Unspecified Vulnerability in Micro Air Vehicle Link

Micro Air Vehicle Link MAVLink is a lightweight messaging protocol from the Dronecode project that is primarily used for communication between ground control terminals ground stations and UAVs as well as between airborne UAV components. A security vulnerability exists in MAVLink that could be...

CVE-2020-13657

An elevation of privilege vulnerability exists in Avast Free Antivirus and AVG AntiVirus Free before 20.4 due to improperly handling hard links. The vulnerability allows local users to take control of arbitrary files...

The vulnerability of the ptrace_link function in Linux operating systems allows a hacker to trigger a service failure or increase their privileges.

The vulnerability of the ptracelink function in Linux operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to cause system failures or increase their privileges by using the system call execve...

CVE-2020-0849

An elevation of privilege vulnerability exists when Windows improperly handles hard links, aka 'Windows Hard Link Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0840, CVE-2020-0841, CVE-2020-0896...

Trend Micro Antivirus for Mac power lifting vulnerability (CNVD-2020-03732)

Trend Micro Antivirus for Mac is a set of antivirus software based on Mac platform from Trend Micro. A boost vulnerability exists in Trend Micro Antivirus for Mac 2019 9.0.1379 and earlier versions, which can be exploited by an attacker to create a symbolic link to a target file and modify the fi...

CVE-2018-1632

IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with database administrator user to gain root privileges through a symbolic link vulnerability in .infxdirs. IBM X-Force ID: 144432...

CVE-2018-1634

IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with database administrator user to gain root privileges through a symbolic link vulnerability in infos.DBSERVERNAME. IBM X-Force ID: 144437...

CVE-2018-1634

IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with database administrator user to gain root privileges through a symbolic link vulnerability in infos.DBSERVERNAME. IBM X-Force ID: 144437...

CVE-2018-1632

IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with database administrator user to gain root privileges through a symbolic link vulnerability in .infxdirs. IBM X-Force ID: 144432...

CVE-2018-1631

IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with database administrator user to gain root privileges through a symbolic link vulnerability in oninit mongohash. IBM X-Force ID: 144431...

CVE-2018-1630

IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with database administrator user to gain root privileges through a symbolic link vulnerability in onmode. IBM X-Force ID: 144430...

CVE-2018-1630

IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with database administrator user to gain root privileges through a symbolic link vulnerability in onmode. IBM X-Force ID: 144430...

Design/Logic Flaw

IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with database administrator user to gain root privileges through a symbolic link vulnerability in infos.DBSERVERNAME. IBM X-Force ID: 144437...

CVE-2018-1630

IBM Informix Dynamic Server (IDS) Privilege Escalation (CVE-2018-1630) affects IDS v12.10 (Enterprise) where a local DBA can gain root via a symbolic link vulnerability in onmode. The IBM advisory (IDS security bulletin) confirms the root cause as a symbolic link issue and lists a remediation: up...

CVE-2018-1633

CVE-2018-1633 affects IBM Informix Dynamic Server Enterprise Edition 12.1, where a local DBA could exploit a symbolic link vulnerability in onsrvapd to gain root privileges. The IBM/X-Force report and related bulletins confirm a local privilege-escalation issue with IDS/onsrvapd, consistent with ...

CVE-2018-1631

IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with database administrator user to gain root privileges through a symbolic link vulnerability in oninit mongohash. IBM X-Force ID: 144431...

PT-2019-9297 · Ibm · Ibm Informix Dynamic Server Enterprise Edition

Name of the Vulnerable Software and Affected Versions: IBM Informix Dynamic Server Enterprise Edition version 12.1 Description: A symbolic link vulnerability in onsrvapd could allow a local user logged in with database administrator privileges to gain root privileges. Recommendations: For IBM...

CVE-2019-3567

In some configurations an attacker can inject a new executable path into the extensions.load file for osquery and hard link a parent folder of a malicious binary to a folder with known 'safe' permissions. Under those circumstances osquery will load said malicious executable with SYSTEM permission...

CVE-2019-8452

CVE-2019-8452 describes a local privilege escalation in Check Point ZoneAlarm up to v15.4.062 and Check Point Endpoint Security Client for Windows prior to E80.96. A hard-link created from the log file archive to any file on the system changes the target file’s permissions, allowing access to all...

CVE-2019-8455

A hard-link created from the log file of Check Point ZoneAlarm up to 15.4.062 to any file on the system will get its permission changed so that all users can access that linked file. Doing this on files with limited access gains the local attacker higher privileges to the file...