{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2008/JVNDB-2008-001312.html",
  "dc:date": "2008-11-21T12:20+09:00",
  "dcterms:issued": "2008-05-21T00:00+09:00",
  "dcterms:modified": "2008-11-21T12:20+09:00",
  "description": "The PVATLCalendar.PVCalendar.1 (pvcalendar.ocx) ActiveX control, a scheduler component of the Media Server in Symantec Backup Exec for Windows Server (BEWS), includes the insecure Save() method that mishandles strings assigned to certain properties listed below, which can be exploited to cause a denial of service (DoS) or overwrite arbitrary files.\r\n_DOWText0, _DOWText1, _DOWText2, _DOWText3, _DOWText4\r\n_DOWText5, _DOWText6, _MonthText0, _MonthText1, _MonthText2\r\n_MonthText3, _MonthText4, _MonthText5, _MonthText6, _MonthText7\r\n_MonthText8, _MonthText9, _MonthText10, _MonthText11",
  "link": "https://jvndb.jvn.jp/en/contents/2008/JVNDB-2008-001312.html",
  "sec:cpe": [
    {
      "#text": "cpe:/a:hitachi:jp1_veritas_backup_exec",
      "@product": "JP1/VERITAS Backup Exec",
      "@vendor": "Hitachi, Ltd",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:hitachi:jp1_veritas_netbackup",
      "@product": "JP1/VERITAS NetBackup",
      "@vendor": "Hitachi, Ltd",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:symantec:veritas_backup_exec",
      "@product": "Symantec Backup Exec for Windows Servers",
      "@vendor": "Symantec Corporation",
      "@version": "2.2"
    }
  ],
  "sec:cvss": {
    "@score": "5.1",
    "@severity": "Medium",
    "@type": "Base",
    "@vector": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
    "@version": "2.0"
  },
  "sec:identifier": "JVNDB-2008-001312",
  "sec:references": [
    {
      "#text": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6017",
      "@id": "CVE-2007-6017",
      "@source": "CVE"
    },
    {
      "#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2007-6017",
      "@id": "CVE-2007-6017",
      "@source": "NVD"
    },
    {
      "#text": "http://secunia.com/advisories/27885",
      "@id": "SA27885",
      "@source": "SECUNIA"
    },
    {
      "#text": "http://www.securityfocus.com/bid/28008",
      "@id": "28008",
      "@source": "BID"
    },
    {
      "#text": "http://securitytracker.com/id?1019525",
      "@id": "1019525",
      "@source": "SECTRACK"
    },
    {
      "#text": "http://www.frsirt.com/english/advisories/2008/0718",
      "@id": "FrSIRT/ADV-2008-0718",
      "@source": "FRSIRT"
    },
    {
      "#text": "http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001312.html",
      "@id": "JVNDB-2008-001312",
      "@source": "JVNDB_Ja"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-20",
      "@title": "Improper Input Validation(CWE-20)"
    }
  ],
  "title": "Symantec Backup Exec for Windows Server ActiveX Control Multiple Vulnerabilities"
}

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2021/JVNDB-2021-001014.html",
  "dc:date": "2021-02-01T16:49+09:00",
  "dcterms:issued": "2021-02-01T16:49+09:00",
  "dcterms:modified": "2021-02-01T16:49+09:00",
  "description": "A vulnerability exists in JP1/VERITAS.",
  "link": "https://jvndb.jvn.jp/en/contents/2021/JVNDB-2021-001014.html",
  "sec:cpe": [
    {
      "#text": "cpe:/a:hitachi:jp1_veritas_backup_exec",
      "@product": "JP1/VERITAS Backup Exec",
      "@vendor": "Hitachi, Ltd",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:hitachi:jp1_veritas_netbackup",
      "@product": "JP1/VERITAS NetBackup",
      "@vendor": "Hitachi, Ltd",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:veritas:backup_exec",
      "@product": "Backup Exec",
      "@vendor": "Veritas Technologies LLC.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:veritas:netbackup",
      "@product": "Veritas NetBackup",
      "@vendor": "Veritas Technologies LLC.",
      "@version": "2.2"
    }
  ],
  "sec:identifier": "JVNDB-2021-001014",
  "sec:references": {
    "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
    "@id": "CWE-noinfo",
    "@title": "No Mapping(CWE-noinfo)"
  },
  "title": "Vulnerability in JP1/VERITAS"
}

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2023/JVNDB-2023-003335.html",
  "dc:date": "2023-09-06T15:35+09:00",
  "dcterms:issued": "2023-09-06T15:35+09:00",
  "dcterms:modified": "2023-09-06T15:35+09:00",
  "description": "A vulnerability (VTS23-011) exists in JP1/VERITAS.",
  "link": "https://jvndb.jvn.jp/en/contents/2023/JVNDB-2023-003335.html",
  "sec:cpe": [
    {
      "#text": "cpe:/a:hitachi:jp1_veritas_netbackup",
      "@product": "JP1/VERITAS NetBackup",
      "@vendor": "Hitachi, Ltd",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:veritas:netbackup",
      "@product": "Veritas NetBackup",
      "@vendor": "Veritas Technologies LLC.",
      "@version": "2.2"
    }
  ],
  "sec:identifier": "JVNDB-2023-003335",
  "sec:references": [
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2023-40256",
      "@id": "CVE-2023-40256",
      "@source": "CVE"
    },
    {
      "#text": "https://nvd.nist.gov/vuln/detail/CVE-2023-40256",
      "@id": "CVE-2023-40256",
      "@source": "NVD"
    }
  ],
  "title": "Vulnerability in JP1/VERITAS"
}

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2008/JVNDB-2008-001895.html",
  "dc:date": "2008-12-01T11:10+09:00",
  "dcterms:issued": "2008-12-01T11:10+09:00",
  "dcterms:modified": "2008-12-01T11:10+09:00",
  "description": "The JAVA Administration Graphical User Interface (GUI) in JP1/VERITAS NetBackup contains a privilege escalation vulnerability.",
  "link": "https://jvndb.jvn.jp/en/contents/2008/JVNDB-2008-001895.html",
  "sec:cpe": [
    {
      "#text": "cpe:/a:hitachi:jp1_veritas_netbackup",
      "@product": "JP1/VERITAS NetBackup",
      "@vendor": "Hitachi, Ltd",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:symantec:veritas_netbackup_enterprise_server",
      "@product": "Symantec Veritas NetBackup Enterprise Server",
      "@vendor": "Symantec Corporation",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:symantec:veritas_netbackup_server",
      "@product": "Symantec Veritas NetBackup Server",
      "@vendor": "Symantec Corporation",
      "@version": "2.2"
    }
  ],
  "sec:cvss": {
    "@score": "6.5",
    "@severity": "Medium",
    "@type": "Base",
    "@vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
    "@version": "2.0"
  },
  "sec:identifier": "JVNDB-2008-001895",
  "sec:references": [
    {
      "#text": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4339",
      "@id": "CVE-2008-4339",
      "@source": "CVE"
    },
    {
      "#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-4339",
      "@id": "CVE-2008-4339",
      "@source": "NVD"
    },
    {
      "#text": "http://www.securityfocus.com/bid/31221",
      "@id": "31221",
      "@source": "BID"
    },
    {
      "#text": "http://www.securitytracker.com/id?1020928",
      "@id": "1020928",
      "@source": "SECTRACK"
    },
    {
      "#text": "http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001895.html",
      "@id": "JVNDB-2008-001895",
      "@source": "JVNDB_Ja"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-264",
      "@title": "Permissions(CWE-264)"
    }
  ],
  "title": "JP1/VERITAS NetBackup JAVA Administration GUI Privilege Escalation Vulnerability"
}

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2023/JVNDB-2023-001492.html",
  "dc:date": "2023-04-12T15:01+09:00",
  "dcterms:issued": "2023-04-12T15:01+09:00",
  "dcterms:modified": "2023-04-12T15:01+09:00",
  "description": "A vulnerability (VTS23-003) exists in JP1/VERITAS.",
  "link": "https://jvndb.jvn.jp/en/contents/2023/JVNDB-2023-001492.html",
  "sec:cpe": [
    {
      "#text": "cpe:/a:hitachi:jp1_veritas_netbackup",
      "@product": "JP1/VERITAS NetBackup",
      "@vendor": "Hitachi, Ltd",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:veritas:netbackup",
      "@product": "Veritas NetBackup",
      "@vendor": "Veritas Technologies LLC.",
      "@version": "2.2"
    }
  ],
  "sec:cvss": {
    "@score": "7.1",
    "@severity": "High",
    "@type": "Base",
    "@vector": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
    "@version": "3.0"
  },
  "sec:identifier": "JVNDB-2023-001492",
  "sec:references": {
    "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
    "@id": "CWE-noinfo",
    "@title": "No Mapping(CWE-noinfo)"
  },
  "title": "Vulnerability in JP1/VERITAS"
}

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2008/JVNDB-2008-001311.html",
  "dc:date": "2008-11-21T12:20+09:00",
  "dcterms:issued": "2008-05-21T00:00+09:00",
  "dcterms:modified": "2008-11-21T12:20+09:00",
  "description": "The PVATLCalendar.PVCalendar.1 (pvcalendar.ocx) ActiveX control, a scheduler component of the Media Server in Symantec Backup Exec for Windows Server (BEWS), includes the insecure Save() method that mishandles long strings assigned to various properties listed below, which can be exploited to cause stack-based buffer overflows.\r\n_DOWText0, _DOWText1, _DOWText2, _DOWText3, _DOWText4\r\n_DOWText5, _DOWText6, _MonthText0, _MonthText1, _MonthText2\r\n_MonthText3, _MonthText4, _MonthText5, _MonthText6, _MonthText7\r\n_MonthText8, _MonthText9, _MonthText10, _MonthText11",
  "link": "https://jvndb.jvn.jp/en/contents/2008/JVNDB-2008-001311.html",
  "sec:cpe": [
    {
      "#text": "cpe:/a:hitachi:jp1_veritas_backup_exec",
      "@product": "JP1/VERITAS Backup Exec",
      "@vendor": "Hitachi, Ltd",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:hitachi:jp1_veritas_netbackup",
      "@product": "JP1/VERITAS NetBackup",
      "@vendor": "Hitachi, Ltd",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:symantec:veritas_backup_exec",
      "@product": "Symantec Backup Exec for Windows Servers",
      "@vendor": "Symantec Corporation",
      "@version": "2.2"
    }
  ],
  "sec:cvss": {
    "@score": "9.3",
    "@severity": "High",
    "@type": "Base",
    "@vector": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
    "@version": "2.0"
  },
  "sec:identifier": "JVNDB-2008-001311",
  "sec:references": [
    {
      "#text": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6016",
      "@id": "CVE-2007-6016",
      "@source": "CVE"
    },
    {
      "#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2007-6016",
      "@id": "CVE-2007-6016",
      "@source": "NVD"
    },
    {
      "#text": "http://secunia.com/advisories/27885",
      "@id": "SA27885",
      "@source": "SECUNIA"
    },
    {
      "#text": "http://www.securityfocus.com/bid/26904",
      "@id": "26904",
      "@source": "BID"
    },
    {
      "#text": "http://securitytracker.com/id?1019524",
      "@id": "1019524",
      "@source": "SECTRACK"
    },
    {
      "#text": "http://www.frsirt.com/english/advisories/2008/0718",
      "@id": "FrSIRT/ADV-2008-0718",
      "@source": "FRSIRT"
    },
    {
      "#text": "http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001311.html",
      "@id": "JVNDB-2008-001311",
      "@source": "JVNDB_Ja"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-119",
      "@title": "Buffer Errors(CWE-119)"
    }
  ],
  "title": "Symantec Backup Exec for Windows Server ActiveX Control Multiple Buffer Overflow Vulnerabilities"
}

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2018/JVNDB-2018-009328.html",
  "dc:date": "2018-11-20T18:16+09:00",
  "dcterms:issued": "2018-11-15T17:16+09:00",
  "dcterms:modified": "2018-11-20T18:16+09:00",
  "description": "Multiple vulnerabilities have been found in JP1/VERITAS.",
  "link": "https://jvndb.jvn.jp/en/contents/2018/JVNDB-2018-009328.html",
  "sec:cpe": [
    {
      "#text": "cpe:/a:hitachi:jp1_veritas_netbackup",
      "@product": "JP1/VERITAS NetBackup",
      "@vendor": "Hitachi, Ltd",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:veritas:netbackup",
      "@product": "Veritas NetBackup",
      "@vendor": "Veritas Technologies LLC.",
      "@version": "2.2"
    }
  ],
  "sec:cvss": [
    {
      "@score": "10.0",
      "@severity": "High",
      "@type": "Base",
      "@vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
      "@version": "2.0"
    },
    {
      "@score": "9.8",
      "@severity": "Critical",
      "@type": "Base",
      "@vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "@version": "3.0"
    }
  ],
  "sec:identifier": "JVNDB-2018-009328",
  "sec:references": {
    "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
    "@id": "CWE-noinfo",
    "@title": "No Mapping(CWE-noinfo)"
  },
  "title": "Multiple Vulnerabilities in JP1/VERITAS"
}