CVE-2024-56414

Web installer integrity check used weak hash algorithm. The following products are affected: Acronis Cyber Protect 16 Windows before build 39169...

CVE-2024-56413

Missing session invalidation after user deletion. The following products are affected: Acronis Cyber Protect 16 Windows before build 39169...

Acronis True Image 安全漏洞

Acronis True Image is a well-known data backup and restore software from the Swiss company Acronis. The software can be used to create drive and disk images and can restore the image when a clean system is needed. A security vulnerability exists in versions prior to Acronis True Image build 41736...

PT-2025-2831 · Acronis · Acronis True Image

Name of the Vulnerable Software and Affected Versions: Acronis True Image Windows before build 41736 Description: Sensitive information disclosure is possible due to insecure folder permissions. This issue affects Acronis True Image on Windows. Recommendations: For Acronis True Image Windows befo...

Acronis True Image 访问控制错误漏洞

Acronis True Image is a well-known data backup and restore software from the Swiss company Acronis. The software can be used to create drive and disk images and can restore the image when a clean system is needed. An Access Control Error vulnerability exists in versions prior to Acronis True Imag...

Acronis Cyber Protect 跨站脚本漏洞

Acronis Cyber Protect is an all-in-one cyber protection solution for business and enterprise from Acronis Switzerland. It combines backup, anti-malware, network security and endpoint management features e.g. vulnerability assessment, URL filtering, patch management, etc.. A cross-site scripting...

PT-2025-1146 · Acronis · Acronis Cyber Protect

Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect 16 versions prior to build 39169 Description: The issue is related to a stored cross-site scripting XSS vulnerability due to missing origin validation in postMessage. This vulnerability can be exploited by a remote...

PT-2025-3129 · Acronis · Acronis Cyber Protect 16 +1

Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect 16 versions prior to build 39169 Acronis Cyber Protect Cloud Agent versions prior to build 35895 Description: The issue is related to local privilege escalation due to excessive permissions assigned to the Tray Monitor...

Fedora: Security Advisory (FEDORA-2024-0fa283c43a)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-3276 · Acronis · Acronis Cyber Protect 16

Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect 16 Windows versions before build 39169 Description: The issue is related to missing session invalidation after a user is deleted. This means that even after a user's account is deleted, their session remains active. The...

Acronis Cyber Protect 代码问题漏洞

Acronis Cyber Protect is an all-in-one cyber protection solution for business and enterprise from Acronis Switzerland. Combining backup, anti-malware, network security and endpoint management features such as vulnerability assessment, URL filtering, patch management and more. A code issue...

PT-2025-30872

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.15.0-rc6-syzkaller-00346-g5723cc3450bc Description A NULL pointer dereference issue exists in the vcc sendmsg function within the Linux kernel's atm subsystem. This occurs because atmarpd dev ops does not...

PT-2025-37452

Name of the Vulnerable Software and Affected Versions: GNU Guix versions prior to 1618ca7 Description: A content-addressed-mirrors file can be written to create a setuid program. This allows a regular user to gain the privileges of the build user, even after the build process has completed...

CVE-2024-45497

A flaw was found in the OpenShift build process, where the docker-build container is configured with a hostPath volume mount that maps the node's /var/lib/kubelet/config.json file into the build pod. This file contains sensitive credentials necessary for pulling images from private repositories...

CVE-2024-45497

A flaw was found in the OpenShift build process, where the docker-build container is configured with a hostPath volume mount that maps the node's /var/lib/kubelet/config.json file into the build pod. This file contains sensitive credentials necessary for pulling images from private repositories...

CVE-2024-45497

A flaw was found in the OpenShift build process, where the docker-build container is configured with a hostPath volume mount that maps the node's /var/lib/kubelet/config.json file into the build pod. This file contains sensitive credentials necessary for pulling images from private repositories...

CVE-2024-45497 Openshift-api: openshift-controller-manager/build: build process in openshift allows overwriting of node pull credentials

A flaw was found in the OpenShift build process, where the docker-build container is configured with a hostPath volume mount that maps the node's /var/lib/kubelet/config.json file into the build pod. This file contains sensitive credentials necessary for pulling images from private repositories...

CVE-2024-45497 Openshift-api: openshift-controller-manager/build: build process in openshift allows overwriting of node pull credentials

A flaw was found in the OpenShift build process, where the docker-build container is configured with a hostPath volume mount that maps the node's /var/lib/kubelet/config.json file into the build pod. This file contains sensitive credentials necessary for pulling images from private repositories...

CVE-2024-45497

The CVE-2024-45497 entry describes a flaw in the OpenShift build process where a docker-build container mounts the node’s /var/lib/kubelet/config.json via a hostPath volume into the build pod. The config.json contains credentials for pulling private images, and the mount is not read-only, enablin...

Fedora 41 : iwd / libell (2024-256818da09)

The remote Fedora 41 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2024-256818da09 advisory. iwd 3.3: Fix issue with handling External Authentication. iwd 3.2: Fix issue with GCC 15 and -std=c23 build errors. Add support for using PMKSA over SAE if...