Fedora 32 : clamav (2020-6584a641ae)

ClamAV 0.102.4 is a bug patch release to address the following issues : CVE-2020-3350 Fixed a vulnerability a malicious user could exploit to replace a scan target's directory with a symlink to another path to trick clamscan, clamdscan, or clamonacc into removing or moving a different file such a...

CVE-2020-9682

Adobe Creative Cloud Desktop Application versions 5.1 and earlier have a symlink vulnerability vulnerability. Successful exploitation could lead to arbitrary file system write...

CVE-2020-9682

Adobe Creative Cloud Desktop Application versions 5.1 and earlier have a symlink vulnerability vulnerability. Successful exploitation could lead to arbitrary file system write...

CVE-2020-9670

Adobe Creative Cloud Desktop Application versions 5.1 and earlier have a symlink vulnerability vulnerability. Successful exploitation could lead to privilege escalation...

CVE-2020-9670

Adobe Creative Cloud Desktop Application versions 5.1 and earlier have a symlink vulnerability vulnerability. Successful exploitation could lead to privilege escalation...

Privilege escalation

Adobe Creative Cloud Desktop Application versions 5.1 and earlier have a symlink vulnerability vulnerability. Successful exploitation could lead to privilege escalation...

Design/Logic Flaw

Adobe Creative Cloud Desktop Application versions 5.1 and earlier have a symlink vulnerability vulnerability. Successful exploitation could lead to arbitrary file system write...

CVE-2020-9682

CVE-2020-9682 affects Adobe Creative Cloud Desktop Application versions 5.1 and earlier. The issue is a symlink vulnerability that could allow arbitrary file-system write. The vulnerability is documented across multiple sources (NVD entry and vendor advisories) with high/severe impact. Remediatio...

CVE-2020-9682

Adobe Creative Cloud Desktop Application versions 5.1 and earlier have a symlink vulnerability vulnerability. Successful exploitation could lead to arbitrary file system write...

CVE-2020-9670

Adobe Creative Cloud Desktop Application versions 5.1 and earlier have a symlink vulnerability vulnerability. Successful exploitation could lead to privilege escalation...

CVE-2020-9670

CVE-2020-9670 concerns the Adobe Creative Cloud Desktop Application, affected in versions 5.1 and earlier. The connected documents confirm a symlink vulnerability in this product/component that could allow privilege escalation if exploited. The risk is framed in multiple sources as part of APSB20...

CVE-2020-8019

A UNIX Symbolic Link Symlink Following vulnerability in the packaging of syslog-ng of SUSE Linux Enterprise Debuginfo 11-SP3, SUSE Linux Enterprise Debuginfo 11-SP4, SUSE Linux Enterprise Module for Legacy Software 12, SUSE Linux Enterprise Point of Sale 11-SP3, SUSE Linux Enterprise Server...

CVE-2020-8014

A UNIX Symbolic Link Symlink Following vulnerability in the packaging of kopano-spamd of openSUSE Leap 15.1, openSUSE Tumbleweed allowed local attackers with the privileges of the kopano user to escalate to root. This issue affects: openSUSE Leap 15.1 kopano-spamd versions prior to...

Mail.ru: Mail.ru for Android - Theft of sensitive data

Symlink vulnerability in sharing activity allowed to access internal application files in Mail.Ru Mail for Android...

USN-4332-1: File Roller vulnerability

It was discovered that File Roller incorrectly handled symlinks. An attacker could possibly use this issue to expose sensitive information...

CVE-2020-8015

A UNIX Symbolic Link Symlink Following vulnerability in the packaging of exim in openSUSE Factory allows local attackers to escalate from user mail to root. This issue affects: openSUSE Factory exim versions prior to 4.93.0.4-3.1...

CVE-2020-8015 Local privilege escalation in exim package from user mail to root

A UNIX Symbolic Link Symlink Following vulnerability in the packaging of exim in openSUSE Factory allows local attackers to escalate from user mail to root. This issue affects: openSUSE Factory exim versions prior to 4.93.0.4-3.1...

CVE-2019-18901

A UNIX Symbolic Link Symlink Following vulnerability in the mysql-systemd-helper of the mariadb packaging of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15 allows local attackers to change the permissions of arbitrary files to 0640. This issue affects: SUSE Linux Enterprise Serv...

CVE-2019-18901 mysql-systemd-helper allows setting 640 permissions of arbitrary files

A UNIX Symbolic Link Symlink Following vulnerability in the mysql-systemd-helper of the mariadb packaging of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15 allows local attackers to change the permissions of arbitrary files to 0640. This issue affects: SUSE Linux Enterprise Serv...

PT-2020-10006 · Opensuse +2 · Opensuse Factory +4

Name of the Vulnerable Software and Affected Versions: SUSE Linux Enterprise Server 12 salt-master versions 2019.2.0-46.83.1 and prior versions SUSE Linux Enterprise Server 15 salt-master versions 2019.2.0-6.21.1 and prior versions openSUSE Factory salt-master versions 2019.2.2-3.1 and prior...