Dell Inventory Collector Incorrect Link Resolution Before File Access Vulnerability

Dell Inventory Collector is a tool provided by Dell for collecting device information, mainly used to collect system information such as hardware configuration, operating system version, service packs, and so on from client systems. Dell Inventory Collector suffers from an incorrect link resoluti...

Dell Client Platform Incorrect Link Resolution Vulnerability

Dell Client Platform is client platform software provided by Dell Dell that is primarily used to manage the configuration and functionality of enterprise client computers. Dell Client Platform has an incorrect link resolution vulnerability that can be exploited by an attacker to cause an elevatio...

Dell Client Platform 安全漏洞

Dell Client Platform is client platform software provided by Dell Dell that is primarily used to manage the configuration and functionality of enterprise client computers. Dell Client Platform has an incorrect link resolution vulnerability that can be exploited by an attacker to cause an elevatio...

PT-2024-1643

Name of the Vulnerable Software and Affected Versions Dell Display Manager versions 2.1.1.17 and prior Description The issue is related to an insecure operation on Windows junction/mount points in the Dell Display Manager application. A local malicious user could potentially exploit this during...

PT-2023-9184 · Trend Micro · Trend Micro Apex One As A Service +1

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One affected versions not specified Trend Micro Apex One as a Service affected versions not specified Description: A security issue in Trend Micro Apex One and Apex One as a Service could allow a local attacker to disclose...

McAfee Total Protection 后置链接漏洞

McAfee Total Protection MTP is a suite of antivirus software from McAfee, Inc. A security vulnerability exists in McAfee Total Protection prior to version 16.0.50, which stems from incorrect link resolution. The vulnerability can be exploited by an attacker to elevate user privileges via the...

PT-2023-6716

Name of the Vulnerable Software and Affected Versions Dell Command | Intel vPro Out of Band versions before 4.4.0 Description The issue is related to an arbitrary folder delete vulnerability during uninstallation. A locally authenticated malicious user may potentially exploit this vulnerability,...

多款 MediaTek 产品后置链接漏洞

MediaTek chips are a variety of chips from MediaTek, a division of China's MediaTek Mediatek. A security vulnerability exists in multiple MediaTek products that stems from incorrect link resolution in mobilelogd, which may result in symbolic links...

ASUS Rog Live Service Incorrect Link Resolution Vulnerability

ASUS Rog Live Service is a Desktop Shareware program from ASUS in China. A security vulnerability exists in ASUS Rog Live Service, which stems from a feature in ROG Live Service that deletes temporary files created by the installation without verifying the path before deletion, which can be...

PT-2022-1651

Name of the Vulnerable Software and Affected Versions Trend Micro Antivirus for Mac versions 11.0.2150 and below Description A link following privilege escalation issue could allow a local attacker to modify a file during the update process and escalate their privileges. The attacker must first...

PT-2022-1524 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the Windows Cleanup Manager. It is caused by incorrect link resolution before accessing a file. Exploitation of this issue...

PT-2021-3509

Name of the Vulnerable Software and Affected Versions Red Hat Enterprise Linux affected versions not specified Description The issue is related to the RPM package manager in Red Hat Enterprise Linux, where there is an incorrect link resolution before accessing a file. This can allow an attacker t...

PT-2020-1906

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to an elevation-of-privilege problem in the Windows operating system, specifically with the Windows Installer component. It involves incorrect link resolution before...

QNAP Systems QNAP QTS Incorrect Link Resolution Vulnerability

QNAP Systems QNAP QTS is a Turbo NAS operating system from QNAP Systems. The system provides file storage, management, backup, multimedia applications and security monitoring. A security vulnerability exists in QNAP Systems QNAP QTS, which is caused by the program not properly resolving links. A...

PT-2019-5820

Name of the Vulnerable Software and Affected Versions Trend Micro Deep Security Agent versions 10.0 through 12.0 Description The issue is related to an arbitrary file delete attack, which may lead to availability impact. Local OS access is required. The vulnerability is associated with incorrect...

PT-2018-3443

Name of the Vulnerable Software and Affected Versions: supportutils versions prior to 3.1-5.7.1 Description: The issue is related to incorrect link resolution before file access in the supportutils package, which is part of the SUSE Linux operating system. This could allow an unprivileged user to...

PT-2018-3935 · Red Hat +1 · Glusterfs +1

Name of the Vulnerable Software and Affected Versions: GlusterFS affected versions not specified Description: The issue is related to an incorrect link resolution in the file system, which can be exploited by a remote attacker to execute arbitrary code or cause a denial of service. Recommendation...

PT-2018-3575

Name of the Vulnerable Software and Affected Versions keepalived versions 2.0.8 Description The issue is related to the implementation of PrintData or PrintStats calls in the Keepalived network traffic balancing system, which is associated with incorrect link resolution before accessing a file...

PT-2018-3552

Name of the Vulnerable Software and Affected Versions: systemd versions prior to 237 Description: The issue is related to incorrect link resolution before file access in the systemd-tmpfiles daemon, allowing an attacker to bypass existing access restrictions and potentially disclose protected...