PT-2024-23329

Name of the Vulnerable Software and Affected Versions PaperCut NG affected versions not specified Description The issue concerns a local privilege escalation vulnerability related to link following in the pc-web-print component of PaperCut NG. Recommendations At the moment, there is no informatio...

CVE-2023-42126

CVE-2023-42126 affects G Data Total Security, specifically the GDBackupSvc service. The flaw allows a local attacker who can run low-privilege code to create a symbolic link that enables the service to write a file with a permissive DACL, enabling privilege escalation to SYSTEM and the execution ...

CVE-2023-42125 Avast Premium Security Sandbox Protection Link Following Privilege Escalation Vulnerability

Avast Premium Security Sandbox Protection Link Following Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Avast Premium Security. An attacker must first obtain the ability to execute low-privileged code on the target...

CVE-2023-42099

Intel Driver & Support Assistant (DSA Service) is affected by a local privilege escalation vulnerability (CVE-2023-42099). The flaw enables a local attacker who can run low-privileged code to abuse symbolic links within the DSA Service to delete a file and escalate to SYSTEM, potentially arbitrar...

CVE-2023-32175

The CVE-2023-32175 issue affects VIPRE Antivirus Plus, specifically the Anti Malware Service. A local attacker can create a symbolic link to abuse the service and create arbitrary files, enabling privilege escalation to SYSTEM and arbitrary code execution. Vector is LOCAL with LOW privilege requi...

CVE-2023-41971

An Improper Link Resolution Before File Access 'Link Following' vulnerability in Zscaler Client Connector on Windows allows a system file to be overwritten.This issue affects Client Connector on Windows: before 3.7...

CVE-2024-23459

An Improper Link Resolution Before File Access 'Link Following' vulnerability in Zscaler Client Connector on Mac allows a system file to be overwritten.This issue affects Zscaler Client Connector on Mac : before 3.7...

CVE-2024-23459 Multiple Arbitrary Creates/Overwrites by link following

An Improper Link Resolution Before File Access 'Link Following' vulnerability in Zscaler Client Connector on Mac allows a system file to be overwritten.This issue affects Zscaler Client Connector on Mac : before 3.7...

CVE-2023-41971

CVE-2023-41971 is a Windows-specific vulnerability in Zscaler Client Connector prior to 3.7, caused by improper link resolution before file access (link following). This can allow overwriting a system file, with CVSSv3.1 metrics indicating local access, low attack complexity, and high impact on c...

PT-2024-13024

Name of the Vulnerable Software and Affected Versions Zscaler Client Connector on Windows versions prior to 3.7 Description An Improper Link Resolution Before File Access 'Link Following' issue allows a system file to be overwritten. Recommendations For versions prior to 3.7, update to version 3....

CVE-2023-41971: Improper Link Resolution Before File Access

An Improper Link Resolution Before File Access 'Link Following' vulnerability in Zscaler Client Connector on Windows allows a system file to be overwritten.This issue affects Client Connector on Windows: before 3.7...

CVE-2024-23459: Improper Link Resolution Before File Access

An Improper Link Resolution Before File Access 'Link Following' vulnerability in Zscaler Client Connector on Mac allows a system file to be overwritten.This issue affects Zscaler Client Connector on Mac : before 3.7...

PT-2024-19881

Name of the Vulnerable Software and Affected Versions Zscaler Client Connector on Mac versions prior to 3.7 Description An Improper Link Resolution Before File Access 'Link Following' vulnerability in Zscaler Client Connector on Mac allows a system file to be overwritten. Recommendations For...

CVE-2024-25952: UNIX Symbolic Link (Symlink) Following

Dell PowerScale OneFS versions 8.2.2.x through 9.7.0.x contains an UNIX symbolic link symlink following vulnerability. A local high privileged attacker could potentially exploit this vulnerability, leading to denial of service, information tampering...

[SECURITY] Fedora 38 Update: w3m-0.5.3-63.git20230121.fc38

The w3m program is a pager or text file viewer that can also be used as a text-mode Web browser. W3m features include the following: when reading an HTML document, you can follow links and view images using an external image viewer; its internet message mode determines the type of document from t...

CVE-2023-41969: UNIX Symbolic Link (Symlink) Following

An arbitrary file deletion in ZSATrayManager where it protects the temporary encrypted ZApp issue reporting file from the unprivileged end user access and modification. Fixed version: Win ZApp 4.3.0 and later...

CVE-2024-0068

Improper Link Resolution Before File Access 'Link Following' vulnerability in HYPR Workforce Access on MacOS allows File Manipulation.This issue affects Workforce Access: before 8.7.1...

CVE-2024-0068

Improper Link Resolution Before File Access 'Link Following' vulnerability in HYPR Workforce Access on MacOS allows File Manipulation.This issue affects Workforce Access: before 8.7.1...

CVE-2024-0068

Improper Link Resolution Before File Access 'Link Following' vulnerability in HYPR Workforce Access on MacOS allows File Manipulation.This issue affects Workforce Access: before 8.7.1...

CVE-2024-0068

CVE-2024-0068 concerns an improper Link Resolution Before File Access (Link Following) vulnerability in HYPR Workforce Access on macOS, affecting versions prior to 8.7.1. The core issue is incorrect resolution of file access links, which can enable file manipulation. Public sources consistently i...