CVE-2025-52856

The CVE-2025-52856 vulnerability affects QNAP VioStor. Description confirms an improper authentication flaw that could allow a remote attacker to compromise the system. The issue is addressed in VioStor 5.1.6 build 20250621 and later, which GPT notes as the fixed version. Connected sources consis...

CVE-2025-52856 VioStor

An improper authentication vulnerability has been reported to affect VioStor. If a remote attacker, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following version: VioStor 5.1.6 build 20250621 and later...

CVE-2025-30274 QTS, QuTS hero

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the following versions: QTS 5.2.5.3145 build 20250526 and later...

CVE-2025-30271

The CVE-2025-30271 entry describes a path-traversal vulnerability affecting QNAP QTS and QuTS hero. A remote attacker who has an existing user account could read contents of unexpected files or system data. The issue has been addressed in fixed releases: QTS 5.2.5.3145 build 20250526 and later, a...

CVE-2025-30267 QTS, QuTS hero

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the following...

CVE-2025-30264 QTS, QuTS hero

A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to execute arbitrary commands. We have already fixed the vulnerability in the following versions: QTS 5.2.5.3145...

Click Studios Patches Passwordstate Authentication Bypass Vulnerability in Emergency Access Page

Click Studios, the developer of enterprise-focused password management solution Passwordstate, said it has released security updates to address an authentication bypass vulnerability in its software. The high-severity issue, which is yet to be assigned a CVE identifier, has been addressed in...

PT-2025-35294

Name of the Vulnerable Software and Affected Versions: VioStor versions prior to 5.1.6 build 20250621 Description: A path traversal vulnerability exists in VioStor. A remote attacker gaining administrator access can potentially read the contents of unexpected files or system data. Recommendations...

PT-2025-35293

Name of the Vulnerable Software and Affected Versions VioStor versions prior to 5.1.6 build 20250621 Description An improper authentication issue has been reported in VioStor, potentially allowing a remote attacker to compromise system security. Recommendations Update to VioStor version 5.1.6 bui...

CVE-2025-9578

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 40734...

CVE-2025-9578

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 40734...

CVE-2025-9578

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 40734...

CVE-2025-9578

CVE-2025-9578 affects Acronis Cyber Protect Cloud Agent (Windows) prior to build 40734. A local privilege escalation arises from insecure folder permissions in the agent, enabling a non-privileged user to gain higher privileges on the host. The issue is documented across multiple sources (Red Hat...

MAL-2025-42126 Malicious code in azure-functions-templates-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b042b6071c2aede4bcb5d299376c83daa1a911adb92cc27204804dba0b29dbc3 The OpenSSF Package Analysis project identified 'azure-functions-templates-build' @ 1.0.0 npm as malicious. It is considered malicious because: ...

CVE-2025-48963

Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protect Cloud Agent Linux, macOS, Windows before build 40296...

CVE-2025-48963

Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protect Cloud Agent Linux, macOS, Windows before build 40296...

CVE-2025-48963

CVE-2025-48963 : Affected product is Acronis Cyber Protect Cloud Agent on Linux, macOS, and Windows with builds before 40296. The issue is a local privilege escalation caused by improper soft link handling. CVSSv3.0 metrics indicate Privileges Required: Low, User Interaction: Required, Attack Vec...

PT-2025-35090

Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect Cloud Agent Windows versions prior to build 40734 Description: The issue involves local privilege escalation due to insecure folder permissions. Recommendations: Update Acronis Cyber Protect Cloud Agent Windows to build...

Acronis Cyber Protect Cloud Agent 安全漏洞

Acronis Cyber Protect Cloud Agent is a cloud agent from Acronis Switzerland. A security vulnerability exists in versions prior to Acronis Cyber Protect Cloud Agent build 40734, which stems from insecure folder permissions that could lead to local elevation of privileges...

PT-2025-34981

Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect Cloud Agent Linux, macOS, Windows versions prior to build 40296 Description: The issue involves local privilege escalation due to improper soft link handling. Recommendations: Update Acronis Cyber Protect Cloud Agent to...