Lucene search
+L

8915 matches found

Cvelist
Cvelist
added 2019/11/09 2:02 a.m.26 views

CVE-2009-0035

alsa-utils 1.0.19 and later versions allows local users to overwrite arbitrary files via a symlink attack via the /usr/bin/alsa-info and /usr/bin/alsa-info.sh scripts...

5.4AI score0.00468EPSS
SaveExploits1References3
OSV
OSV
added 2019/11/07 11:15 p.m.10 views

DEBIAN-CVE-2013-1809

Gambas before 3.4.0 allows remote attackers to move or manipulate directory contents or perform symlink attacks due to the creation of insecure temporary directories...

7.5CVSS7.1AI score0.02011EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2019/11/07 11:15 p.m.34 views

CVE-2013-1809

Gambas before 3.4.0 allows remote attackers to move or manipulate directory contents or perform symlink attacks due to the creation of insecure temporary directories...

7.5CVSS7.1AI score0.02011EPSS
SaveExploits0References2
NVD
NVD
added 2019/11/07 8:15 p.m.18 views

CVE-2010-2449

Gource through 0.26 logs to a predictable file name /tmp/gource-$UID.tmp, enabling attackers to overwrite an arbitrary file via a symlink attack...

6.5CVSS6.5AI score0.01702EPSS
SaveExploits0References3
OSV
OSV
added 2019/11/07 8:15 p.m.9 views

DEBIAN-CVE-2010-2449

Gource through 0.26 logs to a predictable file name /tmp/gource-$UID.tmp, enabling attackers to overwrite an arbitrary file via a symlink attack...

6.5CVSS6.7AI score0.01702EPSS
SaveExploits0References1
OSV
OSV
added 2019/11/07 8:15 p.m.15 views

CVE-2010-2449

Gource through 0.26 logs to a predictable file name /tmp/gource-$UID.tmp, enabling attackers to overwrite an arbitrary file via a symlink attack...

6.5CVSS6.5AI score
SaveExploits0References3
Prion
Prion
added 2019/11/07 8:15 p.m.17 views

Code injection

Gource through 0.26 logs to a predictable file name /tmp/gource-$UID.tmp, enabling attackers to overwrite an arbitrary file via a symlink attack...

5.5CVSS7.1AI score0.01702EPSS
SaveExploits0References3Affected Software1
UbuntuCve
UbuntuCve
added 2019/11/07 8:15 p.m.31 views

CVE-2010-2449

Gource through 0.26 logs to a predictable file name /tmp/gource-$UID.tmp, enabling attackers to overwrite an arbitrary file via a symlink attack...

6.5CVSS6.7AI score0.01702EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2019/11/07 7:46 p.m.24 views

CVE-2010-2449

Gource through 0.26 logs to a predictable file name /tmp/gource-$UID.tmp, enabling attackers to overwrite an arbitrary file via a symlink attack...

6.5AI score0.01702EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2019/11/07 7:46 p.m.25 views

CVE-2010-2449

Gource through 0.26 logs to a predictable file name /tmp/gource-$UID.tmp, enabling attackers to overwrite an arbitrary file via a symlink attack...

6.5CVSS6.5AI score0.01702EPSS
SaveExploits0
CVE
CVE
added 2019/11/07 7:46 p.m.53 views

CVE-2010-2449

CVE-2010-2449 affects Gource up to version 0.26. The vulnerability arises from logging to a predictable file name (/tmp/gource-$UID.tmp), enabling a symlink attack to overwrite an arbitrary file. Impact: potential file tampering with integrity risk; confidentiality/availability not indicated. No ...

6.5CVSS6.4AI score0.01702EPSS
SaveExploits0References3Affected Software1
Veracode
Veracode
added 2019/11/06 12:21 a.m.19 views

Arbitrary File Overwrite

libqb is vulnerable to arbitrary file overwrite. An attacker is able to overwrite arbitrary files via a symlink attack due to the usage of predictable filenames under /dev/shm and /tmp without OEXCL...

7.1CVSS4.5AI score0.00655EPSS
SaveExploits1References13Affected Software1
FreeBSD
FreeBSD
added 2019/11/06 12:00 a.m.55 views

GNU cpio -- multiple vulnerabilities

Sergey Poznyakoff reports: This stable release fixes several potential vulnerabilities CVE-2015-1197: cpio, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive. CVE-2016-2037: The cpiosafernamesuffix function i...

7.3CVSS7.1AI score0.05484EPSS
SaveExploits5References1
RedHat Linux
RedHat Linux
added 2019/11/05 9:19 p.m.9 views

libqb: Insecure treatment of IPC (temporary) files

libqb before 1.0.5 allows local users to overwrite arbitrary files via a symlink attack, because it uses predictable filenames under /dev/shm and /tmp without OEXCL...

7.1CVSS7.4AI score0.00655EPSS
SaveExploits1References4
OSV
OSV
added 2019/10/30 10:15 p.m.10 views

DEBIAN-CVE-2010-0398

The init script in autokey before 0.61.3-2 allows local attackers to write to arbitrary files via a symlink attack...

6.5CVSS6.7AI score0.00971EPSS
SaveExploits1References1
OSV
OSV
added 2019/10/30 10:15 p.m.13 views

CVE-2010-0398

The init script in autokey before 0.61.3-2 allows local attackers to write to arbitrary files via a symlink attack...

6.5CVSS6.6AI score
SaveExploits0References3
NVD
NVD
added 2019/10/30 10:15 p.m.24 views

CVE-2010-0398

The init script in autokey before 0.61.3-2 allows local attackers to write to arbitrary files via a symlink attack...

6.5CVSS6.3AI score0.00971EPSS
SaveExploits1References2
Prion
Prion
added 2019/10/30 10:15 p.m.24 views

Code injection

The init script in autokey before 0.61.3-2 allows local attackers to write to arbitrary files via a symlink attack...

5.5CVSS6.9AI score0.00971EPSS
SaveExploits1References2Affected Software1
UbuntuCve
UbuntuCve
added 2019/10/30 10:15 p.m.39 views

CVE-2010-0398

The init script in autokey before 0.61.3-2 allows local attackers to write to arbitrary files via a symlink attack...

6.5CVSS6.7AI score0.00971EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2019/10/30 9:07 p.m.30 views

CVE-2010-0398

The init script in autokey before 0.61.3-2 allows local attackers to write to arbitrary files via a symlink attack...

6.3AI score0.00971EPSS
SaveExploits1References2
Rows per page
Query Builder