247 matches found
Sensitive data disclosure and manipulation due to unnecessary privileges assignment
...
Sensitive information disclosure due to improper configuration of a headless browser
...
Antiransomware microservice did not authenticate inter-service communication
...
Security update of Apache HTTP Server
Apache HTTP Server was updated to address a high severity vulnerability...
Security update of third-party dependencies
...
Local privilege escalation due to insecure Unix socket permissions
...
Unauthorized data access due to insufficient access control validation
...
Security update of cURL dependency
...
Local privilege escalation due to a binary hijacking vulnerability
...
Arbitrary file overwrite during home directory recovery due to improper symbolic link handling
...
Weak algorithm used to sign RPM package
...
Sensitive information disclosure due to insecure folder permissions
...
Sensitive information disclosure due to excessive collection of system information
...
Local privilege escalation due to insecure driver communication port permissions
...
Local privilege escalation due to DLL hijacking vulnerability
...
Security update of Log4net dependency
...
Security update of Elasticsearch dependency
...
DLL hijacking could lead to denial of service
...
Acronis Cyber Backup is vulnerable to privilege escalation via openssl.cnf file
...
Security update of Socket.io JavaScript library
Socket.io JavaScript library was updated to address a medium severity vulnerability...
Security update of Linux kernel
Linux kernel was updated to address multiple high severity vulnerabilities...
Local privilege escalation due to excessive permissions assigned to child processes
...
Local privilege escalation due to EXE hijacking vulnerability
...
Local privilege escalation due to DLL hijacking vulnerability
...
Local privilege escalation due to DLL hijacking vulnerability
...
Local privilege escalation due to DLL hijacking vulnerability
...
Credentials are not deleted from Acronis Agent after plan revocation
...
Unauthorized modification of settings due to insufficient authorization checks
...
Sensitive information disclosure due to improper authorization checks
...
Local privilege escalation due to DLL hijacking vulnerability
...
Denial of service due to insufficient input validation in authentication logging
...
Unauthorized resource manipulation due to improper authorization checks
...
Local privilege escalation due to improper soft link handling
...
Local privilege escalation due to DLL hijacking vulnerability
...
Sensitive information disclosure due to improper access control
...
Local privilege escalation due to DLL hijacking vulnerability
...
Security update of third-party dependencies
...
Weak server key used for TLS encryption
...
Sensitive information disclosure due to SSRF
...
Security update of cURL dependency
...
Local privilege escalation due to unquoted search path vulnerability
...
Local privilege escalation due to DLL hijacking vulnerability
...
Missing session invalidation after user deletion
...
Stored cross-site scripting (XSS) vulnerability due to missing origin validation in postMessage
...
Sensitive information disclosure during file browsing due to improper symbolic link handling
Acronis Backup plugin for cPanel & WHM had a vulnerability in handling symbolic links during file browsing. This vulnerability allowed plugin users with unprivileged local access to the server to view file names in directories they normally could not access. By creating a symbolic link in their...
Local privilege escalation due to DLL hijacking vulnerability
...
Sensitive information disclosure due to spell-jacking
...
Local privilege escalation due to DLL hijacking vulnerability
...
Sensitive data disclosure and manipulation due to unnecessary privileges assignment
...
Sensitive information disclosure due to insecure folder permissions
Acronis Snap Deploy 6 License Server stored license serial numbers in cleartext in the file C:\ProgramData\Acronis\License Server\keys.xml, which was accessible to all users on the system. This allowed an authenticated local attacker with access to the file to retrieve and misuse the serial numbe...