | An issue was discovered in Amanda 3.3.1 |
| CVE-2016-10729 | AM Amanda Zmanda | 7.8 | Oct 24 | An issue was discovered in Amanda 3.3.1 |
| CVE-2009-3102 | ZF Zrm For MY Sql Zmanda | – | Sep 8 | The doHotCopy subroutine in socket-server.pl in Zmanda Recovery Manager (ZRM) for MySQL 2.x before 2.1.1 allows remote attackers to execute arbitrary commands via vectors… |