Huawei EulerOS: Security Advisory for policycoreutils (EulerOS-SA-2021-1395)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Digi ConnectPort Backlink Vulnerability

Digi ConnectPort is a server from Digi ConnectPort Digi USA, Inc. It provides wireless communication. A security vulnerability exists in Digi ConnectPort X2e before 3.2.30.6, which allows an attacker to exploit the vulnerability to escalate the privileges of a python user to root via a symbolic...

Debian avahi backlink vulnerability

Avahi is a set of local service discovery tools for Linux. A back-linking vulnerability exists in Debian avahi and allows a local attacker to cause a denial of service or create arbitrary empty files via a symbolic link attack on files under /run/avahi-daemon...

Updated policycoreutils packages fix a security vulnerability

Context relabeling of filesystems is vulnerable to symbolic link attack, allowing a local, unprivileged malicious entity to change the SELinux context of an arbitrary file to a context with few restrictions. This only happens when the relabeling process is done, usually when taking SELinux state...

Cisco Webex Meetings 输入验证错误漏洞

Cisco Webex Meetings provides affordable enterprise virtual meeting solutions. An open redirect vulnerability exists in the Web management interface of Cisco Webex Meetings. The vulnerability stems from improper validation of the input of URL parameters in an HTTP request. An attacker could explo...

OpenDKIM Elevation of Privilege Vulnerability

Opendkim is a C-based software for DKIM sender authentication system organized by Opendkim. An elevation of privilege vulnerability exists in OpenDKIM version 2.10.3 and prior versions, which stems from a failure of a properly programmed call to a high-level local procedure, whereby a local user...

BookStack Injection Vulnerability

BookStack is an open source platform for building wiki documentation using PHP and Laravel from the BookStackApp Bookstackapp team. BookStack suffers from a security vulnerability that stems from the fact that in BookStack prior to version 0.30.5, users with edit page permissions could set up the...

Unbound Backlink Vulnerability

Unbound is a DNS resolver from the NLnet Labs Nlnet Labs Foundation in the Netherlands that supports verified recursion and caching. A security vulnerability exists in NLnet Labs Unbound version 1.12.0 and earlier and NLnet Labs NSD version 4.3.3 and earlier that allows a local symbolic link...

Arbitrary File Write

LPRng is vulnerable to arbitrary file write. A local unauthenticated attacker could overwrite arbitrary files via a symbolic link attack on the /tmp/before file of the psbanner component...

Trend Micro Security 2020 Local Elevation of Privilege Vulnerability (CNVD-2020-73786)

Trend Micro Security 2020 is a suite of computer security protection software from Trend Micro. Trend Micro Security 2020 Consumer has a security vulnerability that can be exploited by an attacker by placing a malicious DLL in an unprotected location and high privileges symbolic link attack, whic...

Cisco Webex Meetings 跨站脚本漏洞

Cisco Webex Meetings provides affordable enterprise virtual meeting solutions. A cross-site scripting vulnerability exists in the API in Cisco Webex Meetings. The vulnerability stems from improper validation of user input provided to the application programming interface API. An attacker could...

Trend Micro Security 2020 后置链接漏洞

Trend Micro Security 2020 is a suite of computer security protection software from Trend Micro. Trend Micro Security 2020 Consumer has a security vulnerability that can be exploited by an attacker by placing a malicious DLL in an unprotected location and high privileges symbolic link attack, whic...

GBase 8s database suffers from a power lift vulnerability (CNVD-2020-65129)

GBase 8s is a secure database management system with full intellectual property rights. GBase 8s database suffers from a power lifting vulnerability, which can be exploited by attackers to gain root privileges via symbolic link attack...

GBase 8s database suffers from a power lift vulnerability (CNVD-2020-65125)

GBase 8s is a secure database management system with full intellectual property rights. GBase 8s database suffers from a power lifting vulnerability, which can be exploited by attackers to gain root privileges via symbolic link attack...

GBase 8s database suffers from a boost vulnerability (CNVD-2020-65128)

GBase 8s is a secure database management system with full intellectual property rights. GBase 8s database suffers from a power lifting vulnerability, which can be exploited by attackers to gain root privileges via symbolic link attack...

GBase 8s database suffers from a power lift vulnerability (CNVD-2020-65126)

GBase 8s is a secure database management system with full intellectual property rights. GBase 8s database suffers from a power lifting vulnerability, which can be exploited by attackers to gain root privileges via symbolic link attack...

CVE-2020-3561

A vulnerability in the Clientless SSL VPN WebVPN of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to inject arbitrary HTTP headers in the responses of the affected system. The vulnerability is due to...

CVE-2020-3991

VMware Horizon Client for Windows 5.x before 5.5.0 contains a denial-of-service vulnerability due to a file system access control issue during install time. Successful exploitation of this issue may allow an attacker to overwrite certain admin privileged files through a symbolic link attack at...

Denial of service

VMware Horizon Client for Windows 5.x before 5.5.0 contains a denial-of-service vulnerability due to a file system access control issue during install time. Successful exploitation of this issue may allow an attacker to overwrite certain admin privileged files through a symbolic link attack at...

CVE-2020-3991

The CVE-2020-3991 entry affects VMware Horizon Client for Windows (5.x before 5.5.0). The vulnerability is a denial-of-service caused by a file system access control issue during install time, where an unauthenticated local attacker could use a symbolic link to overwrite certain admin-privileged ...