248 matches found
Cleartext transmission of sensitive information
...
Sensitive information disclosure due to insecure folder permissions
...
HTML injection via report name
...
Open redirect via user-controlled query parameter
...
Local privilege escalation due to excessive permissions assigned to child processes
...
Local privilege escalation due to insecure folder permissions
...
Local privilege escalation due to a DLL hijacking vulnerability
...
Local privilege escalation due to insecure folder permissions
...
Local privilege escalation due to race condition on application startup
...
Local privilege escalation due to excessive permissions assigned to child processes
...
Local privilege escalation due to DLL hijacking vulnerability
...
Local privilege escalation due to unrestricted loading of unsigned libraries
...
Local privilege escalation via named pipe due to improper access control checks
...
Local privilege escalation due to DLL hijacking vulnerability in Acronis Media Builder service
...
Apache Log4j vulnerability
A critical security vulnerability has been identified in Apache Log4j library. The vulnerability has been assigned CVE-2021-44228. Apache Log4j JNDI Java Naming and Directory Interface features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and...
Sensitive information leak through log files
...
Stored cross-site scripting (XSS) was possible in activity details
...
Cross-site scripting (XSS) was possible in notification pop-ups
...
Stored cross-site scripting (XSS) was possible in protection plan details
...
Security update of Vue.js dependency
...
DLL hijacking could lead to denial of service
...
DLL hijacking could lead to local privilege escalation
...
Self cross-site scripting (XSS) was possible on devices page
...
Security update of sqlite3 dependency
...
Reflected Cross-site scripting (XSS) on login page
...
Local privilege escalation due to a binary hijacking vulnerability
...
Local privilege escalation due to a DLL hijacking vulnerability
...
Local privilege escalation due to insecure folder permissions
...
Local privilege escalation due to insecure XPC service configuration
...
A logic bug in system monitoring driver allows to bypass Windows memory protection and access sensitive data
...
Local privilege escalation due to insecure XPC service configuration
...
Local privilege escalation due to insecure folder permissions
...
Denial of service due to insecure folder permissions
...
Antiransomware microservice did not authenticate inter-service communication
...
Local privilege escalation due to improper soft link handling
The issue could allow local users or malicious software to overwrite arbitrary files on the system. Workarounds Disable Acronis Active Protection service...
Local privilege escalation due to improper soft link handling
...
Local privilege escalation due to insecure folder permissions
...
Unauthenticated attacker having local code execution may tamper with microservice API
...
Missing SSL certificate validation
...
Local privilege escalation due to improper soft link handling
...
Local privilege escalation due to a DLL hijacking vulnerability
...
Cross-site scripting (XSS) in activities panel
...
Information disclosure was possible due to CORS misconfiguration in local notification service
...
Local privilege escalation due to DLL hijacking vulnerability in multiple components
...
Acronis True Image is vulnerable to privilege escalation via openssl.cnf file
...
Acronis Cyber Backup is vulnerable to privilege escalation via openssl.cnf file
...