PT-2022-26525 · Siemens · Syngo Dynamics

Name of the Vulnerable Software and Affected Versions: syngo Dynamics versions prior to VA40G HF01 Description: A vulnerability has been identified in the syngo Dynamics application server, which hosts a web service using an operation with improper write access control. This could allow writing...

PT-2022-27520 · Acronis · Acronis Agent +2

Name of the Vulnerable Software and Affected Versions: Acronis Agent Windows versions before build 30161 Acronis Cyber Protect 15 Windows versions before build 30984 Description: The issue is related to sensitive information disclosure due to insecure folder permissions. Recommendations: For...

PT-2022-6627 · Acronis · Acronis Agent +2

Name of the Vulnerable Software and Affected Versions: Acronis Agent versions before build 30430 Acronis Cyber Protect 15 versions before build 30984 Description: The issue is related to local privilege escalation due to insecure folder permissions. This can allow an attacker to elevate their...

PostmagThemes Demo < 1.0.8 - Admin+ Arbitrary File Upload

The plugin does not validate the imported file, allowing high-privilege users such as admin to upload arbitrary files such as PHP leading to RCE. 1. Go to Appearance » Import Demo Data » Manual demo files upload » Run "Choose a JSON file for customizer import" and import a PHP file. 2. Click Impo...

CVE-2022-34824

Weak File and Folder Permissions vulnerability in CLUSTERPRO X 5.0 for Windows and earlier, EXPRESSCLUSTER X 5.0 for Windows and earlier, CLUSTERPRO X 5.0 SingleServerSafe for Windows and earlier, EXPRESSCLUSTER X 5.0 SingleServerSafe for Windows and earlier allows a remote unauthenticated attack...

CVE-2022-34824

CVE-2022-34824 affects CLUSTERPRO X (v5.0 and earlier), EXPRESSCLUSTER X (v5.0 and earlier), CLUSTERPRO X SingleServerSafe (v5.0 and earlier), and EXPRESSCLUSTER X SingleServerSafe (v5.0 and earlier). The root cause is weak file and folder permissions, enabling a remote unauthenticated attacker t...

CVE-2022-44746

Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Home Office Windows before build 40107...

Information disclosure

Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Home Office Windows before build 40107...

CVE-2022-44733

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Home Office Windows before build 39900...

CVE-2022-44732

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Home Office Windows before build 39900...

CVE-2022-44732

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Home Office Windows before build 39900...

Privilege escalation

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Home Office Windows before build 39900...

Privilege escalation

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Home Office Windows before build 39900...

CVE-2022-44746

The CVE-2022-44746 issue affects Acronis Cyber Protect Home Office for Windows prior to build 40107 . The root cause is insecure folder permissions that can lead to sensitive information disclosure . Public documentation from multiple sources confirms affected versions and the same remediation: u...

CVE-2022-44746

Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Home Office Windows before build 40107...

CVE-2022-44746

Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Home Office Windows before build 40107...

CVE-2022-44733

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Home Office Windows before build 39900...

CVE-2022-44733

CVE-2022-44733 affects Acronis Cyber Protect Home Office for Windows prior to build 39900. The vulnerability is a local privilege escalation caused by insecure folder permissions in the product’s installation or runtime environment. Documented impact: confidentiality, integrity, and availability ...

CVE-2022-44732

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Home Office Windows before build 39900...

CVE-2022-44732

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Home Office Windows before build 39900...