111 matches found
UNIX Symbolic Link (Symlink) Following
Overview Affected versions of this package are vulnerable to UNIX Symbolic Link Symlink Following through the WriteToCachedFile function when handling network cache files in certain configurations. An attacker can overwrite specific host files and change their ownership by planting a symbolic lin...
USN-8294-1: PostgreSQL vulnerabilities
It was discovered that PostgreSQL did not correctly enforce authorization for CREATE TYPE. An attacker could possibly use this issue to execute arbitrary SQL functions. CVE-2026-6472 It was discovered that PostgreSQL incorrectly handled large user input in multiple server features. An attacker...
EUVD-2026-30934
An issue was discovered in the Portrait Dell Color Management application before 3.7.0 for Dell monitors. On Windows, a symbolic link vulnerability allows a local low-privileged user to escalate privileges to Administrator. During installation, the software writes the file CCFLFamily07Feb11.edr t...
golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root
A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the Root.Chmod function is replaced with a symbolic link during execution, specifically after Root.Chmod checks the target but before acting, the chmod operation will be performed on the file the...
CVE-2026-24018
A UNIX symbolic link Symlink following vulnerability in Fortinet FortiClientLinux 7.4.0 through 7.4.4, FortiClientLinux 7.2.2 through 7.2.12 may allow a local and unprivileged user to escalate their privileges to root...
CVE-2025-69431
The ZSPACE Q2C NAS contains a vulnerability related to incorrect symbolic link following. Attackers can format a USB drive to ext4, create a symbolic link to its root directory, insert the drive into the NAS device's slot, and then access the USB drive's directory mounted on the NAS using the Sam...
UNIX Symbolic Link (Symlink) Following
Overview Affected versions of this package are vulnerable to UNIX Symbolic Link Symlink Following via the mishandling of symlink destinations while evaluating template repos. An attacker can write to unintended files and potentially gain shell access on the server by creating out-of-repository...
Dell SupportAssist Privilege Escalation (DSA-2025-445)
The remote Windows host contains an installation of Dell SupportAssist that is affected by an elevation of privilege vulnerability: - Dell SupportAssist for Home PCs versions 4.8.2.29006 and prior and Dell SupportAssist for Business PCs versions 4.9.0.40943 and prior contain a UNIX Symbolic Link...
EUVD-2019-15763
Malware in sbrugna...
EUVD-2018-12210
Malware in sbrugna...
EUVD-2020-21039
Malware in sbrugna...
EUVD-2002-1485
Malware in sbrugna...
EUVD-2018-12213
Malware in sbrugna...
EUVD-2018-17008
Malware in sbrugna...
EUVD-2018-12212
Malware in sbrugna...
EUVD-2003-0865
Malware in sbrugna...
Unity Linux 20.1070e Security Update: rpm (UTSA-2025-680609)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680609 advisory. A symbolic link issue was found in rpm. It occurs when rpm sets the desired permissions and credentials after installing a file. A local unprivileged user could use...
EUVD-2022-35522
Malicious code in bioql PyPI...