Bacula

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2014-8295 Oct 15, 14:55 HIGH POC This Week

SQL injection vulnerability in joblogs.php in Bacula-Web 5.2.10 allows remote attackers to execute arbitrary SQL commands via the jobid parameter. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Bacula Bacula Web

NVD Exploit-DB

CVSS 2.0

7.5

EPSS

0.9%

CVE-2012-4430 Oct 10, 18:55 MEDIUM PATCH This Month

The dump_resource function in dird/dird_conf.c in Bacula before 5.2.11 does not properly enforce ACL rules, which allows remote authenticated users to obtain resource dump information via unspecified. Rated medium severity (CVSS 4.0), this vulnerability is remotely exploitable, low attack complexity.

Privilege Escalation Debian Debian Linux Bacula

NVD

CVSS 2.0

4.0

EPSS

0.6%

CVE-2014-8295

EPSS 1% CVSS 7.5

HIGH POC This Week

PHP SQLi Bacula +1

NVD Exploit-DB

CVE-2012-4430

EPSS 1% CVSS 4.0

MEDIUM PATCH This Month

Privilege Escalation Debian Debian Linux +1

NVD