Lucene search
+L

9998 matches found

Microsoft CVE
Microsoft CVE
•added 2026/07/14 2:00 p.m.•30 views

Windows Projected File System Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Windows Projected File System allows an authorized attacker to elevate privileges locally...

7.8CVSS7.3AI score0.0037EPSS
SaveExploits0
OSV
OSV
•added 2026/07/14 9:16 a.m.•17 views

UBUNTU-CVE-2026-8384

In Eclipse Jetty, an HTTP URI of this form: /public;/../admin/secret.txt results in an unresolved path of: /public/../admin/secret.txt instead of the expected: /admin/secret.txt Jetty itself is not affected, as it will not serve the secret.txt file because it will not pass the alias checker only...

5.3CVSS5.9AI score0.0033EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
•added 2026/07/14 9:16 a.m.•29 views

CVE-2026-8384

In Eclipse Jetty, an HTTP URI of this form: /public;/../admin/secret.txt results in an unresolved path of: /public/../admin/secret.txt instead of the expected: /admin/secret.txt Jetty itself is not affected, as it will not serve the secret.txt file because it will not pass the alias checker only...

5.3CVSS5.9AI score0.0033EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2026/07/14 8:56 a.m.•24 views

CVE-2026-8384

In Eclipse Jetty, an HTTP URI of this form: /public;/../admin/secret.txt results in an unresolved path of: /public/../admin/secret.txt instead of the expected: /admin/secret.txt Jetty itself is not affected, as it will not serve the secret.txt file because it will not pass the alias checker only...

5.3CVSS5.9AI score0.0033EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2026/07/14 8:56 a.m.•49 views

CVE-2026-8384

In Eclipse Jetty, an HTTP URI of this form: /public;/../admin/secret.txt results in an unresolved path of: /public/../admin/secret.txt instead of the expected: /admin/secret.txt Jetty itself is not affected, as it will not serve the secret.txt file because it will not pass the alias checker only...

5.3CVSS0.0033EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2026/07/14 7:11 a.m.•55 views

CVE-2026-6851 Improper link resolution before file access in Bitdefender Total Security via Link Following (VA-13681)

An Improper link resolution before file access 'link following' vulnerability in the File Shredder module as used in Bitdefender Total Security and Internet Security on Windows allows a less-privileged local user to elevate rights by leveraging a race conditions via Symbolic Links. This issue...

7CVSS0.00149EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/07/14 7:11 a.m.•19 views

CVE-2026-6851 Improper link resolution before file access in Bitdefender Total Security via Link Following (VA-13681)

An Improper link resolution before file access 'link following' vulnerability in the File Shredder module as used in Bitdefender Total Security and Internet Security on Windows allows a less-privileged local user to elevate rights by leveraging a race conditions via Symbolic Links. This issue...

7CVSS7.2AI score0.00149EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/07/14 7:11 a.m.•24 views

EUVD-2026-43632

An Improper link resolution before file access 'link following' vulnerability in the File Shredder module as used in Bitdefender Total Security and Internet Security on Windows allows a less-privileged local user to elevate rights by leveraging a race conditions via Symbolic Links. This issue...

7CVSS6.1AI score0.00149EPSS
SaveExploits0References1
Snyk
Snyk
•added 2026/07/14 12:38 a.m.•17 views

Use of Incorrectly-Resolved Name or Reference

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Use of Incorrectly-Resolved Name or Reference in the flock process. An attacker can gain unauthorized access to execute or persist actions beyond their intended authorization by leveragin...

8.8CVSS6.1AI score0.00508EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/07/14 12:00 a.m.•44 views

PT-2026-58163

Name of the Vulnerable Software and Affected Versions Windows Routing and Remote Access Service RRAS affected versions not specified Description Improper link resolution before file access, also known as link following, allows an authorized attacker to elevate privileges locally on the system...

7.8CVSS5.9AI score0.0038EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/07/14 12:00 a.m.•39 views

PT-2026-58153

Name of the Vulnerable Software and Affected Versions Universal Plug and Play upnp.dll affected versions not specified Description Improper link resolution before file access, also known as link following, occurs in the upnp.dll component. This allows an authorized attacker to disclose informatio...

5.5CVSS5.8AI score0.00444EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/07/14 12:00 a.m.•33 views

PT-2026-58715

Name of the Vulnerable Software and Affected Versions .NET affected versions not specified Description Improper link resolution before file access, also known as link following, allows an authorized attacker to perform local tampering. This occurs when the system does not properly validate symbol...

7CVSS6.8AI score0.00224EPSS
SaveExploits0References114
OSV
OSV
•added 2026/07/14 12:00 a.m.•22 views

UBUNTU-CVE-2026-50526

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to perform tampering locally...

7CVSS6.8AI score0.00224EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/14 12:00 a.m.•5 views

CVE-2026-50438: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Microsoft PC Manager allows an authorized attacker to elevate privileges locally...

8.8CVSS7.8AI score0.0037EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/14 12:00 a.m.•3 views

CVE-2026-50364: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows Server Backup allows an authorized attacker to elevate privileges locally...

7.3CVSS7.2AI score0.00469EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/14 12:00 a.m.•6 views

CVE-2026-58636: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Window PC Manager allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.0037EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/07/14 12:00 a.m.•63 views

PT-2026-58282

Improper link resolution before file access 'link following' in Window PC Manager allows an authorized attacker to elevate privileges locally...

7.8CVSS6AI score0.0037EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/07/14 12:00 a.m.•37 views

PT-2026-58417

Name of the Vulnerable Software and Affected Versions Microsoft PC Manager versions prior to 3.22.1.0 Description Improper link resolution before file access, also known as link following, allows an authorized attacker to elevate privileges locally. Recommendations Update to version 3.22.1.0 via...

8.8CVSS7.7AI score0.0037EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/07/14 12:00 a.m.•27 views

PT-2026-58203

Name of the Vulnerable Software and Affected Versions Windows Server Backup affected versions not specified Description An improper link resolution issue before file access, known as link following, allows an authorized attacker to elevate privileges locally. This flaw enables a low-privilege...

7.3CVSS6AI score0.00469EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/07/14 12:00 a.m.•31 views

PT-2026-57980

Name of the Vulnerable Software and Affected Versions Bitdefender Total Security versions prior to 27.0.58.315 Bitdefender Internet Security versions prior to 27.0.58.315 Description An improper link resolution before file access, also known as link following, exists in the File Shredder module...

7CVSS5.2AI score0.00149EPSS
SaveExploits0References5
Rows per page
Query Builder