Lucene search
+L

2161 matches found

Vulnrichment
Vulnrichment
added 2024/11/11 1:21 p.m.12 views

CVE-2024-34015

Sensitive information disclosure during file browsing due to improper symbolic link handling. The following products are affected: Acronis Backup plugin for cPanel & WHM Linux before build 1.8.3.818, Acronis Backup plugin for cPanel & WHM Linux before build 1.9.1.892...

3.3CVSS3.8AI score0.00205EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/11/11 1:21 p.m.20 views

CVE-2024-34015

Sensitive information disclosure during file browsing due to improper symbolic link handling. The following products are affected: Acronis Backup plugin for cPanel & WHM Linux before build 1.8.3.818, Acronis Backup plugin for cPanel & WHM Linux before build 1.9.1.892...

3.3CVSS0.00205EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/11 1:21 p.m.60 views

CVE-2024-34015

CVE-2024-34015 involves a sensitive information disclosure in the Acronis Backup plugin for cPanel & WHM (Linux) due to improper symbolic-link handling. Affected versions are: plugin builds prior to 1.8.3.818 and prior to 1.9.1.892. The vulnerability enables information disclosure during file bro...

3.3CVSS3.8AI score0.00205EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/11/11 1:20 p.m.7 views

CVE-2024-34014

Arbitrary file overwrite during recovery due to improper symbolic link handling. The following products are affected: Acronis Backup plugin for cPanel & WHM Linux before build 1.8.3.818, Acronis Backup plugin for cPanel & WHM Linux before build 1.9.1.892, Acronis Backup extension for Plesk Linux...

5.5CVSS5.5AI score0.00197EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/11 1:20 p.m.52 views

CVE-2024-34014

CVE-2024-34014 affects Acronis Backup plugin for cPanel & WHM (Linux) prior to builds 1.8.3.818 and 1.9.1.892, Acronis Backup extension for Plesk prior to 1.8.6.599, and Acronis Backup plugin for DirectAdmin prior to 1.2.2.181. The vulnerability is an arbitrary file overwrite during recovery caus...

5.5CVSS5.5AI score0.00197EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/11/11 1:20 p.m.26 views

CVE-2024-34014

Arbitrary file overwrite during recovery due to improper symbolic link handling. The following products are affected: Acronis Backup plugin for cPanel & WHM Linux before build 1.8.3.818, Acronis Backup plugin for cPanel & WHM Linux before build 1.9.1.892, Acronis Backup extension for Plesk Linux...

5.5CVSS0.00197EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/11 12:00 a.m.7 views

Acronis多款产品 安全漏洞

Acronis Backup plugin for cPanel & WHM Linux, etc. is a plugin from Acronis Switzerland. A security vulnerability exists in various Acronis products that stems from improper handling of symbolic links, resulting in arbitrary file overwrites during recovery. The following products and versions are...

5.5CVSS5.6AI score0.00197EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/11/11 12:00 a.m.10 views

PT-2024-25641 · Acronis · Acronis Backup Plugin For Cpanel & Whm

Name of the Vulnerable Software and Affected Versions: Acronis Backup plugin for cPanel & WHM Linux versions prior to build 818 Description: The issue is related to sensitive information disclosure during file browsing due to improper symbolic link handling. This can lead to unauthorized access a...

3.3CVSS6.7AI score0.00205EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2024/11/11 12:00 a.m.8 views

Acronis Backup plugin for cPanel & WHM (Linux) 安全漏洞

Acronis Backup plugin for cPanel & WHM Linux is a plugin from Acronis Switzerland. A security vulnerability exists in Acronis Backup plugin for cPanel & WHM Linux versions prior to 818, which stems from improper handling of symbolic links, resulting in the disclosure of sensitive information duri...

3.3CVSS4.1AI score0.00205EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2024/10/30 12:00 a.m.12 views

The vulnerability of Acronis Cyber Protect 16’s data protection software lies in its ability to bypass authentication by using a user-controlled key. This allows attackers to increase their privileges.

The vulnerability of Acronis Cyber Protect 16 data protection software lies in the ability to bypass authentication by using a user-controlled key. Exploiting this vulnerability allows a malicious actor to enhance their privileges remotely...

9.4CVSS5.3AI score0.00266EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/10/30 12:00 a.m.13 views

The vulnerability of Acronis Cyber Protect 16’s data protection software lies in its use of an unprotected communication channel for data transmission, allowing attackers to gain unauthorized access to confidential information.

The vulnerability of Acronis Cyber Protect 16 data protection software lies in the use of an unprotected communication channel for data transmission. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to confidential information...

7.8CVSS5.9AI score0.00161EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2024/10/17 10:15 a.m.10 views

CVE-2024-49392

Stored cross-site scripting XSS vulnerability on enrollment invitation page. The following products are affected: Acronis Cyber Files Windows before build 9.0.0x24...

4.8CVSS5.7AI score0.00217EPSS
SaveExploits0References1
OSV
OSV
added 2024/10/17 10:15 a.m.9 views

CVE-2024-49390

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Files Windows before build 9.0.0x24...

7.3CVSS7.1AI score0.00164EPSS
SaveExploits0References1
NVD
NVD
added 2024/10/17 10:15 a.m.29 views

CVE-2024-49392

Stored cross-site scripting XSS vulnerability on enrollment invitation page. The following products are affected: Acronis Cyber Files Windows before build 9.0.0x24...

5.7CVSS0.00217EPSS
SaveExploits0References1
NVD
NVD
added 2024/10/17 10:15 a.m.26 views

CVE-2024-49391

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Files Windows before build 9.0.0x24...

7.3CVSS0.00139EPSS
SaveExploits0References1
OSV
OSV
added 2024/10/17 10:15 a.m.10 views

CVE-2024-49391

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Files Windows before build 9.0.0x24...

7.3CVSS6.7AI score0.00139EPSS
SaveExploits0References1
NVD
NVD
added 2024/10/17 10:15 a.m.23 views

CVE-2024-49390

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Files Windows before build 9.0.0x24...

7.3CVSS0.00164EPSS
SaveExploits0References1
OSV
OSV
added 2024/10/17 10:15 a.m.11 views

CVE-2024-49389

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Files Windows before build 9.0.0x24...

7.8CVSS7.1AI score0.00138EPSS
SaveExploits0References1
NVD
NVD
added 2024/10/17 10:15 a.m.20 views

CVE-2024-49389

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Files Windows before build 9.0.0x24...

7.8CVSS0.00138EPSS
SaveExploits0References1
OSV
OSV
added 2024/10/17 10:15 a.m.13 views

CVE-2024-49386

Sensitive information disclosure due to spell-jacking. The following products are affected: Acronis Cyber Files Windows before build 9.0.0x24...

5.7CVSS6.2AI score0.0024EPSS
SaveExploits0References1
Rows per page
Query Builder