CVE-2024-7234

AVG AntiVirus Free AVGSvc Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of AVG AntiVirus Free. An attacker must first obtain the ability to execute low-privileged code on the target system in ord...

CVE-2024-7237

AVG AntiVirus Free AVGSvc Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of AVG AntiVirus Free. An attacker must first obtain the ability to execute low-privileged code on the target system in ord...

CVE-2024-7239 VIPRE Advanced Security Link Following Local Privilege Escalation Vulnerability

VIPRE Advanced Security Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of VIPRE Advanced Security. An attacker must first obtain the ability to execute low-privileged code on the target system in...

CVE-2024-7234 AVG AntiVirus Free AVGSvc Link Following Local Privilege Escalation Vulnerability

AVG AntiVirus Free AVGSvc Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of AVG AntiVirus Free. An attacker must first obtain the ability to execute low-privileged code on the target system in ord...

CVE-2024-7234

The CVE-2024-7234 entry describes a local privilege escalation in AVG AntiVirus Free via the AVGSvc service: an attacker can abuse a symbolic link to delete a file and escalate to SYSTEM. Affected component is the AVG Service; root cause is symbolic link handling. The documents do not specify aff...

CVE-2024-7235 AVG AntiVirus Free Link Following Denial-of-Service Vulnerability

AVG AntiVirus Free Link Following Denial-of-Service Vulnerability. This vulnerability allows local attackers to create a denial-of-service condition on affected installations of AVG AntiVirus Free. An attacker must first obtain the ability to execute low-privileged code on the target system in...

CVE-2024-7228

CVE-2024-7228 affects Avast Free Antivirus. The flaw exists in the Avast Service where an attacker can abuse a symbolic link to create a folder, enabling a local, low-privilege code execution path that can drive a denial-of-service condition on vulnerable installations. Reports from ZDI describe ...

CVE-2024-6260 Malwarebytes Antimalware Link Following Local Privilege Escalation Vulnerability

Malwarebytes Antimalware Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Malwarebytes Antimalware. An attacker must first obtain the ability to execute low-privileged code on the target system i...

CVE-2024-48862: Improper Link Resolution Before File Access

A link following vulnerability has been reported to affect QuLog Center. If exploited, the vulnerability could allow remote attackers to traverse the file system to unintended locations and read or overwrite the contents of unexpected files. We have already fixed the vulnerability in the followin...

CVE-2023-20092: UNIX Symbolic Link (Symlink) Following

Three vulnerabilities in the CLI of Cisco TelePresence CE and RoomOS could allow an authenticated, local attacker to overwrite arbitrary files on the local file system of an affected device. These vulnerabilities are due to improper access controls on files that are on the local file system. An...

CVE-2024-34014: UNIX Symbolic Link (Symlink) Following

Arbitrary file overwrite during recovery due to improper symbolic link handling. The following products are affected: Acronis Backup plugin for cPanel & WHM Linux before build 1.8.3.818, Acronis Backup plugin for cPanel & WHM Linux before build 1.9.1.892, Acronis Backup extension for Plesk Linux...

CVE-2024-34015: UNIX Symbolic Link (Symlink) Following

Sensitive information disclosure during file browsing due to improper symbolic link handling. The following products are affected: Acronis Backup plugin for cPanel & WHM Linux before build 1.8.3.818, Acronis Backup plugin for cPanel & WHM Linux before build 1.9.1.892...

CVE-2024-0134: UNIX Symbolic Link (Symlink) Following

NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead to the creation of unauthorized files on the host. The name and location of the files cannot be controlled by an attacker. A successful exploit of this...

SonicWall Connect Tunnel Multiple Vulnerabilities (SNWLID-2024-0017)

According to its self-reported version, the remote installed SMA1000 Connect Tunnel client is vulnerable to a number of vulnerabilities: - The Improper link resolution before file access 'Link Following' vulnerability in SonicWall Connect Tunnel version 12.4.3.271 and earlier of Windows client...

Qnap QTS Link Following (CVE-2019-7183)

This improper link resolution vulnerability allows remote attackers to access system files. To fix this vulnerability, QNAP recommend updating QTS to their latest versions. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...

Qnap QTS Link Following (CVE-2021-44052)

An improper link resolution before file access 'Link Following' vulnerability has been reported to affect QNAP device running QuTScloud, QuTS hero, and QTS. If exploited, this vulnerability allows remote attackers to traverse the file system to unintended locations and read or overwrite the...

CVE-2024-45316

The Improper link resolution before file access 'Link Following' vulnerability in SonicWall Connect Tunnel version 12.4.3.271 and earlier of Windows client allows users with standard privileges to delete arbitrary folders and files, potentially leading to local privilege escalation attack...

CVE-2024-45315

The Improper link resolution before file access 'Link Following' vulnerability in SonicWall Connect Tunnel version 12.4.3.271 and earlier of Windows client allows users with standard privileges to create arbitrary folders and files, potentially leading to local Denial of Service DoS attack...

CVE-2024-45316

The SonicWall Connect Tunnel Windows client (version 12.4.3.271 and earlier) is vulnerable to a Link Following (Improper link resolution before file access) flaw. This vulnerability exists within the Secure Mobile Access service, where an attacker with standard privileges can create a symbolic li...

CVE-2024-45315

SonicWall Connect Tunnel (Windows client version 12.4.3.271 and earlier) is vulnerable to an Improper link resolution before file access (Link Following) flaw. This vulnerability allows a local attacker with standard privileges to create arbitrary folders and files by creating a symbolic link, wh...