248 matches found
Unauthenticated attacker having local code execution may tamper with microservice API
...
Sensitive information disclosure and manipulation due to improper authorization
...
Local privilege escalation due to DLL hijacking vulnerability
...
Replace satori/go.uuid dependency
...
Local privilege escalation due to insecure file permissions
Exploitation of this vulnerability has been detected in the wild in limited, targeted attacks against Acronis Backup plugin for cPanel & WHM deployments...
Local privilege escalation due to unrestricted loading of unsigned libraries
...
Local privilege escalation due to a DLL hijacking vulnerability
...
Local privilege escalation due to insecure folder permissions
...
Sensitive information disclosure and manipulation due to improper certification validation
...
Local privilege escalation due to DLL hijacking vulnerability in Acronis Media Builder service
...
Local active protection service settings manipulation due to unnecessary privileges assignment
...
MOVEit transfer critical vulnerability
The Progress Community team released a security advisory and fixes for one critical severity security issue affecting all MOVEit Transfer versions. The issue was assigned CVE-2023-34362. Acronis security team concluded that Acronis infrastructure and products are not affected by this vulnerabilit...
Local privilege escalation due to DLL hijacking vulnerability
...
Security update of third-party dependencies
...
Local privilege escalation due to DLL hijacking vulnerability
...
Security update of Linux kernel
Linux kernel was updated to address multiple high severity vulnerabilities...
Local privilege escalation due to DLL hijacking vulnerability
...
Local privilege escalation due to DLL hijacking vulnerability
...
Local privilege escalation due to insecure folder permissions
...
Security update of libxml2 dependency
...
Sensitive information disclosure due to improper configuration of a headless browser
...
Local privilege escalation due to improper soft link handling
...
Security update of third-party dependencies
...
Security update of Apache Tomcat dependency
...
Security update of Elasticsearch dependency
...
Security update of Apache HTTP Server
Apache HTTP Server was updated to address a high severity vulnerability...
Unauthorized report deletion due to insufficient access control
...
Local privilege escalation due to DLL hijacking vulnerability
...
Sensitive information disclosure due to improper access control
...
Local privilege escalation due to a binary hijacking vulnerability
...
Local privilege escalation due to DLL hijacking vulnerability
...
Local privilege escalation due to DLL hijacking vulnerability
...
Sensitive data disclosure and manipulation due to unnecessary privileges assignment
...
Local privilege escalation due to improper handling of environment variables
...
OpenSSL high severity vulnerability CVE-2025-15467
OpenSSL disclosed CVE-2025-15467, initially rated as critical and later revised to high severity. Acronis security team concluded that Acronis infrastructure and products are not affected by this vulnerability, as the impacted functionality is not in use...
Local privilege escalation due to insecure XPC service configuration
...
Local privilege escalation due to improper soft link handling
...
Stored cross-site scripting (XSS) vulnerability in protection plan name
...
Sensitive information manipulation due to cross-site request forgery
...
Denial of service due to unauthenticated API endpoint
...
Security update of sqlite3 dependency
...
Security update of Socket.io JavaScript library
Socket.io JavaScript library was updated to address a medium severity vulnerability...
Local privilege escalation due to excessive permissions assigned to child processes
...
Local privilege escalation due to DLL hijacking vulnerability
...
Local privilege escalation due to improper input validation
...
Local privilege escalation due to improper soft link handling
...
Default credentials set for local privileged user in Virtual Appliance
...
Sensitive information disclosure and manipulation due to insufficient authorization checks
...