1243 matches found
CVE-2024-20656: Improper Link Resolution Before File Access
Visual Studio Elevation of Privilege Vulnerability...
CVE-2023-51654
Improper link resolution before file access 'Link Following' issue exists in iPrint&Scan Desktop for Windows versions 11.0.0 and earlier. A symlink attack by a malicious user may cause a Denial-of-service DoS condition on the PC...
Input validation
Improper link resolution before file access 'Link Following' issue exists in iPrint&Scan Desktop for Windows versions 11.0.0 and earlier. A symlink attack by a malicious user may cause a Denial-of-service DoS condition on the PC...
Brother iPrint&Scan Desktop for Windows vulnerable to improper link resolution before file access
Overview iPrint Desktop for Windows provided by Brother Industries, Ltd. outputs logs to a certain log file. The affected version of the product does not check whether the log file is a normal file or a symbolic link to a certain file CWE-59. Chris Au reported this vulnerability to Brother...
CVE-2023-28872: Improper Link Resolution Before File Access
Support Assistant in NCP Secure Enterprise Client before 13.10 allows attackers to execute DLL files with SYSTEM privileges by creating a symbolic link from a %LOCALAPPDATA%\Temp\NcpSupport location...
CVE-2023-36391: Improper Link Resolution Before File Access
Local Security Authority Subsystem Service Elevation of Privilege Vulnerability...
CVE-2023-35633: Improper Link Resolution Before File Access
Windows Kernel Elevation of Privilege Vulnerability...
CVE-2023-35624: Improper Link Resolution Before File Access
Azure Connected Machine Agent Elevation of Privilege Vulnerability...
Improper Link Resolution Before File Access (Leaky Vessels)
Overview Affected versions of this package are vulnerable to Improper Link Resolution Before File Access Leaky Vessels allowing arbitrary file deletion on the host system. A malicious BuildKit frontend or Dockerfile using RUN --mount could trick the feature that removes empty files created for th...
CVE-2023-28871: Improper Link Resolution Before File Access
Support Assistant in NCP Secure Enterprise Client before 12.22 allows attackers to read registry information of the operating system by creating a symbolic link...
CVE-2023-28869: Improper Link Resolution Before File Access
Support Assistant in NCP Secure Enterprise Client before 12.22 allows attackers read the contents of arbitrary files on the operating system by creating a symbolic link...
CVE-2023-28868: Improper Link Resolution Before File Access
Support Assistant in NCP Secure Enterprise Client before 12.22 allows attackers to delete arbitrary files on the operating system by creating a symbolic link...
Medium: libarchive
Issue Overview: An improper link resolution flaw can occur while extracting an archive leading to changing modes, times, access control lists, and flags of a file outside of the archive. An attacker may provide a malicious archive to a victim user, who would trigger this flaw when trying to extra...
Amazon Linux 2 : libarchive (ALAS-2023-2374)
The version of libarchive installed on the remote host is prior to 3.1.2-14. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2374 advisory. An improper link resolution flaw can occur while extracting an archive leading to changing modes, times, access control lists,...
PT-2023-9184 · Trend Micro · Trend Micro Apex One As A Service +1
Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One affected versions not specified Trend Micro Apex One as a Service affected versions not specified Description: A security issue in Trend Micro Apex One and Apex One as a Service could allow a local attacker to disclose...
CVE-2023-36399: Improper Link Resolution Before File Access
Windows Storage Elevation of Privilege Vulnerability...
CVE-2023-36047: Improper Link Resolution Before File Access
Windows Authentication Elevation of Privilege Vulnerability...
CVE-2023-43590: Improper Link Resolution Before File Access
Link following in Zoom Rooms for macOS before version 5.16.0 may allow an authenticated user to conduct an escalation of privilege via local access...