978 matches found
CVE-2021-42297: Improper Link Resolution Before File Access
Windows 10 Update Assistant Elevation of Privilege Vulnerability...
CVE-2021-41057: Improper Link Resolution Before File Access
In WIBU CodeMeter Runtime before 7.30a, creating a crafted CmDongles symbolic link will overwrite the linked file without checking permissions...
CVE-2021-41379: Improper Link Resolution Before File Access
Windows Installer Elevation of Privilege Vulnerability...
CVE-2021-3641 Improper Link Resolution Before File Access in Bitdefender GravityZone (VA-9921)
Improper Link Resolution Before File Access 'Link Following' vulnerability in the EPAG component of Bitdefender Endpoint Security Tools for Windows allows a local attacker to cause a denial of service. This issue affects: Bitdefender GravityZone version 7.1.2.33 and prior versions...
PT-2021-21269
Name of the Vulnerable Software and Affected Versions Bitdefender GravityZone versions 7.1.2.33 and prior versions Description The issue is related to an Improper Link Resolution Before File Access 'Link Following' vulnerability in the EPAG component of Bitdefender Endpoint Security Tools for...
CVE-2021-3641: Improper Link Resolution Before File Access
Improper Link Resolution Before File Access 'Link Following' vulnerability in the EPAG component of Bitdefender Endpoint Security Tools for Windows allows a local attacker to cause a denial of service. This issue affects: Bitdefender GravityZone version 7.1.2.33 and prior versions...
CVE-2021-21686: Improper Link Resolution Before File Access
File path filters in the agent-to-controller security subsystem of Jenkins 2.318 and earlier, LTS 2.303.2 and earlier do not canonicalize paths, allowing operations to follow symbolic links to outside allowed directories...
CVE-2021-21695: Improper Link Resolution Before File Access
FilePathlistFiles lists files outside directories that agents are allowed to access when following symbolic links in Jenkins 2.318 and earlier, LTS 2.303.2 and earlier...
CVE-2021-21691: Improper Link Resolution Before File Access
Creating symbolic links is possible without the 'symlink' agent-to-controller access control permission in Jenkins 2.318 and earlier, LTS 2.303.2 and earlier...
CVE-2021-1534
A vulnerability in the antispam protection mechanisms of Cisco AsyncOS Software for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to bypass the URL reputation filters on an affected device. This vulnerability is due to improper processing of URLs. An attacker...
CVE-2021-34408: Improper Link Resolution Before File Access
The Zoom Client for Meetings for Windows in all versions before version 5.3.2 writes log files to a user writable directory as a privileged user during the installation or update of the client. This could allow for potential privilege escalation if a link was created between the user writable...
CVE-2021-31843: Improper Link Resolution Before File Access
Improper privileges management vulnerability in McAfee Endpoint Security ENS Windows prior to 10.7.0 September 2021 Update allows local users to access files which they would otherwise not have access to via manipulating junction links to redirect McAfee folder operations to an unintended locatio...
CVE-2021-36928: Improper Link Resolution Before File Access
Microsoft Edge Chromium-based Elevation of Privilege Vulnerability...
CVE-2021-30968: Improper Link Resolution Before File Access
A validation issue related to hard link behavior was addressed with improved sandbox restrictions. This issue is fixed in macOS Big Sur 11.6.2, tvOS 15.2, macOS Monterey 12.1, Security Update 2021-008 Catalina, iOS 15.2 and iPadOS 15.2, watchOS 8.3. A malicious application may be able to bypass...
CVE-2021-26426: Improper Link Resolution Before File Access
Windows User Account Profile Picture Elevation of Privilege Vulnerability...
CVE-2021-38570: Improper Link Resolution Before File Access
An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows attackers to delete arbitrary files during uninstallation via a symlink...
CVE-2021-32610: Improper Link Resolution Before File Access
In ArchiveTar before 1.4.14, symlinks can refer to targets outside of the extracted archive, a different vulnerability than CVE-2020-36193...
The vulnerability of Trend Micro Deep Security Agent lies in its improper handling of links before accessing a file. This allows attackers to delete any files they desire.
The vulnerability of the Trend Micro Deep Security Agent lies in the improper handling of links before accessing a file. Exploiting this vulnerability could allow an attacker to delete any files they desire...
CVE-2021-32549: Improper Link Resolution Before File Access
It was discovered that readfile in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-13 package apport hooks, it could expose private data to other local users...
