Browse CVEs

HIGH 8.8 CVE-2024-25228EPSS 26% Vinchin Backup and Recovery 7.2 and Earlier is vulnerable to Authenticated Remote Code Execution (RCE) via the getVerifydiyResult function in Manoeuv… Vinchin Backup And Recovery after 7.2 Fix from $1,9502024-03-14 CRITICAL 9.8 CVE-2024-22901 Vinchin Backup & Recovery v7.2 was discovered to use default MYSQL credentials. Vinchin Backup And Recovery after 7.2 Fix from $2,3002024-02-02 CRITICAL 9.8 CVE-2024-22902 Vinchin Backup & Recovery v7.2 was discovered to be configured with default root credentials. Vinchin Backup And Recovery after 7.2 Fix from $2,3002024-02-02 HIGH 8.8 CVE-2024-22899 Vinchin Backup & Recovery v7.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the syncNtpTime function. Vinchin Backup And Recovery after 7.2 Fix from $1,9502024-02-02 HIGH 8.8 CVE-2024-22900 Vinchin Backup & Recovery v7.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the setNetworkCardInfo functi… Vinchin Backup And Recovery after 7.2 Fix from $1,9502024-02-02 HIGH 8.8 CVE-2024-22903 Vinchin Backup & Recovery v7.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the deleteUpdateAPK function. Vinchin Backup And Recovery after 7.2 Fix from $1,9502024-02-02 CRITICAL 9.8 CVE-2023-45498EPSS 20% VinChin Backup & Recovery v5.0.*, v6.0.*, v6.7.*, and v7.0.* was discovered to contain a command injection vulnerability. Vinchin Backup And Recovery after 7.0 Fix from $2,3002023-10-27 CRITICAL 9.8 CVE-2023-45499EPSS 8% VinChin Backup & Recovery v5.0.*, v6.0.*, v6.7.*, and v7.0.* was discovered to contain hardcoded credentials. Vinchin Backup And Recovery after 7.0 Fix from $2,3002023-10-27 CRITICAL 9.8 CVE-2022-35866 This vulnerability allows remote attackers to bypass authentication on affected installations of Vinchin Backup and Recovery 6.5.0.17561. Authenticat… Vinchin Backup And Recovery No fix yet Fix from $2,3002022-08-03