Lucene search
+L

396 matches found

Positive Technologies
Positive Technologies
added 2025/12/09 12:0 a.m.11 views

PT-2025-50111

Name of the Vulnerable Software and Affected Versions Dell Encryption versions prior to 11.12.1 Description Dell Encryption contains an Improper Link Resolution Before File Access 'Link Following' issue. A local attacker with low privileges could potentially tamper with information by exploiting...

6.6CVSS6.1AI score0.00082EPSS
SaveExploits0References3
OSV
OSV
added 2025/11/25 10:3 p.m.10 views

JLSEC-2025-235 An improper link resolution flaw while extracting an archive can lead to changing the access control...

An improper link resolution flaw while extracting an archive can lead to changing the access control list ACL of the target of the link. An attacker may provide a malicious archive to a victim user, who would trigger this flaw when trying to extract the archive. A local attacker may use this flaw...

7.8CVSS6.7AI score0.00367EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2025/11/13 12:0 a.m.5 views

Siemens SIMATIC S7-1500 Improper Link Resolution Before File Access (CVE-2021-28153)

An issue was discovered in GNOME GLib before 2.66.8. When gfilereplace is used with GFILECREATEREPLACEDESTINATION to replace a path that is a dangling symlink, it incorrectly also creates the target of the symlink as an empty file, which could conceivably have security relevance if the symlink is...

5.3CVSS6.7AI score0.02622EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2025/11/13 12:0 a.m.10 views

Generex UPS Adapter CS141 Improper Link Resolution Before File Access (CVE-2022-47188)

There is an arbitrary file reading vulnerability in Generex UPS CS141 below 2.06 version. An attacker, making use of the default credentials, could upload a backup file containing a symlink to /etc/shadow, allowing him to obtain the content of this path. This plugin only works with Tenable.ot...

7.5CVSS8AI score0.00914EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2025/11/12 5:7 p.m.6 views

CVE-2025-24918

Improper link resolution before file access 'link following' for some IntelR Server Configuration Utility software and IntelR Server Firmware Update Utility software before version 16.0.12. within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an...

6.7CVSS6.5AI score0.00124EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/11/11 5:59 p.m.7 views

EUVD-2025-93447

Improper link resolution before file access 'link following' in Windows Routing and Remote Access Service RRAS allows an authorized attacker to deny service locally...

5.5CVSS5.3AI score0.00489EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/11/11 4:50 p.m.3 views

CVE-2025-24918

Improper link resolution before file access 'link following' for some IntelR Server Configuration Utility software and IntelR Server Firmware Update Utility software before version 16.0.12. within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an...

6.7CVSS6.1AI score0.00124EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
added 2025/11/11 4:0 p.m.12 views

Host Process for Windows Tasks Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Host Process for Windows Tasks allows an authorized attacker to elevate privileges locally...

7.8CVSS5.4AI score0.04666EPSS
SaveExploits0
CNNVD
CNNVD
added 2025/11/11 12:0 a.m.7 views

Intel Server Configuration Utility和Intel Server Firmware Update Utility 后置链接漏洞

Intel Server Configuration Utility and Intel Server Firmware Update Utility are both products of Intel Corporation Intel, U.S.A. Intel Server Configuration Utility is a command line utility. Intel Server Firmware Update Utility is a command line utility. A backlink vulnerability exists in Intel...

6.7CVSS6.8AI score0.00124EPSS
SaveExploits0References2
OSV
OSV
added 2025/10/24 2:39 p.m.6 views

BIT-DOTNET-2025-55247 .NET Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...

7.3CVSS6.9AI score0.00556EPSS
SaveExploits0References2
Snyk
Snyk
added 2025/10/14 5:45 p.m.1 views

Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack via improper handling of symbolic links before file access. An attacker can gain elevated privileges by exploiting the way the system resolves links, potentially accessing or modifying files with higher permissions...

7.3CVSS9.3AI score0.00556EPSS
SaveExploits0References2
NVD
NVD
added 2025/10/14 5:15 p.m.5 views

CVE-2025-55247

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...

7.3CVSS0.00556EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/10/14 12:0 a.m.4 views

PT-2025-42124

Name of the Vulnerable Software and Affected Versions Windows Health and Optimized Experiences Service affected versions not specified Description An issue exists in Windows Health and Optimized Experiences Service related to improper link resolution before file access, also known as 'link...

7.8CVSS8.9AI score0.00322EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/10/13 12:0 a.m.7 views

ASUS Armoury Crate 安全漏洞

ASUS Armoury Crate is a utility software developed by ASUS to centrally control and manage ROG Gamerland and some ASUS gaming products. ASUS Armoury Crate suffers from a link following improper vulnerability that can be exploited by an attacker to cause a local elevation of privilege...

8.5CVSS6.4AI score0.00183EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/07 7:44 p.m.9 views

EUVD-2025-32891

Improper Link Resolution Before File Access in the AWS VPN Client for macOS versions 1.3.2- 5.2.0 allows a local user to execute code with elevated privileges. Insufficient validation checks on the log destination directory during log rotation could allow a non-administrator user to create a...

9.3CVSS7.2AI score0.00212EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2016-10406

Malware in sbrugna...

9CVSS8.3AI score0.03795EPSS
SaveExploits1References11
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2019-16727

Malware in sbrugna...

9.8CVSS9.4AI score0.01614EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2021-10287

Malware in sbrugna...

7.8CVSS7.7AI score0.00367EPSS
SaveExploits0References10
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2023-32590

Malicious code in bioql PyPI...

6.8CVSS6.5AI score0.00363EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.7 views

EUVD-2024-20957

Malicious code in bioql PyPI...

7.1CVSS6.6AI score0.00474EPSS
SaveExploits0References1
Rows per page
Query Builder