1686 matches found
CVE-2011-4116: Improper Link Resolution Before File Access
issafe in the File::Temp module for Perl does not properly handle symlinks...
Intel Processor Identification Utility 6.0.0211 Privilege Escalation
Hi @ll, Intel® Processor Identification Utility - Windows Version, version 6.0.0211 from 2019-02-11, available from via , and earlier versions 6.0. are vulnerable: in default installations of all supported versions of Windows really: Windows Vista and later, they allows arbitrary code execution...
Microsoft UPnP - Local Privilege Elevation (Metasploit)
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core/post/common' require 'msf/core/post/file' require 'msf/core/post/windows/priv' require 'msf/core/post/windows/registry' require 'msf/core/exploit/exe'...
CVE-2019-3750
Dell Command Update versions prior to 3.1 contain an Arbitrary File Deletion Vulnerability. A local authenticated malicious user with low privileges potentially could exploit this vulnerability to delete arbitrary files by creating a symlink from the "Temp\IC\ICDebugLog.txt" to any targeted file...
CVE-2019-3750
Dell Command Update versions prior to 3.1 contain an Arbitrary File Deletion Vulnerability. A local authenticated malicious user with low privileges potentially could exploit this vulnerability to delete arbitrary files by creating a symlink from the "Temp\IC\ICDebugLog.txt" to any targeted file...
CVE-2019-3749
Dell Command Update versions prior to 3.1 contain an Arbitrary File Deletion Vulnerability. A local authenticated malicious user with low privileges potentially could exploit this vulnerability to delete arbitrary files by creating a symlink from the...
CVE-2019-3749
Dell Command Update versions prior to 3.1 contain an Arbitrary File Deletion Vulnerability. A local authenticated malicious user with low privileges potentially could exploit this vulnerability to delete arbitrary files by creating a symlink from the...
Arbitrary file deletion
Dell Command Update versions prior to 3.1 contain an Arbitrary File Deletion Vulnerability. A local authenticated malicious user with low privileges potentially could exploit this vulnerability to delete arbitrary files by creating a symlink from the "Temp\IC\ICDebugLog.txt" to any targeted file...
CVE-2019-3750
Dell Command Update versions prior to 3.1 contain an Arbitrary File Deletion Vulnerability. A local authenticated malicious user with low privileges potentially could exploit this vulnerability to delete arbitrary files by creating a symlink from the "Temp\IC\ICDebugLog.txt" to any targeted file...
CVE-2019-3749
Dell Command Update versions prior to 3.1 contain an Arbitrary File Deletion Vulnerability. A local authenticated malicious user with low privileges potentially could exploit this vulnerability to delete arbitrary files by creating a symlink from the...
PT-2019-16690
Name of the Vulnerable Software and Affected Versions Dell Command Update versions prior to 3.1 Description The issue allows a local authenticated malicious user with low privileges to potentially delete arbitrary files by creating a symlink from the "TempICProgressDell InventoryCollector...
CVE-2019-3750: Uncontrolled Search Path Element
Dell Command Update versions prior to 3.1 contain an Arbitrary File Deletion Vulnerability. A local authenticated malicious user with low privileges potentially could exploit this vulnerability to delete arbitrary files by creating a symlink from the "Temp\IC\ICDebugLog.txt" to any targeted file...
PT-2019-16691
Name of the Vulnerable Software and Affected Versions Dell Command Update versions prior to 3.1 Description The issue is related to an Arbitrary File Deletion problem. A local authenticated malicious user with low privileges could potentially exploit this to delete arbitrary files. This is achiev...
CVE-2019-3749: Uncontrolled Search Path Element
Dell Command Update versions prior to 3.1 contain an Arbitrary File Deletion Vulnerability. A local authenticated malicious user with low privileges potentially could exploit this vulnerability to delete arbitrary files by creating a symlink from the...
temp-solf-lmf (>=0.0.49, <=0.1.17) potentially affected by unknown CVE via vant (2.1.7)
vant NPM version 2.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on vant and may be impacted: - temp-solf-lmf =0.0.49, =0.1.17 Source cves: unknown CVE Source advisory: OSV:GHSA-9XR8-8HMC-389F...
temp-solf-lmf (>=0.0.49, <=0.1.17) potentially affected by unknown CVE via vant (2.1.7)
vant NPM version 2.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on vant and may be impacted: - temp-solf-lmf =0.0.49, =0.1.17 Source cves: unknown CVE Source advisory: GHSA-9XR8-8HMC-389F...
CVE-2014-5255
xcfa before 5.0.1 creates temporary files insecurely which could allow local users to launch a symlink attack and overwrite arbitrary files. Note: A different vulnerability than CVE-2014-5254...
PT-2019-6422 · Plan 9 +1 · Rc +1
Name of the Vulnerable Software and Affected Versions: rc versions prior to 1.7.1-5 Description: The issue is related to insufficient input validation in the Temp File Handler component of the Plan 9 rc command shell. This can be exploited by a remote attacker to create arbitrary temporary files...
ALPINE-CVE-2019-3466
The pgctlcluster script in postgresql-common in versions prior to 210 didn't drop privileges when creating socket/statistics temporary directories, which could result in local privilege escalation...