247 matches found
Sensitive information disclosure due to insecure folder permissions
...
HTML injection via report name
...
Open redirect via user-controlled query parameter
...
Local privilege escalation due to excessive permissions assigned to child processes
...
Local privilege escalation due to insecure folder permissions
...
Local privilege escalation due to a DLL hijacking vulnerability
...
Local privilege escalation due to insecure folder permissions
...
Local privilege escalation due to DLL hijacking vulnerability
...
Local privilege escalation due to race condition on application startup
...
Local privilege escalation due to excessive permissions assigned to child processes
...
Local privilege escalation due to DLL hijacking vulnerability in Acronis Media Builder service
...
Local privilege escalation due to unrestricted loading of unsigned libraries
...
Local privilege escalation via named pipe due to improper access control checks
...
Apache Log4j vulnerability
A critical security vulnerability has been identified in Apache Log4j library. The vulnerability has been assigned CVE-2021-44228. Apache Log4j JNDI Java Naming and Directory Interface features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and...
Cross-site scripting (XSS) was possible in notification pop-ups
...
Stored cross-site scripting (XSS) was possible in activity details
...
Sensitive information leak through log files
...
DLL hijacking could lead to local privilege escalation
...
Stored cross-site scripting (XSS) was possible in protection plan details
...
Security update of Vue.js dependency
...
DLL hijacking could lead to denial of service
...
Self cross-site scripting (XSS) was possible on devices page
...
Security update of sqlite3 dependency
...
Reflected Cross-site scripting (XSS) on login page
...
Local privilege escalation due to a DLL hijacking vulnerability
...
Local privilege escalation due to a binary hijacking vulnerability
...
Local privilege escalation due to insecure folder permissions
...
Local privilege escalation due to insecure XPC service configuration
...
A logic bug in system monitoring driver allows to bypass Windows memory protection and access sensitive data
...
Local privilege escalation due to insecure XPC service configuration
...
Local privilege escalation due to insecure folder permissions
...
Denial of service due to insecure folder permissions
...
Antiransomware microservice did not authenticate inter-service communication
...
Local privilege escalation due to improper soft link handling
The issue could allow local users or malicious software to overwrite arbitrary files on the system. Workarounds Disable Acronis Active Protection service...
Local privilege escalation due to improper soft link handling
...
Local privilege escalation due to insecure folder permissions
...
Unauthenticated attacker having local code execution may tamper with microservice API
...
Local privilege escalation due to improper soft link handling
...
Local privilege escalation due to a DLL hijacking vulnerability
...
Missing SSL certificate validation
...
Cross-site scripting (XSS) in activities panel
...
Information disclosure was possible due to CORS misconfiguration in local notification service
...
Local privilege escalation due to DLL hijacking vulnerability in multiple components
...
Acronis True Image is vulnerable to privilege escalation via openssl.cnf file
...
Acronis Cyber Backup is vulnerable to privilege escalation via openssl.cnf file
...