CVE-2025-49384

Trend Micro Security 17.8 Consumer is vulnerable to a link following local privilege escalation vulnerability that could allow a local attacker to unintentionally delete privileged Trend Micro files including its own...

CVE-2025-49385

Trend Micro Security 17.8 Consumer is vulnerable to a link following local privilege escalation vulnerability that could allow a local attacker to unintentionally delete privileged Trend Micro files including its own...

The vulnerability of the Nomad Module component of the 1E Client software allows a hacker to delete any files on the device.

The vulnerability of the Nomad Module component of the 1E Client software lies in the improper handling of symbolic links before accessing files. Exploiting this vulnerability could allow an attacker to delete any files on the device...

Dell PowerScale OneFS 安全漏洞

Dell PowerScale OneFS is an operating system from Dell USA. PowerScale OneFS operating system that provides horizontal scaling of NAS. An elevation of privilege vulnerability exists in Dell PowerScale OneFS versions 9.5.0.0 through 9.10.0.1 due to a lack of authorization in NFS exports. An attack...

Arbitrary Directory Creation Or File Deletion

salt is vulnerable to Arbitrary Directory Creation Or File Deletion. The vulnerability is due to lack of input validation on the tgtenv variable, which is used to construct file paths using os.path.join, allows attackers to supply malicious path components e.g., ../ to traverse directories...

CVE-2025-49385

Trend Micro Security 17.8 Consumer is vulnerable to a link following local privilege escalation vulnerability that could allow a local attacker to unintentionally delete privileged Trend Micro files including its own...

CVE-2025-49384

Trend Micro Security 17.8 Consumer is vulnerable to a link following local privilege escalation vulnerability that could allow a local attacker to unintentionally delete privileged Trend Micro files including its own...

CVE-2025-48443

Trend Micro Password Manager Consumer version 5.0.0.1266 and below is vulnerable to a Link Following Local Privilege Escalation Vulnerability that could allow a local attacker to leverage this vulnerability to delete files in the context of an administrator when the administrator installs Trend...

CVE-2025-49385

Trend Micro Security 17.8 Consumer is vulnerable to a link following local privilege escalation vulnerability that could allow a local attacker to unintentionally delete privileged Trend Micro files including its own...

CVE-2025-49385

CVE-2025-49385 affects Trend Micro Security 17.8 (Consumer). The vulnerability is a local privilege escalation via link following that could allow a local attacker to delete privileged Trend Micro files, including the product’s own files. Exploitation requires local access with low privileges and...

CVE-2025-49384

Trend Micro Security 17.8 Consumer is vulnerable to a link following local privilege escalation vulnerability that could allow a local attacker to unintentionally delete privileged Trend Micro files including its own...

CVE-2025-49384

Trend Micro Security 17.8 Consumer is vulnerable to a link following local privilege escalation vulnerability that could allow a local attacker to unintentionally delete privileged Trend Micro files including its own...

CVE-2025-49384

CVE-2025-49384 affects Trend Micro Security 17.8 (Consumer). The root cause is a link-following path in the Platinum Host Service that can be abused by a local attacker who can execute low-privilege code to trigger a symbolic link and cause deletion of privileged Trend Micro files (including its ...

CVE-2025-48443

CVE-2025-48443 affects Trend Micro Password Manager (Consumer)

CVE-2025-48443

Trend Micro Password Manager Consumer version 5.0.0.1266 and below is vulnerable to a Link Following Local Privilege Escalation Vulnerability that could allow a local attacker to leverage this vulnerability to delete files in the context of an administrator when the administrator installs Trend...

CVE-2025-49879 WordPress Litho <= 3.0 - Arbitrary File Deletion Vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in themezaa Litho allows Path Traversal. This issue affects Litho: from n/a through 3.0...

CVE-2025-49879 WordPress Litho theme <= 3.0 - Arbitrary File Deletion Vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in themezaa Litho litho allows Path Traversal.This issue affects Litho: from n/a through = 3.0...

CVE-2025-49415 WordPress FW Gallery plugin <= 8.0.0 - Arbitrary File Deletion Vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Fastw3b LLC FW Gallery fw-gallery allows Path Traversal.This issue affects FW Gallery: from n/a through = 8.0.0...

CVE-2025-49415 WordPress FW Gallery <= 8.0.0 - Arbitrary File Deletion Vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Fastw3b LLC FW Gallery allows Path Traversal. This issue affects FW Gallery: from n/a through 8.0.0...

PT-2025-25761 · Trend Micro · Trend Micro Security

Name of the Vulnerable Software and Affected Versions: Trend Micro Security version 17.8 Consumer Description: The issue is a link following local privilege escalation vulnerability. It could allow a local attacker to unintentionally delete privileged Trend Micro files, including its own...