Lucene search
+L

915 matches found

Cvelist
Cvelist
•added 2024/01/16 7:42 p.m.•34 views

CVE-2023-6336

Improper Link Resolution Before File Access 'Link Following' vulnerability in HYPR Workforce Access on MacOS allows User-Controlled Filename.This issue affects Workforce Access: before 8.7...

7.2CVSS7.8AI score0.00176EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/01/16 7:42 p.m.•12 views

CVE-2023-6335

Improper Link Resolution Before File Access 'Link Following' vulnerability in HYPR Workforce Access on Windows allows User-Controlled Filename.This issue affects Workforce Access: before 8.7...

6.4CVSS7.7AI score0.0017EPSS
SaveExploits0References1
CVE
CVE
•added 2024/01/16 7:42 p.m.•56 views

CVE-2023-6335

The CVE-2023-6335 issue is an Improper Link Resolution Before File Access ("Link Following") vulnerability in HYPR Workforce Access on Windows, affecting versions before 8.7. The root cause is a misresolution of file access links that allows a user-controlled filename, potentially enabling unauth...

7.8CVSS7.6AI score0.0017EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/16 12:00 a.m.•4 views

CVE-2023-6335: Improper Link Resolution Before File Access

Improper Link Resolution Before File Access 'Link Following' vulnerability in HYPR Workforce Access on Windows allows User-Controlled Filename.This issue affects Workforce Access: before 8.7...

7.8CVSS7.3AI score0.0017EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/01/16 12:00 a.m.•24 views

PT-2024-14932 · Hypr · Hypr Workforce Access

Name of the Vulnerable Software and Affected Versions: HYPR Workforce Access versions prior to 8.7 Description: The issue is related to an Improper Link Resolution Before File Access, also known as 'Link Following', which allows user-controlled filename. This can potentially lead to unauthorized...

7.8CVSS7.4AI score0.0017EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2024/01/16 12:00 a.m.•18 views

PT-2024-14933 · Hypr · Hypr Workforce Access

Name of the Vulnerable Software and Affected Versions: HYPR Workforce Access versions prior to 8.7 Description: The issue is related to an Improper Link Resolution Before File Access, also known as 'Link Following', which allows User-Controlled Filename. This affects HYPR Workforce Access on MacO...

7.8CVSS7.4AI score0.00176EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/09 12:00 a.m.•2 views

CVE-2024-20656: Improper Link Resolution Before File Access

Visual Studio Elevation of Privilege Vulnerability...

7.8CVSS7.3AI score0.03946EPSS
SaveExploits1References2
NVD
NVD
•added 2023/12/26 6:15 a.m.•21 views

CVE-2023-51654

Improper link resolution before file access 'Link Following' issue exists in iPrint&Scan Desktop for Windows versions 11.0.0 and earlier. A symlink attack by a malicious user may cause a Denial-of-service DoS condition on the PC...

5.5CVSS0.00186EPSS
SaveExploits0References1
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2023/12/26 12:27 a.m.•22 views

Brother iPrint&Scan Desktop for Windows vulnerable to improper link resolution before file access

Overview iPrint Desktop for Windows provided by Brother Industries, Ltd. outputs logs to a certain log file. The affected version of the product does not check whether the log file is a normal file or a symbolic link to a certain file CWE-59. Chris Au reported this vulnerability to Brother...

6.5CVSS6.5AI score0.00186EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/25 12:00 a.m.•7 views

CVE-2023-28872: Improper Link Resolution Before File Access

Support Assistant in NCP Secure Enterprise Client before 13.10 allows attackers to execute DLL files with SYSTEM privileges by creating a symbolic link from a %LOCALAPPDATA%\Temp\NcpSupport location...

8.8CVSS8.1AI score0.00774EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/12 12:00 a.m.•4 views

CVE-2023-35624: Improper Link Resolution Before File Access

Azure Connected Machine Agent Elevation of Privilege Vulnerability...

7.3CVSS7.3AI score0.00875EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/12 12:00 a.m.•3 views

CVE-2023-36391: Improper Link Resolution Before File Access

Local Security Authority Subsystem Service Elevation of Privilege Vulnerability...

7.8CVSS7.4AI score0.0724EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/12 12:00 a.m.•3 views

CVE-2023-35633: Improper Link Resolution Before File Access

Windows Kernel Elevation of Privilege Vulnerability...

7.8CVSS7.4AI score0.08698EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/09 12:00 a.m.•7 views

CVE-2023-28871: Improper Link Resolution Before File Access

Support Assistant in NCP Secure Enterprise Client before 12.22 allows attackers to read registry information of the operating system by creating a symbolic link...

4.3CVSS5.6AI score0.00594EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/09 12:00 a.m.•4 views

CVE-2023-28869: Improper Link Resolution Before File Access

Support Assistant in NCP Secure Enterprise Client before 12.22 allows attackers read the contents of arbitrary files on the operating system by creating a symbolic link...

6.5CVSS6.7AI score0.00768EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/09 12:00 a.m.•4 views

CVE-2023-28868: Improper Link Resolution Before File Access

Support Assistant in NCP Secure Enterprise Client before 12.22 allows attackers to delete arbitrary files on the operating system by creating a symbolic link...

8.1CVSS7.6AI score0.00852EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2023/12/04 12:00 a.m.•35 views

Amazon Linux 2 : libarchive (ALAS-2023-2374)

The version of libarchive installed on the remote host is prior to 3.1.2-14. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2374 advisory. An improper link resolution flaw can occur while extracting an archive leading to changing modes, times, access control lists,...

7.8CVSS6.7AI score0.00386EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/14 12:00 a.m.•3 views

CVE-2023-36046: Improper Link Resolution Before File Access

Windows Authentication Denial of Service Vulnerability...

7.1CVSS7AI score0.00686EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/14 12:00 a.m.•3 views

CVE-2023-36047: Improper Link Resolution Before File Access

Windows Authentication Elevation of Privilege Vulnerability...

7.8CVSS7.3AI score0.01107EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/14 12:00 a.m.•4 views

CVE-2023-36394: Improper Link Resolution Before File Access

Windows Search Service Elevation of Privilege Vulnerability...

7CVSS7.1AI score0.06723EPSS
SaveExploits0References2
Rows per page
Query Builder