Lucene search
+L

12 matches found

NVD
NVD
•added 2020/09/13 8:15 p.m.•25 views

CVE-2020-25289

The VPN service in AVAST SecureLine before 5.6.4982.470 allows local users to write to arbitrary files via an Object Manager symbolic link from the log directory which has weak permissions...

5.5CVSS0.00449EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2020/09/13 7:35 p.m.•46 views

CVE-2020-25289

The VPN service in AVAST SecureLine before 5.6.4982.470 allows local users to write to arbitrary files via an Object Manager symbolic link from the log directory which has weak permissions...

5.5AI score0.00449EPSS
SaveExploits1References1
CVE
CVE
•added 2020/09/13 7:35 p.m.•55 views

CVE-2020-25289

The CVE-2020-25289 entry describes a local file-write vulnerability in the Avast SecureLine VPN service (pre-5.6.4982.470). The issue arises from an Object Manager symbolic link in the log directory that has weak permissions, allowing local users to write to arbitrary files. Some sources corrobor...

5.5CVSS5.5AI score0.00449EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/09/13 12:00 a.m.•8 views

CVE-2020-25289: Improper Link Resolution Before File Access

The VPN service in AVAST SecureLine before 5.6.4982.470 allows local users to write to arbitrary files via an Object Manager symbolic link from the log directory which has weak permissions...

5.5CVSS5.9AI score0.00449EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2020/09/13 12:00 a.m.•1 views

PT-2020-16067

Name of the Vulnerable Software and Affected Versions AVAST SecureLine versions prior to 5.6.4982.470 Description The issue allows local users to write to arbitrary files via an Object Manager symbolic link from the log directory, which has weak permissions. Recommendations For versions prior to...

5.5CVSS0.00449EPSS
SaveExploits1References3
NVD
NVD
•added 2020/06/30 12:15 p.m.•33 views

CVE-2020-15401

IOBit Malware Fighter Pro 8.0.2.547 allows local users to gain privileges for file deletion by manipulating malicious flagged file locations with an NTFS junction and an Object Manager symbolic link...

4.4CVSS0.00381EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2020/06/30 11:50 a.m.•42 views

CVE-2020-15401

IOBit Malware Fighter Pro 8.0.2.547 allows local users to gain privileges for file deletion by manipulating malicious flagged file locations with an NTFS junction and an Object Manager symbolic link...

4.9AI score0.00381EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2020/06/30 12:00 a.m.•2 views

PT-2020-14411

Name of the Vulnerable Software and Affected Versions IOBit Malware Fighter Pro version 8.0.2.547 Description The issue allows local users to gain privileges for file deletion by manipulating malicious flagged file locations. This is achieved through the use of an NTFS junction and an Object...

4.4CVSS0.00381EPSS
SaveExploits1References3
NVD
NVD
•added 2020/06/22 9:15 p.m.•36 views

CVE-2020-14990

IOBit Advanced SystemCare Free 13.5.0.263 allows local users to gain privileges for file deletion by manipulating the Clean & Optimize feature with an NTFS junction and an Object Manager symbolic link...

7.1CVSS0.00507EPSS
SaveExploits1References2
Prion
Prion
•added 2020/06/22 9:15 p.m.•25 views

Arbitrary file deletion

IOBit Advanced SystemCare Free 13.5.0.263 allows local users to gain privileges for file deletion by manipulating the Clean & Optimize feature with an NTFS junction and an Object Manager symbolic link...

3.6CVSS7AI score0.00507EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/06/22 12:00 a.m.•7 views

CVE-2020-14990: Improper Link Resolution Before File Access

IOBit Advanced SystemCare Free 13.5.0.263 allows local users to gain privileges for file deletion by manipulating the Clean & Optimize feature with an NTFS junction and an Object Manager symbolic link...

7.1CVSS5.9AI score0.00507EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2020/06/22 12:00 a.m.•1 views

PT-2020-14108

Name of the Vulnerable Software and Affected Versions IOBit Advanced SystemCare Free version 13.5.0.263 Description The issue allows local users to gain privileges for file deletion by manipulating the Clean & Optimize feature. This is achieved through the use of an NTFS junction and an Object...

7.1CVSS0.00507EPSS
SaveExploits1References4
Rows per page
Query Builder