3954 matches found
CVE-2022-30995
CVE-2022-30995 affects Acronis Cyber Protect 15 (Windows, Linux) before build 29486 and Acronis Cyber Backup 12.5 (Windows, Linux) before build 16545. The root cause is an improper authentication flow that leads to sensitive information disclosure. Public sources (NVD, Red Hat, CIRCL/CVE data) de...
CVE-2022-30995
Sensitive information disclosure due to improper authentication. The following products are affected: Acronis Cyber Protect 15 Windows, Linux before build 29486, Acronis Cyber Backup 12.5 Windows, Linux before build 16545...
CVE-2022-30995
Sensitive information disclosure due to improper authentication. The following products are affected: Acronis Cyber Protect 15 Windows, Linux before build 29486, Acronis Cyber Backup 12.5 Windows, Linux before build 16545...
CVE-2022-3405
Code execution and sensitive information disclosure due to excessive privileges assigned to Acronis Agent. The following products are affected: Acronis Cyber Protect 15 Windows, Linux before build 29486, Acronis Cyber Backup 12.5 Windows, Linux before build 16545...
CVE-2022-3405
Code execution and sensitive information disclosure due to excessive privileges assigned to Acronis Agent. The following products are affected: Acronis Cyber Protect 15 Windows, Linux before build 29486, Acronis Cyber Backup 12.5 Windows, Linux before build 16545...
CVE-2022-3405
CVE-2022-3405 affects Acronis Cyber Protect 15 (Windows, Linux) before build 29486 and Acronis Cyber Backup 12.5 (Windows, Linux) before build 16545, caused by excessive privileges granted to the Acronis Agent which enables code execution and sensitive information disclosure. Public disclosures i...
Acronis Cyber Backup和Acronis Cyber Protect 安全漏洞
Acronis Cyber Backup and Acronis Cyber Protect are both products of Singapore Acronis Acronis.Acronis Cyber Backup is a data backup product. You can backup virtual machines and hosts, support for windows, linux backup, using AcronisInstantRestore to provide extremely fast recovery performance, an...
Acronis Cyber Backup和Acronis Cyber Protect 授权问题漏洞
Acronis Cyber Backup and Acronis Cyber Protect are both products of Singapore Acronis Acronis.Acronis Cyber Backup is a data backup product. You can backup virtual machines and hosts, support for windows, linux backup, using AcronisInstantRestore to provide extremely fast recovery performance, an...
WhatsApp introduces new security features
WhatsApp has announced several new security features which include an extra check when an account is transferred to a new device. This check asks that users confirm the transfer on their old device. This should warn users in case there is a transfer in progress started by somebody trying to hijac...
The vulnerabilities of the `stack_protect_prologue` and `stack_protect_epilogue` functions in the GNU Compiler Collection (GCC) for various programming languages allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerabilities of functions stackprotectprologue cfgexpand.c and stackprotectepilogue function.c are related to information leakage in error messages. Exploiting these vulnerabilities can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...
Acronis: Stored XSS in plan name field (Acronis Cyber Protect)
A stored XSS vulnerability was identified in the plan name field of Acronis Cyber Protect. This vulnerability allowed an attacker to execute arbitrary JavaScript code in the context of the affected user, potentially leading to unauthorized access or phishing attacks...
Akamai Managed Security Service: New Expert Help to Protect from Attacks
...
The vulnerability of the Adobe Experience Manager (AEM) content and media data management system, related to the lack of measures taken to protect the website structure, allows a hacker to execute arbitrary code.
The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
Security Bulletin: Vulnerabilities in PostgreSQL may affect IBM Spectrum Protect Plus (CVE-2022-2625, CVE-2022-1552, CVE-2021-3677)
Summary IBM Spectrum Protect Plus can be affected by vulnerabilities in PostgreSQL. Vulnerabilities include obtaining sensitive information and remote execution of arbitrary code, as described by the CVEs in the "Vulnerability Details" section. These vulnerabilities have been addressed...
PT-2023-17142 · Iobit · Iobit Malware Fighter
Name of the Vulnerable Software and Affected Versions: IObit Malware Fighter version 9.4.0.776 Description: A vulnerability was found in the function 0x8018E010 in the library IMFCameraProtect.sys of the component IOCTL Handler, leading to denial of service. The manipulation can be launched on th...
PT-2023-2361 · Iobit · Iobit Malware Fighter
Name of the Vulnerable Software and Affected Versions: IObit Malware Fighter version 9.4.0.776 Description: The issue is related to the incorrect cleanup or release of resources in the IMFCameraProtect.sys component of IObit Malware Fighter. This can lead to a denial of service when exploited. Th...
Security Bulletin: Vulnerabilities in Node.js, libcurl, Golang Go, Jetty, Guava, Netty, OpenSSL, Linux kernel may affect IBM Spectrum Protect Plus
Summary IBM Spectrum Protect Plus can be affected by vulnerabilities in Node.js, libcurl, Golang Go, Jetty, Guava, Netty, OpenSSL and Linux. Vulnerabilities include obtaining sensitive information, causing a denial of service condition, the elevation of privileges, query parameter smuggling, remo...
Security Bulletin: Stored SMB credentials may allow access to vSnap after oracle backup in IBM Spectrum Protect Plus for Db2 and Oracle (CVE-2023-27863)
Summary IBM Spectrum Protect Plus for Db2 and Oracle with transport encryption enabled can possibly expose SMB credentials to access vSnap data stores, as described by the CVEs in the "Vulnerability Details" section. Vulnerability Details CVEID:CVE-2023-27863 DESCRIPTION: IBM Spectrum Protect Plu...
Security Bulletin: Vulnerabilites in OpenSSL may affect IBM Spectrum Protect Backup-Archive Client NetApp Services (CVE-2022-4304, CVE-2023-0215, CVE-2023-0286)
Summary IBM Spectrum Protect Backup-Archive Client's use of NetApp Services can be affected by vulnerabilities in OpenSSL. Vulnerabilities include disclosure of sensitive information and denial of service, as described by the CVEs in the "Vulnerability Details" section. Vulnerability Details...
