CVE-2024-49386

MEDIUM Year: 2024
CVSS v3 Score
5.7
Medium
Weakness Type
CWE-359
View all →

Vulnerability Description

Sensitive information disclosure due to spell-jacking. The following products are affected: Acronis Cyber Files (Windows) before build 9.0.0x24.

Related Vulnerabilities

CVE-2023-44156

MEDIUM
CVSS:5.7(Medium)

Sensitive information disclosure due to spell-jacking. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979.

CWE-3592023

CVE-2022-0852

MEDIUM
CVSS:5.5(Medium)

There is a flaw in convert2rhel. convert2rhel passes the Red Hat account password to subscription-manager via the command line, which could allow unauthorized users locally on the machine to view the ...

CWE-3592022

CVE-2023-25632

MEDIUM
CVSS:5.5(Medium)

The Android Mobile Whale browser app before 3.0.1.2 allows the attacker to bypass its browser unlock function via 'Open in Whale' feature.

CWE-3592023

CVE-2024-30321

HIGH
CVSS:5.9(Medium)

A vulnerability has been identified in SIMATIC PCS 7 V9.1 (All versions < V9.1 SP2 UC05), SIMATIC WinCC Runtime Professional V18 (All versions < V18 Update 5), SIMATIC WinCC Runtime Professional V19 (...

CWE-3592024

CVE-2024-38103

MEDIUM
CVSS:5.9(Medium)

Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

CWE-3592024

CVE-2025-0683

HIGH
CVSS:5.9(Medium)

In its default configuration, Contec Health CMS8000 Patient Monitor transmits plain-text patient data to a hard-coded public IP address when a patient is hooked up to the monitor. This could lead to a...

CWE-3592025