Lucene search
+L

379 matches found

RedhatCVE
RedhatCVE
added 2025/04/17 3:47 a.m.35 views

CVE-2025-29983

Dell Trusted Device, versions prior to 7.0.3.0, contain an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

6.7CVSS6.6AI score0.00168EPSS
SaveExploits0References3
NVD
NVD
added 2025/04/16 8:15 p.m.27 views

CVE-2025-32817

A Improper Link Resolution vulnerability CWE-59 in the SonicWall Connect Tunnel Windows 32 and 64 bit client, this results in unauthorized file overwrite, potentially leading to denial of service or file corruption...

6.1CVSS0.00337EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/16 7:10 p.m.100 views

CVE-2025-32817

CVE-2025-32817 is an "Improper Link Resolution" (CWE-59) vulnerability in the SonicWall Connect Tunnel Windows client (32/64 bit). The connected documents confirm the root cause as improper link resolution that may allow unauthorized file overwrite, potentially causing denial of service or file c...

6.1CVSS6.7AI score0.00337EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/04/16 7:10 p.m.47 views

CVE-2025-32817

A Improper Link Resolution vulnerability CWE-59 in the SonicWall Connect Tunnel Windows 32 and 64 bit client, this results in unauthorized file overwrite, potentially leading to denial of service or file corruption...

0.00337EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/04/16 12:00 a.m.9 views

PT-2025-16879 · Sonicwall · Sonicwall Connect Tunnel

Name of the Vulnerable Software and Affected Versions: SonicWall Connect Tunnel Windows client affected versions not specified Description: The issue is related to an Improper Link Resolution vulnerability, which can result in unauthorized file overwrite. This potentially leads to denial of servi...

6.1CVSS6.4AI score0.00337EPSS
SaveExploits0References15
CNNVD
CNNVD
added 2025/04/16 12:00 a.m.9 views

SonicWALL Connect Tunnel 安全漏洞

SonicWALL Connect Tunnel is a remote software from SonicWALL USA. A security vulnerability exists in SonicWALL Connect Tunnel that stems from improper link resolution, which could result in file overwriting or denial of service...

6.1CVSS7AI score0.00337EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/04/15 3:30 a.m.8 views

CVE-2025-29983

Dell Trusted Device, versions prior to 7.0.3.0, contain an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

6.7CVSS6.8AI score0.00168EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/04/15 12:00 a.m.15 views

Dell Trusted Device 后置链接漏洞

Dell Trusted Device is an application from Dell USA. Dell Trusted Device suffers from a backlink vulnerability that stems from improper link resolution and can be exploited by an attacker to cause an elevation of privilege...

7.3CVSS6.5AI score0.00168EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/04/12 7:49 p.m.46 views

CVE-2025-23010

An Improper Link Resolution Before File Access 'Link Following' vulnerability in SonicWall NetExtender Windows 32 and 64 bit client which allows an attacker to manipulate file paths...

7.2CVSS6.8AI score0.00415EPSS
SaveExploits0References3
NVD
NVD
added 2025/04/10 7:16 p.m.47 views

CVE-2025-23010

An Improper Link Resolution Before File Access 'Link Following' vulnerability in SonicWall NetExtender Windows 32 and 64 bit client which allows an attacker to manipulate file paths...

7.2CVSS0.00415EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/10 6:57 p.m.67 views

CVE-2025-23010

SonicWall NetExtender Windows client (32/64-bit) is affected by CVE-2025-23010: an Improper Link Resolution Before File Access (Link Following) vulnerability that can allow an attacker to manipulate file paths. Concrete details in connected sources indicate affected versions include 10.3.1 and ea...

7.2CVSS6.5AI score0.00415EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/04/10 6:57 p.m.13 views

CVE-2025-23010

An Improper Link Resolution Before File Access 'Link Following' vulnerability in SonicWall NetExtender Windows 32 and 64 bit client which allows an attacker to manipulate file paths...

6.8AI score0.00415EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/04/10 12:00 a.m.15 views

SonicWALL NetExtender Windows client 安全漏洞

SonicWALL NetExtender Windows client is a Windows-based SSL VPN Virtual Private Network client application from SonicWALL USA. The SonicWALL NetExtender Windows client suffers from an improper link resolution vulnerability that stems from improper link resolution, which can be exploited by an...

7.2CVSS6.8AI score0.00415EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/08 5:24 p.m.140 views

CVE-2025-27727

CVE-2025-27727 affects Windows Installer through an improper link resolution before file access ("link following"), enabling local privilege elevation on an authorized attacker. The issue is evidenced by the CVE record and associated assessments (high impact, local access, user interaction none)....

7.8CVSS7.1AI score0.00985EPSS
SaveExploits0References1Affected Software15
Microsoft CVE
Microsoft CVE
added 2025/04/08 7:00 a.m.22 views

Windows Installer Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Windows Installer allows an authorized attacker to elevate privileges locally...

7.8CVSS6.8AI score0.00985EPSS
SaveExploits0
NVD
NVD
added 2025/03/27 5:15 p.m.15 views

CVE-2024-12905

An Improper Link Resolution Before File Access "Link Following" and Improper Limitation of a Pathname to a Restricted Directory "Path Traversal". This vulnerability occurs when extracting a maliciously crafted tar file, which can result in unauthorized file writes or overwrites outside the intend...

7.5CVSS0.02216EPSS
SaveExploits2References3
OSV
OSV
added 2025/03/27 4:25 p.m.12 views

CVE-2024-12905

An Improper Link Resolution Before File Access "Link Following" and Improper Limitation of a Pathname to a Restricted Directory "Path Traversal". This vulnerability occurs when extracting a maliciously crafted tar file, which can result in unauthorized file writes or overwrites outside the intend...

7.5CVSS6.8AI score
SaveExploits0References7
Debian CVE
Debian CVE
added 2025/03/27 4:25 p.m.14 views

CVE-2024-12905

An Improper Link Resolution Before File Access "Link Following" and Improper Limitation of a Pathname to a Restricted Directory "Path Traversal". This vulnerability occurs when extracting a maliciously crafted tar file, which can result in unauthorized file writes or overwrites outside the intend...

7.5CVSS5.8AI score0.02216EPSS
SaveExploits2
CVE
CVE
added 2025/03/27 4:25 p.m.316 views

CVE-2024-12905

CVE-2024-12905 affects the tar-fs package (index.js) and enables path traversal and related file writes/overwrites during extraction of crafted tar archives. Affected ranges: tar-fs < 1.16.4, < 2.1.2, and

7.5CVSS7.2AI score0.02216EPSS
SaveExploits2References3
Cvelist
Cvelist
added 2025/03/27 4:25 p.m.21 views

CVE-2024-12905

An Improper Link Resolution Before File Access "Link Following" and Improper Limitation of a Pathname to a Restricted Directory "Path Traversal". This vulnerability occurs when extracting a maliciously crafted tar file, which can result in unauthorized file writes or overwrites outside the intend...

7.5CVSS0.02216EPSS
SaveExploits2References2
Rows per page
Query Builder