8908 matches found
PT-2019-1106 · Npm +6 · Npm +6
Name of the Vulnerable Software and Affected Versions: npm CLI versions prior to 6.13.3 Description: The issue is related to errors in link handling in the npm and Yarn package managers. Exploitation of this issue may allow a remote attacker to write arbitrary files by creating a symbolic link to...
PT-2019-6936 · Unknown +1 · Data::Uuid +1
Name of the Vulnerable Software and Affected Versions: Data::UUID version 1.219 Description: The issue concerns a symlink attack vulnerability. There is no information provided about the estimated number of potentially affected devices or real-world incidents where this issue was exploited...
Symlink Attack
httpserver is vulnerable to symlink attack. If an attacker is able to create a symbolically linked file in the working directory within the web root, it would be possible to access and read arbitrary system files outside of the web root directory...
EulerOS 2.0 SP2 : python-pillow (EulerOS-SA-2019-2437)
According to the versions of the python-pillow package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Pillow before 2.7.0 allows remote attackers to cause a denial of service via a compressed text chunk in a PNG image that has a large size...
EulerOS 2.0 SP2 : patch (EulerOS-SA-2019-2428)
According to the versions of the patch package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - GNU patch 2.7.2 and earlier allows remote attackers to cause a denial of service memory consumption and segmentation fault via a crafted diff...
CVE-2019-3749
Dell Command Update versions prior to 3.1 contain an Arbitrary File Deletion Vulnerability. A local authenticated malicious user with low privileges potentially could exploit this vulnerability to delete arbitrary files by creating a symlink from the...
CVE-2011-3632
CVE-2011-3632 affects the hardlink utility prior to version 0.1.2, where operations on full filesystem object path names enable local attackers to perform symlink attacks. The provided documents do not specify affected distributions, exact vulnerable files, or a confirmed patch/mitigation. No exp...
CVE-2011-3351
CVE-2011-3351 affects OpenVAS Scanner. OpenVAS-Scanner before 2011-09-11 creates a temporary file insecurely while generating the OVAL system characteristics document using the ovaldi tool, enabling a local attacker to perform symlink attacks and overwrite arbitrary files. The linked OpenVAS entr...
CVE-2015-1396
A Directory Traversal vulnerability exists in the GNU patch before 2.7.4. A remote attacker can write to arbitrary files via a symlink attack in a patch file. NOTE: this issue exists because of an incomplete fix for CVE-2015-1196...
DEBIAN-CVE-2015-1396
A Directory Traversal vulnerability exists in the GNU patch before 2.7.4. A remote attacker can write to arbitrary files via a symlink attack in a patch file. NOTE: this issue exists because of an incomplete fix for CVE-2015-1196...
CVE-2015-1396
A Directory Traversal vulnerability exists in the GNU patch before 2.7.4. A remote attacker can write to arbitrary files via a symlink attack in a patch file. NOTE: this issue exists because of an incomplete fix for CVE-2015-1196...
Directory traversal
A Directory Traversal vulnerability exists in the GNU patch before 2.7.4. A remote attacker can write to arbitrary files via a symlink attack in a patch file. NOTE: this issue exists because of an incomplete fix for CVE-2015-1196...
CVE-2015-1396
GNU patch before 2.7.4 is vulnerable to a directory-traversal via a symlink attack in a patch file, allowing remote write of arbitrary files. Root cause: incomplete fix for CVE-2015-1196. Affected: GNU patch (up to 2.7.3). Remediation: upgrade to 2.7.4 or later; no further details provided in the...
CVE-2015-1396
A Directory Traversal vulnerability exists in the GNU patch before 2.7.4. A remote attacker can write to arbitrary files via a symlink attack in a patch file. NOTE: this issue exists because of an incomplete fix for CVE-2015-1196...
CVE-2014-5255
xcfa before 5.0.1 creates temporary files insecurely which could allow local users to launch a symlink attack and overwrite arbitrary files. Note: A different vulnerability than CVE-2014-5254...
DEBIAN-CVE-2014-5255
xcfa before 5.0.1 creates temporary files insecurely which could allow local users to launch a symlink attack and overwrite arbitrary files. Note: A different vulnerability than CVE-2014-5254...
CVE-2014-5254
xcfa before 5.0.1 creates temporary files insecurely which could allow local users to launch a symlink attack and overwrite arbitrary files...
CVE-2014-5254
xcfa before 5.0.1 creates temporary files insecurely which could allow local users to launch a symlink attack and overwrite arbitrary files...