248 matches found
Local privilege escalation due to excessive permissions assigned to child processes
...
Local privilege escalation due to DLL hijacking vulnerability
...
Credentials are not deleted from Acronis Agent after plan revocation
...
Sensitive information disclosure and manipulation due to insufficient authorization checks
...
Local privilege escalation due to improper directory permissions
...
Unauthorized data access due to insufficient access control validation
...
Local privilege escalation due to insecure Unix socket permissions
...
Credentials are not deleted from Acronis Agent after plan revocation
...
Sensitive data disclosure and manipulation due to improper authentication
...
Security update of Electron dependency
...
Sensitive information disclosure due to insecure folder permissions
Acronis Snap Deploy 6 License Server stored license serial numbers in cleartext in the file C:\ProgramData\Acronis\License Server\keys.xml, which was accessible to all users on the system. This allowed an authenticated local attacker with access to the file to retrieve and misuse the serial numbe...
Sensitive information disclosure and manipulation due to missing authorization
...
Sensitive information disclosure due to insufficient token field masking
...
Remote command execution due to improper input validation
...
Open redirect via user-controlled query parameter
...
Apache Log4j vulnerability
A critical security vulnerability has been identified in Apache Log4j library. The vulnerability has been assigned CVE-2021-44228. Apache Log4j JNDI Java Naming and Directory Interface features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and...
DLL hijacking could lead to denial of service
...
Local privilege escalation due to insecure XPC service configuration
...
Antiransomware microservice did not authenticate inter-service communication
...
Local privilege escalation due to improper input validation
...
Local privilege escalation due to DLL hijacking vulnerability
...
Local privilege escalation due to DLL hijacking vulnerability
...
Unnecessary transmission of sensitive cryptographic material
...
Denial of service due to insufficient input validation in authentication logging
...
Sensitive information disclosure due to improper authorization checks
...
Local privilege escalation due to DLL hijacking vulnerability
...
Local privilege escalation due to insecure folder permissions
...
Local privilege escalation due to DLL hijacking vulnerability
...
Security update of cURL dependency
...
Security update of cURL dependency
...
Arbitrary file overwrite during home directory recovery due to improper symbolic link handling
...
Security update of Apache Tomcat dependency
...
Local privilege escalation due to unquoted search path vulnerability
...
Sensitive information disclosure and manipulation due to missing authorization
...
Sensitive information manipulation due to cross-site request forgery
...
Sensitive information disclosure due to improper authorization
...
Sensitive information leak through log files
...
Sensitive information disclosure due to insecure folder permissions
...
Sensitive information leak through log files
...
Local privilege escalation during recovery due to improper soft link handling
...
Sensitive information disclosure due to missing authorization
...
Local privilege escalation due to insecure driver communication port permissions
...
Sensitive information disclosure due to insecure folder permissions
...
Local privilege escalation due to insecure folder permissions
...
A logic bug in system monitoring driver allows to bypass Windows memory protection and access sensitive data
...
Denial of service due to insecure folder permissions
...
Information disclosure was possible due to CORS misconfiguration in local notification service
...
Sensitive information disclosure and manipulation due to improper authentication
...