Lucene search
K

570 matches found

Prion
Prion
added 2021/11/09 2:15 p.m.14 views

Input validation

Improper Link Resolution Before File Access 'Link Following' vulnerability in the EPAG component of Bitdefender Endpoint Security Tools for Windows allows a local attacker to cause a denial of service. This issue affects: Bitdefender GravityZone version 7.1.2.33 and prior versions...

3.6CVSS6AI score0.00341EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2021/11/09 2:10 p.m.17 views

CVE-2021-3641 Improper Link Resolution Before File Access in Bitdefender GravityZone (VA-9921)

Improper Link Resolution Before File Access 'Link Following' vulnerability in the EPAG component of Bitdefender Endpoint Security Tools for Windows allows a local attacker to cause a denial of service. This issue affects: Bitdefender GravityZone version 7.1.2.33 and prior versions...

6.1CVSS6.3AI score0.00341EPSS
Exploits0References2
OSV
OSV
added 2021/06/09 8:15 p.m.2 views

CVE-2021-0094

Improper link resolution before file access in IntelR DSA before version 20.11.50.9 may allow an authenticated user to potentially enable an escalation of privilege via local access...

7.8CVSS5.8AI score0.00284EPSS
Exploits0References1
NVD
NVD
added 2021/06/09 8:15 p.m.11 views

CVE-2021-0094

Improper link resolution before file access in IntelR DSA before version 20.11.50.9 may allow an authenticated user to potentially enable an escalation of privilege via local access...

7.8CVSS0.00284EPSS
Exploits0References1
Prion
Prion
added 2021/06/09 8:15 p.m.12 views

Input validation

Improper link resolution before file access in IntelR DSA before version 20.11.50.9 may allow an authenticated user to potentially enable an escalation of privilege via local access...

4.6CVSS7.7AI score0.00284EPSS
Exploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/06/09 8:15 p.m.1 views

CVE-2021-0094

Improper link resolution before file access in IntelR DSA before version 20.11.50.9 may allow an authenticated user to potentially enable an escalation of privilege via local access...

7.8CVSS5.3AI score0.00284EPSS
Exploits0References2
Cvelist
Cvelist
added 2021/06/09 7:5 p.m.12 views

CVE-2021-0094

Improper link resolution before file access in IntelR DSA before version 20.11.50.9 may allow an authenticated user to potentially enable an escalation of privilege via local access...

8AI score0.00284EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/06/09 12:0 a.m.2 views

Intel DSA 后置链接漏洞

Intel DSA is a driver update tool. It can detect user drivers, update installed drivers to the latest version, support intel series of graphics cards, audio, network cards and chipset drivers, i card users must have. A backlink vulnerability exists in versions of Intel DSA prior to 20.11.50.9 tha...

7.8CVSS7.3AI score0.00284EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2021/04/15 12:0 a.m.34 views

EulerOS Virtualization 2.9.0 : sudo (EulerOS-SA-2021-1757)

According to the versions of the sudo package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A race condition vulnerability was found in the temporary file handling of sudoedit's SELinux RBAC support. On systems where SELinux...

7.8CVSS6.6AI score0.01066EPSS
Exploits2References3
Tenable Nessus
Tenable Nessus
added 2021/04/15 12:0 a.m.35 views

EulerOS Virtualization 2.9.1 : sudo (EulerOS-SA-2021-1726)

According to the versions of the sudo package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A race condition vulnerability was found in the temporary file handling of sudoedit's SELinux RBAC support. On systems where SELinux...

7.8CVSS6.6AI score0.01066EPSS
Exploits2References3
NVD
NVD
added 2020/05/19 9:15 p.m.13 views

CVE-2020-2024

An improper link resolution vulnerability affects Kata Containers versions prior to 1.11.0. Upon container teardown, a malicious guest can trick the kata-runtime into unmounting any mount point on the host and all mount points underneath it, potentiality resulting in a host DoS...

6.5CVSS6.9AI score0.00366EPSS
Exploits0References2
OSV
OSV
added 2020/05/19 9:15 p.m.17 views

CVE-2020-2024

An improper link resolution vulnerability affects Kata Containers versions prior to 1.11.0. Upon container teardown, a malicious guest can trick the kata-runtime into unmounting any mount point on the host and all mount points underneath it, potentiality resulting in a host DoS...

6.5CVSS6.6AI score
Exploits0References2
Prion
Prion
added 2020/05/19 9:15 p.m.17 views

Input validation

An improper link resolution vulnerability affects Kata Containers versions prior to 1.11.0. Upon container teardown, a malicious guest can trick the kata-runtime into unmounting any mount point on the host and all mount points underneath it, potentiality resulting in a host DoS...

2.1CVSS6.3AI score0.00366EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2020/05/19 9:5 p.m.16 views

CVE-2020-2024 Kata Containers - Guests can trick the kata-runtime into unmounting any mount point on the host

An improper link resolution vulnerability affects Kata Containers versions prior to 1.11.0. Upon container teardown, a malicious guest can trick the kata-runtime into unmounting any mount point on the host and all mount points underneath it, potentiality resulting in a host DoS...

6.5CVSS7.4AI score0.00366EPSS
Exploits0References2
Cvelist
Cvelist
added 2020/04/21 10:40 a.m.14 views

CVE-2020-8099 Link Resolution Privilege Escalation Vulnerability in Bitdefender Antivirus Free (VA-8387)

A vulnerability in the improper handling of junctions in Bitdefender Antivirus Free can allow an unprivileged user to substitute a quarantined file, and restore it to a privileged location. This issue affects: Bitdefender Antivirus Free versions prior to 1.0.17...

7.1CVSS6.8AI score0.00419EPSS
Exploits0References1
Github Security Blog
Github Security Blog
added 2020/02/14 11:10 p.m.127 views

Yarn Improper link resolution before file access (Link Following)

In Yarn before 1.21.1, the package install functionality can be abused to generate arbitrary symlinks on the host filesystem by using specially crafted "bin" keys. Existing files could be overwritten depending on the current user permission set...

7.8CVSS7.4AI score0.01505EPSS
Exploits1References10Affected Software1
CNVD
CNVD
added 2019/12/09 12:0 a.m.2 views

QNAP Systems QNAP QTS Incorrect Link Resolution Vulnerability

QNAP Systems QNAP QTS is a Turbo NAS operating system from QNAP Systems. The system provides file storage, management, backup, multimedia applications and security monitoring. A security vulnerability exists in QNAP Systems QNAP QTS, which is caused by the program not properly resolving links. A...

9.8CVSS9.2AI score0.01614EPSS
Exploits0References1
NVD
NVD
added 2019/12/05 5:15 p.m.22 views

CVE-2019-7183

This improper link resolution vulnerability allows remote attackers to access system files. To fix this vulnerability, QNAP recommend updating QTS to their latest versions...

9.8CVSS9.4AI score0.01614EPSS
Exploits0References1
OSV
OSV
added 2019/12/05 5:15 p.m.2 views

CVE-2019-7183

This improper link resolution vulnerability allows remote attackers to access system files. To fix this vulnerability, QNAP recommend updating QTS to their latest versions...

9.8CVSS7.3AI score
Exploits0References1
Prion
Prion
added 2019/12/05 5:15 p.m.21 views

Input validation

This improper link resolution vulnerability allows remote attackers to access system files. To fix this vulnerability, QNAP recommend updating QTS to their latest versions...

7.5CVSS9.3AI score0.01614EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder