251 matches found
Sensitive data disclosure and manipulation due to missing authorization
...
Weak server key used for TLS encryption
...
Sensitive information disclosure due to SSRF
...
Sensitive data disclosure and manipulation due to missing authentication
...
Sensitive data disclosure and manipulation due to improper authentication
...
Sensitive data disclosure and manipulation due to improper authentication
...
Local privilege escalation due to insecure folder permissions
...
Security update of third-party dependencies
...
Denial of service due to improper handling of malformed input
...
Local privilege escalation due to insecure file permissions
...
Security update of libxml2 dependency
...
Denial of service due to allocation of resources without limits
...
Local privilege escalation due to insecure folder permissions
...
Security update of cURL dependency
...
Local privilege escalation due to a binary hijacking vulnerability
...
Security update of libxml2 dependency
...
Security update of cURL dependency
...
Arbitrary file overwrite during home directory recovery due to improper symbolic link handling
...
Local privilege escalation due to unquoted search path vulnerability
...
Local privilege escalation due to DLL hijacking vulnerability
...
Local privilege escalation due to DLL hijacking vulnerability
...
Local privilege escalation due to DLL hijacking vulnerability
...
Local privilege escalation due to DLL hijacking vulnerability
...
Local privilege escalation due to insecure folder permissions
...
Local privilege escalation due to DLL hijacking vulnerability
...
Web installer integrity check used weak hash algorithm
...
Stored cross-site scripting (XSS) vulnerability due to missing origin validation in postMessage
...
Local privilege escalation due to DLL hijacking vulnerability
...
Missing session invalidation after user deletion
...
Local privilege escalation due to excessive permissions assigned to Tray Monitor service
...
Weak algorithm used to sign RPM package
...
Sensitive information disclosure due to missing authentication
...
Sensitive information disclosure due to insecure folder permissions
...
Security update of Electron dependency
...
Arbitrary file overwrite during recovery due to improper symbolic link handling
Acronis Backup plugins for cPanel & WHM, Plesk and DirectAdmin improperly handled symbolic links during recovery. This allowed plugin users with unprivileged local access to the server to overwrite arbitrary files on the server. They could achieve this by creating a symbolic link in their home...
Sensitive information disclosure during file browsing due to improper symbolic link handling
Acronis Backup plugin for cPanel & WHM had a vulnerability in handling symbolic links during file browsing. This vulnerability allowed plugin users with unprivileged local access to the server to view file names in directories they normally could not access. By creating a symbolic link in their...
Local privilege escalation due to insecure folder permissions
...
Local privilege escalation due to DLL hijacking vulnerability
...
Local privilege escalation due to DLL hijacking vulnerability
...
Security update of Apache Tomcat dependency
...
Stored cross-site scripting (XSS) vulnerability on enrollment invitation page
...
Sensitive information disclosure due to spell-jacking
...
Excessive attack surface in acep-importer service due to binding to an unrestricted IP address
...
Security update of Crow dependency
...
Excessive attack surface in acep-collector service due to binding to an unrestricted IP address
...
Sensitive information manipulation due to improper authorization
...
Cleartext transmission of sensitive information in acep-collector service
...
Excessive attack surface in archive-server service due to binding to an unrestricted IP address
...