248 matches found
Unauthenticated attacker having local code execution may tamper with microservice API
...
Local privilege escalation due to DLL hijacking vulnerability
...
Sensitive information disclosure and manipulation due to improper authorization
...
Replace satori/go.uuid dependency
...
Local privilege escalation due to insecure file permissions
Exploitation of this vulnerability has been detected in the wild in limited, targeted attacks against Acronis Backup plugin for cPanel & WHM deployments...
Local privilege escalation due to unrestricted loading of unsigned libraries
...
Local privilege escalation due to a DLL hijacking vulnerability
...
Local privilege escalation due to insecure folder permissions
...
Sensitive information disclosure and manipulation due to improper certification validation
...
Local privilege escalation due to DLL hijacking vulnerability in Acronis Media Builder service
...
Local active protection service settings manipulation due to unnecessary privileges assignment
...
MOVEit transfer critical vulnerability
The Progress Community team released a security advisory and fixes for one critical severity security issue affecting all MOVEit Transfer versions. The issue was assigned CVE-2023-34362. Acronis security team concluded that Acronis infrastructure and products are not affected by this vulnerabilit...
Local privilege escalation due to DLL hijacking vulnerability
...
Security update of third-party dependencies
...
Local privilege escalation due to DLL hijacking vulnerability
...
Security update of Linux kernel
Linux kernel was updated to address multiple high severity vulnerabilities...
Local privilege escalation due to DLL hijacking vulnerability
...
Local privilege escalation due to DLL hijacking vulnerability
...
Local privilege escalation due to insecure folder permissions
...
Security update of libxml2 dependency
...
Sensitive information disclosure due to improper configuration of a headless browser
...
Security update of Apache Tomcat dependency
...
Security update of Elasticsearch dependency
...
Sensitive information disclosure due to improper access control
...
Unauthorized report deletion due to insufficient access control
...
Local privilege escalation due to improper soft link handling
...
Security update of third-party dependencies
...
Local privilege escalation due to a binary hijacking vulnerability
...
Security update of Apache HTTP Server
Apache HTTP Server was updated to address a high severity vulnerability...
Sensitive data disclosure and manipulation due to unnecessary privileges assignment
...
Unauthorized modification of settings due to insufficient authorization checks
...
Local privilege escalation due to DLL hijacking vulnerability
...
Local privilege escalation due to DLL hijacking vulnerability
...
Sensitive information manipulation due to cross-site request forgery
...
Local privilege escalation due to DLL hijacking vulnerability
...
Security update of sqlite3 dependency
...
OpenSSL high severity vulnerability CVE-2025-15467
OpenSSL disclosed CVE-2025-15467, initially rated as critical and later revised to high severity. Acronis security team concluded that Acronis infrastructure and products are not affected by this vulnerability, as the impacted functionality is not in use...
Local privilege escalation due to improper handling of environment variables
...
Default credentials set for local privileged user in Virtual Appliance
...
Local privilege escalation due to improper soft link handling
...
Information disclosure and manipulation due to improper authorization checks
...
Local privilege escalation due to insecure XPC service configuration
...
Local privilege escalation due to improper soft link handling
...
Security update of zlib dependency
...
Stored cross-site scripting (XSS) vulnerability in protection plan name
...
Denial of service due to unauthenticated API endpoint
...
Security update of Socket.io JavaScript library
Socket.io JavaScript library was updated to address a medium severity vulnerability...
Local privilege escalation due to excessive permissions assigned to child processes
...