Page 5 of 168 results (0.003 seconds)

CVSS: 6.8EPSS: 0%CPEs: 1EXPL: 0

CVE-2024-34011

https://notcve.org/view.php?id=CVE-2024-34011

29 Apr 2024 — Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 37758. Escalada de privilegios locales debido a permisos de carpetas inseguros. Los siguientes productos se ven afectados: Acronis Cyber Protect Cloud Agent (Windows) anterior a la compilación 37758. • https://security-advisory.acronis.com/advisories/SEC-7171 • CWE-276: Incorrect Default Permissions •

CVSS: 8.2EPSS: 0%CPEs: 2EXPL: 0

CVE-2024-34010

https://notcve.org/view.php?id=CVE-2024-34010

29 Apr 2024 — Local privilege escalation due to unquoted search path vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 37758. Escalada de privilegios locales debido a una vulnerabilidad de ruta de búsqueda sin comillas. Los siguientes productos se ven afectados: Acronis Cyber Protect Cloud Agent (Windows) anterior a la compilación 37758. Local privilege escalation due to unquoted search path vulnerability. • https://security-advisory.acronis.com/advisories/SEC-7110 • CWE-428: Unquoted Search Path or Element •

CVSS: 7.1EPSS: 0%CPEs: 1EXPL: 0

CVE-2023-48684

https://notcve.org/view.php?id=CVE-2023-48684

29 Apr 2024 — Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 37758. Divulgación y manipulación de información sensible por falta de autorización. Los siguientes productos se ven afectados: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) antes de la compilación 37758. • https://security-advisory.acronis.com/advisories/SEC-6021 • CWE-862: Missing Authorization •

CVSS: 7.1EPSS: 0%CPEs: 2EXPL: 0

CVE-2023-48683

https://notcve.org/view.php?id=CVE-2023-48683

29 Apr 2024 — Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 37758. Divulgación y manipulación de información sensible por falta de autorización. Los siguientes productos se ven afectados: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) antes de la compilación 37758. Sensitive information disclosure and manipulation due to missing authorization. • https://security-advisory.acronis.com/advisories/SEC-5899 • CWE-862: Missing Authorization •

CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 0

CVE-2023-48682

https://notcve.org/view.php?id=CVE-2023-48682

27 Feb 2024 — Stored cross-site scripting (XSS) vulnerability in unit name. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 37391. Vulnerabilidad de cross-site scripting (XSS) almacenado en el nombre de la unidad. Los siguientes productos se ven afectados: Acronis Cyber Protect 16 (Linux, Windows) antes de la compilación 37391. • https://security-advisory.acronis.com/advisories/SEC-5901 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 6.4EPSS: 0%CPEs: 1EXPL: 0

CVE-2023-48681

https://notcve.org/view.php?id=CVE-2023-48681

27 Feb 2024 — Self cross-site scripting (XSS) vulnerability in storage nodes search field. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 37391. Vulnerabilidad de cross-site scripting (XSS) en el campo de búsqueda de nodos de almacenamiento. Los siguientes productos se ven afectados: Acronis Cyber Protect 16 (Linux, Windows) antes de la compilación 37391. • https://security-advisory.acronis.com/advisories/SEC-5900 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0

CVE-2023-48680

https://notcve.org/view.php?id=CVE-2023-48680

27 Feb 2024 — Sensitive information disclosure due to excessive collection of system information. The following products are affected: Acronis Cyber Protect 16 (macOS, Windows) before build 37391. Divulgación de información sensible debido a la recopilación excesiva de información del sistema. Los siguientes productos se ven afectados: Acronis Cyber Protect 16 (macOS, Windows) antes de la compilación 37391. • https://security-advisory.acronis.com/advisories/SEC-5392 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-359: Exposure of Private Personal Information to an Unauthorized Actor •

CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0

CVE-2023-48679

https://notcve.org/view.php?id=CVE-2023-48679

27 Feb 2024 — Stored cross-site scripting (XSS) vulnerability due to missing origin validation in postMessage. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 37391. Vulnerabilidad de cross-site scripting (XSS) almacenadas debido a la falta de validación de origen en postMessage. Los siguientes productos se ven afectados: Acronis Cyber Protect 16 (Linux, Windows) antes de la compilación 37391. • https://security-advisory.acronis.com/advisories/SEC-3469 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0

CVE-2023-48678

https://notcve.org/view.php?id=CVE-2023-48678

27 Feb 2024 — Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 37391. Divulgación de información confidencial debido a permisos de carpetas inseguros. Los siguientes productos se ven afectados: Acronis Cyber Protect 16 (Linux, Windows) antes de la compilación 37391. • https://security-advisory.acronis.com/advisories/SEC-2319 • CWE-276: Incorrect Default Permissions •

CVSS: 7.1EPSS: 0%CPEs: 24EXPL: 0

CVE-2023-48676

https://notcve.org/view.php?id=CVE-2023-48676

14 Dec 2023 — Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 36943. Divulgación y manipulación de información sensible por falta de autorización. Los siguientes productos se ven afectados: Acronis Cyber Protect Cloud Agent (Windows) anterior a la compilación 36943. • https://security-advisory.acronis.com/advisories/SEC-5905 • CWE-862: Missing Authorization •