(0Day) Microsoft .NET Link Following Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Microsoft .NET. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

CVE-2022-24671: Improper Link Resolution Before File Access

A link following privilege escalation vulnerability in Trend Micro Antivirus for Max 11.0.2150 and below could allow a local attacker to modify a file during the update process and escalate their privileges. Please note: an attacker must first obtain the ability to execute low-privileged code on...

PT-2022-1635

Name of the Vulnerable Software and Affected Versions Trend Micro Apex One versions 10.0 SP1 and earlier Trend Micro Apex One as a Service versions prior to the fixed version Trend Micro Worry-Free Business Security 10.0 SP1 and earlier Trend Micro Worry-Free Business Security Services agents...

CVE-2022-0017

An improper link resolution before file access 'link following' vulnerability exists in the Palo Alto Networks GlobalProtect app on Windows that enables a local attacker to disrupt system processes and potentially execute arbitrary code with SYSTEM privileges under certain circumstances. This iss...

CVE-2022-0017: Improper Link Resolution Before File Access

An improper link resolution before file access 'link following' vulnerability exists in the Palo Alto Networks GlobalProtect app on Windows that enables a local attacker to disrupt system processes and potentially execute arbitrary code with SYSTEM privileges under certain circumstances. This iss...

CVE-2022-0017

An improper link resolution before file access 'link following' vulnerability exists in the Palo Alto Networks GlobalProtect app on Windows that enables a local attacker to disrupt system processes and potentially execute arbitrary code with SYSTEM privileges under certain circumstances. This iss...

CVE-2021-23521 Link Following

This affects the package juce-framework/JUCE before 6.1.5. This vulnerability is triggered when a malicious archive is crafted with an entry containing a symbolic link. When extracted, the symbolic link is followed outside of the target dir allowing writing arbitrary files on the target host. In...

Bitdefender GravityZone Link Following Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Bitdefender GravityZone. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...

PT-2022-12316

Name of the Vulnerable Software and Affected Versions Trend Micro Apex One versions affected versions not specified Trend Micro Worry-Free Business Security version 10.0 SP1 and Services Description A link following privilege escalation issue could allow a local attacker to create a specially...

Trend Micro Maximum Security Link Following Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Trend Micro Maximum Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exis...

CVE-2021-3641

CVE-2021-3641: Bitdefender GravityZone (EPAG/Endpoint Agent) contains a Link Following DoS vulnerability. A local attacker who can execute low-privileged code can create a symbolic link to abuse the Endpoint Agent service and overwrite a file, enabling a denial-of-service condition. Affected: Gra...

CVE-2021-3641

Improper Link Resolution Before File Access 'Link Following' vulnerability in the EPAG component of Bitdefender Endpoint Security Tools for Windows allows a local attacker to cause a denial of service. This issue affects: Bitdefender GravityZone version 7.1.2.33 and prior versions...

PT-2021-7026

Name of the Vulnerable Software and Affected Versions Trend Micro Antivirus for Mac version 11.5 Description A link following issue in Trend Micro Antivirus for Mac could allow an attacker to create a specially-crafted file as a symlink, potentially leading to privilege escalation. The attacker...

CVE-2021-1612: UNIX Symbolic Link (Symlink) Following

A vulnerability in the Cisco IOS XE SD-WAN Software CLI could allow an authenticated, local attacker to overwrite arbitrary files on the local system. This vulnerability is due to improper access controls on files within the local file system. An attacker could exploit this vulnerability by placi...

PT-2021-5668

Name of the Vulnerable Software and Affected Versions Trend Micro Security Consumer 2021 family of products Description A link following denial-of-service issue could allow an attacker to abuse the PC Health Checkup feature to create symlinks, enabling modification of files and potentially leadin...

CVE-2021-25321: UNIX Symbolic Link (Symlink) Following

A UNIX Symbolic Link Symlink Following vulnerability in arpwatch of SUSE Linux Enterprise Server 11-SP4-LTSS, SUSE Manager Server 4.0, SUSE OpenStack Cloud Crowbar 9; openSUSE Factory, Leap 15.2 allows local attackers with control of the runtime user to run arpwatch as to escalate to root upon th...

PT-2021-3473

Name of the Vulnerable Software and Affected Versions SUSE Linux Enterprise Server 11-SP4-LTSS arpwatch versions prior to 2.1a15 SUSE Manager Server 4.0 arpwatch versions prior to 2.1a15 SUSE OpenStack Cloud Crowbar 9 arpwatch versions prior to 2.1a15 openSUSE Factory arpwatch versions prior to...

CVE-2021-3310

Western Digital My Cloud OS 5 devices before 5.10.122 mishandle Symbolic Link Following on SMB and AFP shares. This can lead to code execution and information disclosure by reading local files...

CVE-2021-3310

Western Digital My Cloud OS 5 devices before 5.10.122 mishandle Symbolic Link Following on SMB and AFP shares. This can lead to code execution and information disclosure by reading local files...

Race condition

A Race Condition Enabling Link Following vulnerability in the packaging of texlive-filesystem of SUSE Linux Enterprise Module for Desktop Applications 15-SP1, SUSE Linux Enterprise Software Development Kit 12-SP4, SUSE Linux Enterprise Software Development Kit 12-SP5; openSUSE Leap 15.1 allows...