CWE-59 · Improper Link Resolution Before File Access (page 13)
Page 13 of 18 — CVEs classified under CWE-59, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-0841 | High | 7.8 | 2019-04-09 | An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privileg… |
CVE-2019-1002101 | Medium | 6.4 | 2019-04-01 | The kubectl cp command allows copying files between containers and the user machine. To copy files from a container, Kubernetes creates a tar inside the contai… |
CVE-2019-5674 | High | 7.0 | 2019-03-28 | NVIDIA GeForce Experience before 3.18 contains a vulnerability when ShadowPlay or GameStream is enabled. When an attacker has access to the system and creates… |
CVE-2018-17955 | Low | 2.2 | 2019-03-15 | In yast2-multipath before version 4.1.1 a static temporary filename allows local attackers to overwrite files on systems without symlink protection |
CVE-2018-19638 | Low | 2.2 | 2019-03-05 | In supportutils, before version 3.1-5.7.1 and if pacemaker is installed on the system, an unprivileged user could have overwritten arbitrary files in the direc… |
CVE-2018-19637 | Low | 2.8 | 2019-03-05 | Supportutils, before version 3.1-5.7.1, wrote data to static file /tmp/supp_log, allowing local attackers to overwrite files on systems without symlink protect… |
CVE-2019-5665 | High | 7.8 | 2019-02-27 | NVIDIA Windows GPU Display driver contains a vulnerability in the 3D vision component in which the stereo service software, when opening a file, does not check… |
CVE-2019-8372 | High | 7.0 | 2019-02-18 | The LHA.sys driver before 1.1.1811.2101 in LG Device Manager exposes functionality that allows low-privileged users to read and write arbitrary physical memory… |
CVE-2019-0574 | High | 7.8 | 2019-01-08 | An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka "Windows Data Sharing Service Elev… |
CVE-2019-0572 | High | 7.8 | 2019-01-08 | An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka "Windows Data Sharing Service Elev… |
CVE-2018-1834 | High | 7.4 | 2018-11-09 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 contains a vulnerability that could allow a local user to escalate… |
CVE-2018-1781 | High | 8.4 | 2018-11-09 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local user to obtain root access by exploiting a symb… |
CVE-2018-1780 | High | 7.8 | 2018-11-09 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local db2 instance owner to obtain root access by exp… |
CVE-2018-19044 | Medium | 4.7 | 2018-11-08 | keepalived 2.0.8 didn't check for pathnames with symlinks when writing data to a temporary file upon a call to PrintData or PrintStats. This allowed local user… |
CVE-2018-14651 | High | 8.8 | 2018-10-31 | It was found that the fix for CVE-2018-10927, CVE-2018-10928, CVE-2018-10929, CVE-2018-10930, and CVE-2018-10926 was incomplete. A remote, authenticated attack… |
CVE-2018-17567 | High | 7.5 | 2018-09-28 | Jekyll through 3.6.2, 3.7.x through 3.7.3, and 3.8.x through 3.8.3 allows attackers to access arbitrary files by specifying a symlink in the "include" key in t… |
CVE-2018-10928 | High | 8.8 | 2018-09-04 | A flaw was found in RPC request using gfs3_symlink_req in glusterfs server which allows symlink destinations to point to file paths outside of the gluster volu… |
CVE-2018-6557 | High | 7.0 | 2018-08-21 | The MOTD update script in the base-files package in Ubuntu 18.04 LTS before 10.1ubuntu2.2, and Ubuntu 18.10 before 10.1ubuntu6 incorrectly handled temporary fi… |
CVE-2011-2765 | High | 7.5 | 2018-08-20 | pyro before 3.15 unsafely handles pid files in temporary directory locations and opening the pid file as root. An attacker can use this flaw to overwrite arbit… |
CVE-2018-15351 | Medium | 6.5 | 2018-08-17 | Denial of service via crafting malicious link and sending it to a privileged user can cause Denial of Service in Kraftway 24F2XG Router firmware version 3.5.30… |
CVE-2017-7500 | High | 7.3 | 2018-08-13 | It was found that rpm did not properly handle RPM installations when a destination path was a symbolic link to a directory, possibly changing ownership and per… |
CVE-2018-10897 | High | 8.1 | 2018-08-01 | A directory traversal issue was found in reposync, a part of yum-utils, where reposync fails to sanitize paths in remote repository configuration files. If an… |
CVE-2016-8641 | Medium | 6.7 | 2018-08-01 | A privilege escalation vulnerability was found in nagios 4.2.x that occurs in daemon-init.in when creating necessary files and insecurely changing the ownershi… |
CVE-2017-15097 | Medium | 6.5 | 2018-07-27 | Privilege escalation flaws were found in the Red Hat initialization scripts of PostgreSQL. An attacker with access to the postgres user account could use these… |
CVE-2016-9595 | High | 7.3 | 2018-07-27 | A flaw was found in katello-debug before 3.4.0 where certain scripts and log files used insecure temporary files. A local user could exploit this flaw to condu… |
CVE-2018-14335 | Medium | 6.5 | 2018-07-24 | An issue was discovered in H2 1.4.197. Insecure handling of permissions in the backup function allows attackers to read sensitive files (outside of their permi… |
CVE-2014-4150 | Medium | 5.5 | 2018-07-20 | The scheme48-send-definition function in cmuscheme48.el in Scheme 48 allows local users to write to arbitrary files via a symlink attack on /tmp/s48lose.tmp. |
CVE-2014-0243 | Medium | 5.5 | 2018-07-19 | Check_MK through 1.2.5i2p1 allows local users to read arbitrary files via a symlink attack to a file in /var/lib/check_mk_agent/job. |
CVE-2018-14329 | Medium | 4.7 | 2018-07-17 | In HTSlib 1.8, a race condition in cram/cram_io.c might allow local users to overwrite arbitrary files via a symlink attack. |
CVE-2018-11637 | High | 7.5 | 2018-07-03 | Information leakage vulnerability in the administrative console in Dialogic PowerMedia XMS through 3.5 allows remote attackers to read arbitrary files from the… |
CVE-2018-13054 | High | 8.1 | 2018-07-02 | An issue was discovered in Cinnamon 1.9.2 through 3.8.6. The cinnamon-settings-users.py GUI runs as root and allows configuration of (for example) other users'… |
CVE-2018-1000544 | Critical | 9.8 | 2018-06-26 | rubyzip gem rubyzip version 1.2.1 and earlier contains a Directory Traversal vulnerability in Zip::File component that can result in write arbitrary files to t… |
CVE-2018-12026 | Critical | 9.8 | 2018-06-17 | During the spawning of a malicious Passenger-managed application, SpawningKit in Phusion Passenger 5.3.x before 5.3.2 allows such applications to replace key f… |
CVE-2018-5107 | Medium | 5.3 | 2018-06-11 | The printing process can bypass local access protections to read files available through symlinks, bypassing local file restrictions. The printing process requ… |
CVE-2018-12015 | High | 7.5 | 2018-06-07 | In Perl through 5.26.2, the Archive::Tar module allows remote attackers to bypass a directory-traversal protection mechanism, and overwrite arbitrary files, vi… |
CVE-2018-10380 | High | 7.8 | 2018-05-08 | kwallet-pam in KDE KWallet before 5.12.6 allows local users to obtain ownership of arbitrary files via a symlink attack. |
CVE-2018-10722 | High | 7.8 | 2018-05-04 | In Cylance CylancePROTECT before 1470, an unprivileged local user can obtain SYSTEM privileges because users have Modify access to the %PROGRAMFILES%\Cylance\D… |
CVE-2013-0159 | High | 7.1 | 2018-05-01 | The fedora-business-cards package before 1-0.1.beta1.fc17 on Fedora 17 and before 1-0.1.beta1.fc18 on Fedora 18 allows local users to cause a denial of service… |
CVE-2016-9602 | High | 7.6 | 2018-04-26 | Qemu before version 2.9 is vulnerable to an improper link following when built with the VirtFS. A privileged user inside guest could use this flaw to access ho… |
CVE-2018-4112 | Medium | 5.5 | 2018-04-03 | An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "ATS" component. It allows attackers to obtain sens… |
CVE-2014-2312 | Medium | 5.5 | 2018-03-26 | The main function in android_main.cpp in thermald allows local users to write to arbitrary files via a symlink attack on /tmp/thermald.pid. |
CVE-2018-5225 | Critical | 9.9 | 2018-03-22 | In browser editing in Atlassian Bitbucket Server from version 4.13.0 before 5.4.8 (the fixed version for 4.13.0 through 5.4.7), 5.5.0 before 5.5.8 (the fixed v… |
CVE-2018-1196 | Medium | 5.9 | 2018-03-19 | Spring Boot supports an embedded launch script that can be used to easily run the application as a systemd or init.d linux service. The script included with Sp… |
CVE-2017-1002101 | High | 8.8 | 2018-03-13 | In Kubernetes versions 1.3.x, 1.4.x, 1.5.x, 1.6.x and prior to versions 1.7.14, 1.8.9 and 1.9.4 containers using subpath volume mounts with any volume type (in… |
CVE-2018-1000073 | High | 7.5 | 2018-03-13 | RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier… |
CVE-2017-2619 | High | 7.5 | 2018-03-12 | Samba before versions 4.6.1, 4.5.7 and 4.4.11 are vulnerable to a malicious client using a symlink race to allow access to areas of the server file system not… |
CVE-2015-0796 | Medium | 6.3 | 2018-03-02 | In open buildservice 2.6 before 2.6.3, 2.5 before 2.5.7 and 2.4 before 2.4.8 the source service patch application could generate non-standard files like symlin… |
CVE-2018-1063 | Medium | 4.4 | 2018-03-02 | Context relabeling of filesystems is vulnerable to symbolic link attack, allowing a local, unprivileged malicious entity to change the SELinux context of an ar… |
CVE-2017-5188 | Medium | 5.0 | 2018-03-01 | The bs_worker code in open build service before 20170320 followed relative symlinks, allowing reading of files outside of the package source directory during b… |
CVE-2017-18188 | Medium | 5.5 | 2018-02-14 | OpenRC opentmpfiles through 0.1.3, when the fs.protected_hardlinks sysctl is turned off, allows local users to obtain ownership of arbitrary files by creating… |
CVE-2018-6954 | High | 7.8 | 2018-02-13 | systemd-tmpfiles in systemd through 237 mishandles symlinks present in non-terminal path components, which allows local users to obtain ownership of arbitrary… |
CVE-2014-3219 | High | 7.8 | 2018-02-09 | fish before 2.1.1 allows local users to write to arbitrary files via a symlink attack on (1) /tmp/fishd.log.%s, (2) /tmp/.pac-cache.$USER, (3) /tmp/.yum-cache… |
CVE-2017-18078 | High | 7.8 | 2018-01-29 | systemd-tmpfiles in systemd before 237 attempts to support ownership/permission changes on hardlinked files even if the fs.protected_hardlinks sysctl is turned… |
CVE-2018-6198 | Medium | 4.7 | 2018-01-25 | w3m through 0.5.3 does not properly handle temporary files when the ~/.w3m directory is unwritable, which allows a local attacker to craft a symlink attack to… |
CVE-2017-15111 | Medium | 5.5 | 2018-01-20 | keycloak-httpd-client-install versions before 0.8 insecurely creates temporary file allowing local attackers to overwrite other files via symbolic link. |
CVE-2014-4996 | Medium | 5.5 | 2018-01-10 | lib/vlad/dba/mysql.rb in the VladTheEnterprising gem 0.2 for Ruby allows local users to write to arbitrary files via a symlink attack on /tmp/my.cnf.#{target_h… |
CVE-2014-5509 | Medium | 5.5 | 2018-01-08 | clipedit in the Clipboard module for Perl allows local users to delete arbitrary files via a symlink attack on /tmp/clipedit$$. |
CVE-2014-1859 | Medium | 5.5 | 2018-01-08 | (1) core/tests/test_memmap.py, (2) core/tests/test_multiarray.py, (3) f2py/f2py2e.py, and (4) lib/tests/test_io.py in NumPy before 1.8.1 allow local users to w… |
CVE-2013-4364 | High | 7.8 | 2018-01-08 | (1) oo-analytics-export and (2) oo-analytics-import in the openshift-origin-broker-util package in Red Hat OpenShift Enterprise 1 and 2 allow local users to ha… |
CVE-2017-1000420 | High | 7.5 | 2018-01-02 | Syncthing version 0.14.33 and older is vulnerable to symlink traversal resulting in arbitrary file overwrite |
CVE-2014-4978 | Medium | 5.5 | 2017-12-29 | The rs_filter_graph function in librawstudio/rs-filter.c in rawstudio might allow local users to truncate arbitrary files via a symlink attack on (1) /tmp/rs-f… |
CVE-2016-1255 | High | 7.8 | 2017-12-05 | The pg_ctlcluster script in postgresql-common package in Debian wheezy before 134wheezy5, in Debian jessie before 165+deb8u2, in Debian unstable before 178, in… |
CVE-2017-16611 | Medium | 5.5 | 2017-12-01 | In libXfont before 1.5.4 and libXfont2 before 2.0.3, a local attacker can open (but not read) files on the system as root, triggering tape rewinds, watchdogs… |
CVE-2017-15357 | High | 7.4 | 2017-12-01 | The setpermissions function in the auto-updater in Arq before 5.9.7 for Mac allows local users to gain root privileges via a symlink attack on the updater bina… |
CVE-2017-7501 | High | 7.8 | 2017-11-22 | It was found that versions of rpm before 4.13.0.2 use temporary files with predictable names when installing an RPM. An attacker with ability to write in a dir… |
CVE-2017-12172 | Medium | 6.7 | 2017-11-22 | PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, 9.3.x before 9.3.20, and 9.2.x before 9.2.24 runs under a non-root o… |
CVE-2017-8806 | Medium | 5.5 | 2017-11-13 | The Debian pg_ctlcluster, pg_createcluster, and pg_upgradecluster scripts, as distributed in the Debian postgresql-common package before 181+deb9u1 for Postgre… |
CVE-2017-2916 | High | 8.8 | 2017-11-07 | An exploitable vulnerability exists in the /api/CONFIG/restore functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets ca… |
CVE-2015-7529 | High | 7.8 | 2017-11-06 | sosreport in SoS 3.x allows local users to obtain sensitive information from sosreport files or gain privileges via a symlink attack on an archive file in a te… |
CVE-2011-2684 | Medium | 5.5 | 2017-10-23 | foo2zjs before 20110722dfsg-3ubuntu1 as packaged in Ubuntu, 20110722dfsg-1 as packaged in Debian unstable, and 20090908dfsg-5.1+squeeze0 as packaged in Debian… |
CVE-2017-1301 | Medium | 5.5 | 2017-10-05 | IBM Spectrum Protect 7.1 and 8.1 could allow a local attacker to launch a symlink attack. IBM Spectrum Protect Backup-archive Client creates temporary files in… |
CVE-2017-12258 | Medium | 6.1 | 2017-10-05 | A vulnerability in the web-based UI of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to execute a cross-frame scripting… |
CVE-2017-1000115 | High | 7.5 | 2017-10-05 | Mercurial prior to version 4.3 is vulnerable to a missing symlink check that can malicious repositories to modify files outside the repository |
CVE-2017-7549 | Medium | 6.4 | 2017-09-21 | A flaw was found in instack-undercloud 7.2.0 as packaged in Red Hat OpenStack Platform Pike, 6.1.0 as packaged in Red Hat OpenStack Platform Oacta, 5.3.0 as pa… |
CVE-2015-5705 | High | 7.5 | 2017-09-06 | Argument injection vulnerability in devscripts before 2.15.7 allows remote attackers to write to arbitrary files via a crafted symlink and crafted filename. |
CVE-2015-5701 | Medium | 6.1 | 2017-08-25 | mktexlsr revision 36855, and before revision 36626 as packaged in texlive allows local users to write to arbitrary files via a symlink attack. NOTE: this vuln… |
CVE-2015-5700 | Medium | 6.1 | 2017-08-25 | mktexlsr revision 22855 through revision 36625 as packaged in texlive allows local users to write to arbitrary files via a symlink attack. |
CVE-2015-3211 | Medium | 5.5 | 2017-08-25 | php-fpm allows local users to write to or create arbitrary files via a symlink attack. |
CVE-2015-3156 | Medium | 5.5 | 2017-08-11 | The _write_config function in trove/guestagent/datastore/experimental/mongodb/service.py, reset_configuration function in trove/guestagent/datastore/experiment… |
CVE-2015-3149 | Medium | 5.5 | 2017-07-25 | The Hotspot component in OpenJDK8 as packaged in Red Hat Enterprise Linux 6 and 7 allows local users to write to arbitrary files via a symlink attack. |
CVE-2015-3315 | High | 7.8 | 2017-06-26 | Automatic Bug Reporting Tool (ABRT) allows local users to read, change the ownership of, or have other unspecified impact on arbitrary files via a symlink atta… |
CVE-2017-9525 | Medium | 6.7 | 2017-06-09 | In the cron package through 3.0pl1-128 on Debian, and through 3.0pl1-128ubuntu2 on Ubuntu, the postinst maintainer script allows for group-crontab-to-root priv… |
CVE-2016-3108 | High | 7.1 | 2017-06-08 | The pulp-gen-nodes-certificate script in Pulp before 2.8.3 allows local users to leak the keys or write to arbitrary files via a symlink attack. |
CVE-2017-8108 | High | 7.8 | 2017-06-08 | Unspecified tests in Lynis before 2.5.0 allow local users to write to arbitrary files or possibly gain privileges via a symlink attack on a temporary file. |
CVE-2015-6240 | High | 7.8 | 2017-06-07 | The chroot, jail, and zone connection plugins in ansible before 1.9.2 allow local users to escape a restricted environment via a symlink attack. |
CVE-2015-8326 | Medium | 5.5 | 2017-06-07 | The IPTables-Parse module before 1.6 for Perl allows local users to write to arbitrary files owned by the current user. |
CVE-2015-7724 | High | 7.8 | 2017-06-07 | AMD fglrx-driver before 15.9 allows local users to gain privileges via a symlink attack. NOTE: This vulnerability exists due to an incomplete fix for CVE-2015… |
CVE-2015-7723 | High | 7.8 | 2017-06-07 | AMD fglrx-driver before 15.7 allows local users to gain privileges via a symlink attack. |
CVE-2017-6981 | High | 7.8 | 2017-05-22 | An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. The issue involves the "iBooks" component… |
CVE-2016-10374 | Medium | 5.5 | 2017-05-17 | perltidy through 20160302, as used by perlcritic, check-all-the-things, and other software, relies on the current working directory for certain output files an… |
CVE-2017-7418 | Medium | 5.5 | 2017-04-04 | ProFTPD before 1.3.5e and 1.3.6 before 1.3.6rc5 controls whether the home directory of a user could contain a symbolic link through the AllowChrootSymlinks con… |
CVE-2017-2390 | Medium | 5.5 | 2017-04-02 | An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before… |
CVE-2016-9774 | High | 7.8 | 2017-03-23 | The postinst script in the tomcat6 package before 6.0.45+dfsg-1~deb7u4 on Debian wheezy, before 6.0.35-1ubuntu3.9 on Ubuntu 12.04 LTS and on Ubuntu 14.04 LTS… |
CVE-2016-7619 | Medium | 5.5 | 2017-02-20 | An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue i… |
CVE-2016-4679 | Medium | 5.5 | 2017-02-20 | An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. tvOS before 10.0.1 is affected. watchOS befor… |
CVE-2015-8860 | High | 7.5 | 2017-01-23 | The tar package before 2.0.0 for Node.js allows remote attackers to write to arbitrary files via a symlink attack in an archive. |
CVE-2016-6253 | High | 7.8 | 2017-01-20 | mail.local in NetBSD versions 6.0 through 6.0.6, 6.1 through 6.1.5, and 7.0 allows local users to change ownership of or append data to arbitrary files on the… |
CVE-2016-9566 | High | 7.8 | 2016-12-15 | base/logging.c in Nagios Core before 4.2.4 allows local users with access to an account in the nagios group to gain root privileges via a symlink attack on the… |
CVE-2016-6664 | High | 7.0 | 2016-12-13 | mysqld_safe in Oracle MySQL through 5.5.51, 5.6.x through 5.6.32, and 5.7.x through 5.7.14; MariaDB; Percona Server before 5.5.51-38.2, 5.6.x before 5.6.32-78-… |
CVE-2016-1247 | High | 7.8 | 2016-11-29 | The nginx package before 1.6.2-5+deb8u3 on Debian jessie, the nginx packages before 1.4.6-1ubuntu3.6 on Ubuntu 14.04 LTS, before 1.10.0-0ubuntu0.16.04.3 on Ubu… |