247 matches found
Sensitive data disclosure and manipulation due to unnecessary privileges assignment
...
Stored cross-site scripting (XSS) vulnerability in unit name
...
Security update of third-party dependencies
...
Sensitive information disclosure due to improper configuration of a headless browser
...
Security update of cURL dependency
...
Weak algorithm used to sign RPM package
...
Local privilege escalation due to DLL hijacking vulnerability
...
Sensitive information disclosure due to missing authorization
...
DLL hijacking could lead to denial of service
...
Unauthenticated attacker having local code execution may tamper with microservice API
...
Security update of Apache HTTP Server
Apache HTTP Server was updated to address a high severity vulnerability...
Unauthorized data access due to insufficient access control validation
...
Local privilege escalation due to insecure folder permissions
...
Local privilege escalation due to improper soft link handling
...
Security update of libxml2 dependency
...
Local privilege escalation due to a binary hijacking vulnerability
...
Local privilege escalation due to DLL hijacking vulnerability
...
Security update of Electron dependency
...
Local privilege escalation due to insecure folder permissions
...
Sensitive data disclosure and manipulation due to unnecessary privileges assignment
...
Security update of OpenSSH dependency
The Qualys Threat Research Unit has released a security advisory for a remote unauthenticated code execution vulnerability in OpenSSH's server versions earlier than 4.4p1 and versions from 8.5p1 up to, but not including, 9.8p1. The issue was assigned CVE-2024-6387. Acronis security team concluded...
Sensitive information disclosure and manipulation due to missing authorization
...
Sensitive information disclosure due to insecure folder permissions
...
Sensitive information disclosure due to unauthenticated path traversal
Sensitive information disclosure was possible in Acronis Cloud Manager before build 6.2.23089.203 due to an unauthenticated path traversal vulnerability. This allowed an unauthenticated user on an adjacent network to read local files on the machine where Acronis Cloud Manager was installed...
Sensitive information disclosure due to excessive collection of system information
...
Local privilege escalation due to insecure driver communication port permissions
...
Local privilege escalation due to DLL hijacking vulnerability
...
Local privilege escalation due to insecure folder permissions
...
Security update of Log4net dependency
...
Security update of Elasticsearch dependency
...
Stored cross-site scripting (XSS) was possible in protection plan details
...
Security update of sqlite3 dependency
...
A logic bug in system monitoring driver allows to bypass Windows memory protection and access sensitive data
...
Antiransomware microservice did not authenticate inter-service communication
...
Local privilege escalation due to insecure folder permissions
...
Local privilege escalation due to improper soft link handling
...
Acronis Cyber Backup is vulnerable to privilege escalation via openssl.cnf file
...
Security update of Socket.io JavaScript library
Socket.io JavaScript library was updated to address a medium severity vulnerability...
Local privilege escalation due to excessive permissions assigned to child processes
...
Local privilege escalation due to DLL hijacking vulnerability
...
Local privilege escalation due to DLL hijacking vulnerability
...
Local privilege escalation due to improper handling of environment variables
...
Local privilege escalation due to insecure folder permissions
...
Local privilege escalation due to DLL hijacking vulnerability
...
Credentials are not deleted from Acronis Agent after plan revocation
...
Sensitive information disclosure and manipulation due to improper authentication
...
Unauthorized modification of settings due to insufficient authorization checks
...
Unnecessary transmission of sensitive cryptographic material
...