247 matches found
Local privilege escalation due to DLL hijacking vulnerability
...
Remote command execution due to use of default passwords
...
Local privilege escalation due to OS command injection vulnerability
...
Security update of OpenSSH dependency
The Qualys Threat Research Unit has released a security advisory for a remote unauthenticated code execution vulnerability in OpenSSH's server versions earlier than 4.4p1 and versions from 8.5p1 up to, but not including, 9.8p1. The issue was assigned CVE-2024-6387. Acronis security team concluded...
Local privilege escalation due to insecure folder permissions
...
Sensitive information disclosure and manipulation due to missing authorization
...
Local privilege escalation due to insecure folder permissions
...
Local privilege escalation due to unquoted search path vulnerability
...
Sensitive information disclosure and manipulation due to missing authorization
...
XZ Utils supply chain attack
Red Hat team released a security advisory for a supply chain compromise discovered in the XZ Utils library versions 5.6.0 and 5.6.1. The issue was assigned CVE-2024-3094. Acronis security team concluded that Acronis infrastructure and products are not affected by this vulnerability...
Security update of Crow dependency
...
Security update of Apache Tomcat dependency
...
Sensitive information disclosure due to insecure folder permissions
...
Stored cross-site scripting (XSS) vulnerability due to missing origin validation in postMessage
...
Sensitive information disclosure due to excessive collection of system information
...
Stored cross-site scripting (XSS) vulnerability in unit name
...
Self cross-site scripting (XSS) vulnerability in storage nodes search field
...
Sensitive information disclosure and manipulation due to missing authorization
A vulnerability in Acronis Cyber Protect Cloud Agent could allow an unauthorized local attacker to see and manipulate network isolation policies applied to the specific agent...
Security update of cURL dependency
...
Local privilege escalation due to DLL hijacking vulnerability
...
Sensitive information disclosure and manipulation due to missing authorization
...
Local privilege escalation due to DLL hijacking vulnerability
...
Sensitive information disclosure and manipulation due to missing authorization
A vulnerability in Acronis Agent could allow an unauthorized local attacker to see and manipulate antivirus and antimalware protection plans applied to the specific agent. This vulnerability does not allow unauthorized access to backup data...
Sensitive information disclosure and manipulation due to missing authorization
...
Sensitive information leak through log files
...
Sensitive information disclosure due to excessive collection of system information
...
Sensitive information disclosure and manipulation due to missing authorization
...
Sensitive information disclosure and manipulation due to missing authorization
...
Sensitive information disclosure due to missing authorization
...
Sensitive information disclosure due to missing authorization
...
Sensitive information disclosure due to missing authorization
...
Sensitive information disclosure and manipulation due to missing authorization
...
Sensitive information disclosure due to missing authorization
...
Security update of zlib dependency
...
Sensitive information disclosure due to missing authorization
...
Local privilege escalation due to improper soft link handling
...
Sensitive information disclosure and manipulation due to missing authorization
...
Sensitive information disclosure and manipulation due to missing authorization
...
Sensitive information disclosure due to cleartext storage of sensitive information
...
Sensitive information disclosure due to insufficient token field masking
...
Stored cross-site scripting (XSS) vulnerability in protection plan name
...
Security update of cURL dependency
...
Sensitive information manipulation due to cross-site request forgery
...
Sensitive information disclosure and manipulation due to improper authentication
...
Sensitive information disclosure due to spell-jacking
...
Sensitive information disclosure due to cleartext storage of sensitive information in memory
...
Sensitive information manipulation due to cross-site request forgery
...
Replace satori/go.uuid dependency
...