Design/Logic Flaw

A vulnerability found in UniFi Protect application V1.18.1 and earlier allows a malicious actor with a view-only role and network access to gain the same privileges as the owner of the UniFi Protect application. This vulnerability is fixed in UniFi Protect application V1.19.0 and later...

Design/Logic Flaw

A vulnerability found in UniFi Protect application V1.18.1 and earlier permits a malicious actor who has already gained access to a network to subsequently control the Protect cameras assigned to said network. This vulnerability is fixed in UniFi Protect application V1.19.0 and later...

CVE-2021-22943

A vulnerability found in UniFi Protect application V1.18.1 and earlier permits a malicious actor who has already gained access to a network to subsequently control the Protect cameras assigned to said network. This vulnerability is fixed in UniFi Protect application V1.19.0 and later...

CVE-2021-22943

A vulnerability found in UniFi Protect application V1.18.1 and earlier permits a malicious actor who has already gained access to a network to subsequently control the Protect cameras assigned to said network. This vulnerability is fixed in UniFi Protect application V1.19.0 and later...

CVE-2021-22943

CVE-2021-22943 affects UniFi Protect application versions 1.18.1 and earlier. Affected component: Protect camera management within UniFi Protect. Nature of issue: a user already on the network can, due to insufficient access control, subsequently take control of the Protect cameras assigned to th...

CVE-2021-22944

The CVE-2021-22944 vulnerability affects UniFi Protect (versions 1.18.1 and earlier) where a user with a view-only role and network access can gain the same privileges as the application owner. The issue is described as an access control error leading to privilege escalation. The fixed version is...

CVE-2021-22944

A vulnerability found in UniFi Protect application V1.18.1 and earlier allows a malicious actor with a view-only role and network access to gain the same privileges as the owner of the UniFi Protect application. This vulnerability is fixed in UniFi Protect application V1.19.0 and later...

Ubiquiti Networks UniFi Protect 授权问题漏洞

Ubiquiti Networks UniFi Protect is a network video recorder from Ubiquiti Networks, Inc. A security vulnerability exists in Ubiquiti Networks UniFi Protect application version 1.18.1 and prior, which can be exploited by attackers to A malicious actor who gains access to the network can take contr...

Ubiquiti Networks UniFi Protect 访问控制错误漏洞

An access control error vulnerability exists in Ubiquiti Networks UniFi Protect, a network video recorder from Ubiquiti Networks, Inc. The vulnerability is caused by the product not adding effective privilege control for accessers with view-only access, network access. An attacker could use this...

CVE-2021-38086

Acronis Cyber Protect 15 for Windows prior to build 27009 and Acronis Agent for Windows prior to build 26226 allowed local privilege escalation via DLL hijacking...

CVE-2021-38088

Acronis Cyber Protect 15 for Windows prior to build 27009 allowed local privilege escalation via binary hijacking...

CVE-2021-38087

Reflected cross-site scripting XSS was possible on the login page in Acronis Cyber Protect 15 prior to build 27009...

CVE-2021-38088

Acronis Cyber Protect 15 for Windows prior to build 27009 allowed local privilege escalation via binary hijacking...

CVE-2021-38086

Acronis Cyber Protect 15 for Windows prior to build 27009 and Acronis Agent for Windows prior to build 26226 allowed local privilege escalation via DLL hijacking...

CVE-2021-38087

Reflected cross-site scripting XSS was possible on the login page in Acronis Cyber Protect 15 prior to build 27009...

Privilege escalation

Acronis Cyber Protect 15 for Windows prior to build 27009 allowed local privilege escalation via binary hijacking...

Cross site scripting

Reflected cross-site scripting XSS was possible on the login page in Acronis Cyber Protect 15 prior to build 27009...

CVE-2021-38087

Reflected cross-site scripting XSS was possible on the login page in Acronis Cyber Protect 15 prior to build 27009...

CVE-2021-38088

Acronis Cyber Protect 15 for Windows prior to build 27009 allowed local privilege escalation via binary hijacking...

Privilege escalation

Acronis Cyber Protect 15 for Windows prior to build 27009 and Acronis Agent for Windows prior to build 26226 allowed local privilege escalation via DLL hijacking...