247 matches found
Local privilege escalation due to insecure folder permissions
...
Sensitive data disclosure and manipulation due to missing authorization
...
Weak server key used for TLS encryption
...
Sensitive information disclosure due to SSRF
...
Denial of service due to improper handling of malformed input
...
Security update of libxml2 dependency
...
Local privilege escalation due to insecure file permissions
...
Denial of service due to allocation of resources without limits
...
Local privilege escalation due to insecure folder permissions
...
Security update of cURL dependency
...
Security update of libxml2 dependency
...
Local privilege escalation due to a binary hijacking vulnerability
...
Security update of cURL dependency
...
Arbitrary file overwrite during home directory recovery due to improper symbolic link handling
...
Local privilege escalation due to unquoted search path vulnerability
...
Local privilege escalation due to DLL hijacking vulnerability
...
Local privilege escalation due to DLL hijacking vulnerability
...
Local privilege escalation due to DLL hijacking vulnerability
...
Local privilege escalation due to DLL hijacking vulnerability
...
Local privilege escalation due to insecure folder permissions
...
Missing session invalidation after user deletion
...
Local privilege escalation due to excessive permissions assigned to Tray Monitor service
...
Stored cross-site scripting (XSS) vulnerability due to missing origin validation in postMessage
...
Local privilege escalation due to DLL hijacking vulnerability
...
Local privilege escalation due to DLL hijacking vulnerability
...
Web installer integrity check used weak hash algorithm
...
Weak algorithm used to sign RPM package
...
Sensitive information disclosure due to insecure folder permissions
...
Sensitive information disclosure due to missing authentication
...
Security update of Electron dependency
...
Sensitive information disclosure during file browsing due to improper symbolic link handling
Acronis Backup plugin for cPanel & WHM had a vulnerability in handling symbolic links during file browsing. This vulnerability allowed plugin users with unprivileged local access to the server to view file names in directories they normally could not access. By creating a symbolic link in their...
Arbitrary file overwrite during recovery due to improper symbolic link handling
Acronis Backup plugins for cPanel & WHM, Plesk and DirectAdmin improperly handled symbolic links during recovery. This allowed plugin users with unprivileged local access to the server to overwrite arbitrary files on the server. They could achieve this by creating a symbolic link in their home...
Stored cross-site scripting (XSS) vulnerability on enrollment invitation page
...
Local privilege escalation due to insecure folder permissions
...
Local privilege escalation due to DLL hijacking vulnerability
...
Local privilege escalation due to DLL hijacking vulnerability
...
Sensitive information disclosure due to spell-jacking
...
Security update of Apache Tomcat dependency
...
Sensitive information manipulation due to improper authorization
...
Excessive attack surface in acep-importer service due to binding to an unrestricted IP address
...
Cleartext transmission of sensitive information in acep-collector service
...
Excessive attack surface in archive-server service due to binding to an unrestricted IP address
...
Excessive attack surface in acep-collector service due to binding to an unrestricted IP address
...
Security update of Crow dependency
...
Local active protection service settings manipulation due to unnecessary privileges assignment
...
Local privilege escalation due to DLL hijacking vulnerability
...
Local privilege escalation due to DLL hijacking vulnerability
...
Sensitive data disclosure and manipulation due to unnecessary privileges assignment
...
Sensitive information disclosure due to insecure folder permissions
Acronis Snap Deploy 6 License Server stored license serial numbers in cleartext in the file C:\ProgramData\Acronis\License Server\keys.xml, which was accessible to all users on the system. This allowed an authenticated local attacker with access to the file to retrieve and misuse the serial numbe...