251 matches found
Local privilege escalation due to insecure folder permissions
...
Local privilege escalation due to insecure folder permissions
...
Local privilege escalation due to unquoted search path vulnerability
...
Local privilege escalation due to DLL hijacking vulnerability
...
Missing session invalidation after user deletion
...
Security update of Crow dependency
...
Local privilege escalation due to DLL hijacking vulnerability
...
Security update of Crow dependency
...
Sensitive information disclosure due to missing authorization
...
Sensitive information disclosure and manipulation due to missing authorization
...
Sensitive information disclosure and manipulation due to missing authorization
...
Sensitive information disclosure and manipulation due to improper authentication
...
Security update of cURL dependency
...
Local privilege escalation due to insecure folder permissions
...
Security update of OpenSSL dependency
...
Local privilege escalation due to improper soft link handling
...
High severity vulnerabilities in OpenSSL 3.0
The OpenSSL project team released a security advisory for two high severity security issues affecting OpenSSL versions 3.0.0-3.0.6 and fixed in OpenSSL 3.0.7. The issues were assigned CVE-2022-3602 and CVE-2022-3786. Acronis security team concluded that Acronis infrastructure and products are not...
Cleartext transmission of sensitive information
...
Cleartext transmission of sensitive information
...
HTML injection via report name
...
Local privilege escalation due to insecure folder permissions
...
Local privilege escalation due to excessive permissions assigned to child processes
...
Local privilege escalation due to race condition on application startup
...
Stored cross-site scripting (XSS) was possible in activity details
...
Local privilege escalation due to insecure XPC service configuration
...
Local privilege escalation due to improper soft link handling
...
Cross-site scripting (XSS) in activities panel
...
Denial of service due to allocation of resources without limits
...
Local privilege escalation due to insecure folder permissions
...
Web installer integrity check used weak hash algorithm
...
Sensitive information disclosure due to insecure folder permissions
...
Sensitive information disclosure due to missing authentication
...
Security update of cURL dependency
...
Sensitive information disclosure due to CORS misconfiguration
...
Security update of Log4net dependency
...
Local privilege escalation due to insecure folder permissions
...
Cross-site scripting (XSS) was possible in notification pop-ups
...
Sensitive information disclosure due to SSRF
...
Local privilege escalation due to DLL hijacking vulnerability
...
Sensitive information disclosure due to spell-jacking
...
Cleartext transmission of sensitive information in acep-collector service
...
Sensitive information disclosure due to improper authentication
...
Security update of Vue.js dependency
...
Sensitive information disclosure due to cleartext storage of sensitive information in memory
...
Sensitive information disclosure due to improper authorization
...
Sensitive information disclosure and manipulation due to improper authorization
...
Self cross-site scripting (XSS) was possible on devices page
...
Local privilege escalation due to a DLL hijacking vulnerability
...