264 matches found
Unauthorized data access due to insufficient access control validation
...
Sensitive information disclosure due to improper access control
...
Unauthorized resource manipulation due to improper authorization checks
...
Local privilege escalation due to DLL hijacking vulnerability
...
Local privilege escalation due to insecure Unix socket permissions
...
Denial of service due to insufficient input validation in authentication logging
...
Sensitive information disclosure due to improper authorization checks
...
Local privilege escalation due to insecure folder permissions
...
Local privilege escalation due to insecure XPC service configuration
...
Local privilege escalation due to DLL hijacking vulnerability
...
Local privilege escalation due to insecure folder permissions
...
Credentials are not deleted from Acronis Agent after plan revocation
...
Local privilege escalation due to improper soft link handling
...
Sensitive data disclosure and manipulation due to improper authentication
...
Sensitive data disclosure and manipulation due to missing authentication
...
Security update of third-party dependencies
...
Sensitive data disclosure and manipulation due to missing authorization
...
Sensitive data disclosure and manipulation due to improper authentication
...
Local privilege escalation due to insecure folder permissions
...
Sensitive information disclosure due to SSRF
...
Weak server key used for TLS encryption
...
Denial of service due to improper handling of malformed input
...
Security update of libxml2 dependency
...
Local privilege escalation due to insecure file permissions
...
Denial of service due to allocation of resources without limits
...
Local privilege escalation due to insecure folder permissions
...
Security update of cURL dependency
...
Security update of libxml2 dependency
...
Local privilege escalation due to a binary hijacking vulnerability
...
Security update of cURL dependency
...
Arbitrary file overwrite during home directory recovery due to improper symbolic link handling
...
Local privilege escalation due to unquoted search path vulnerability
...
Local privilege escalation due to DLL hijacking vulnerability
...
Local privilege escalation due to DLL hijacking vulnerability
...
Local privilege escalation due to DLL hijacking vulnerability
...
Local privilege escalation due to DLL hijacking vulnerability
...
Local privilege escalation due to insecure folder permissions
...
Missing session invalidation after user deletion
...
Local privilege escalation due to excessive permissions assigned to Tray Monitor service
...
Stored cross-site scripting (XSS) vulnerability due to missing origin validation in postMessage
...
Local privilege escalation due to DLL hijacking vulnerability
...
Local privilege escalation due to DLL hijacking vulnerability
...
Web installer integrity check used weak hash algorithm
...
Weak algorithm used to sign RPM package
...
Sensitive information disclosure due to insecure folder permissions
...
Sensitive information disclosure due to missing authentication
...
Security update of Electron dependency
...
Sensitive information disclosure during file browsing due to improper symbolic link handling
Acronis Backup plugin for cPanel & WHM had a vulnerability in handling symbolic links during file browsing. This vulnerability allowed plugin users with unprivileged local access to the server to view file names in directories they normally could not access. By creating a symbolic link in their...
Arbitrary file overwrite during recovery due to improper symbolic link handling
Acronis Backup plugins for cPanel & WHM, Plesk and DirectAdmin improperly handled symbolic links during recovery. This allowed plugin users with unprivileged local access to the server to overwrite arbitrary files on the server. They could achieve this by creating a symbolic link in their home...