CWE-59 · Improper Link Resolution Before File Access (page 9)
Page 9 of 17 — CVEs classified under CWE-59, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-21686 | High | 8.1 | 2021-11-04 | File path filters in the agent-to-controller security subsystem of Jenkins 2.318 and earlier, LTS 2.303.2 and earlier do not canonicalize paths, allowing opera… |
CVE-2021-22488 | High | 7.5 | 2021-10-28 | There is an Unauthorized file access vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability by modifying soft links may tamper with t… |
CVE-2021-37969 | High | 7.8 | 2021-10-08 | Inappropriate implementation in Google Updater in Google Chrome on Windows prior to 94.0.4606.54 allowed a remote attacker to perform local privilege escalatio… |
CVE-2021-36286 | High | 7.1 | 2021-09-28 | Dell SupportAssist Client Consumer versions 3.9.13.0 and any versions prior to 3.9.13.0 contain an arbitrary file deletion vulnerability that can be exploited… |
CVE-2021-34408 | High | 7.8 | 2021-09-27 | The Zoom Client for Meetings for Windows in all versions before version 5.3.2 writes log files to a user writable directory as a privileged user during the ins… |
CVE-2021-1612 | Medium | 5.5 | 2021-09-23 | A vulnerability in the Cisco IOS XE SD-WAN Software CLI could allow an authenticated, local attacker to overwrite arbitrary files on the local system. This vul… |
CVE-2021-31843 | High | 7.3 | 2021-09-17 | Improper privileges management vulnerability in McAfee Endpoint Security (ENS) Windows prior to 10.7.0 September 2021 Update allows local users to access files… |
CVE-2021-41072 | High | 8.1 | 2021-09-14 | squashfs_opendir in unsquash-2.c in Squashfs-Tools 4.5 allows Directory Traversal, a different vulnerability than CVE-2021-40153. A squashfs filesystem that ha… |
CVE-2021-36744 | High | 7.8 | 2021-09-06 | Trend Micro Security (Consumer) 2021 and 2020 are vulnerable to a directory junction vulnerability which could allow an attacker to exploit the system to escal… |
CVE-2021-39135 | High | 8.2 | 2021-08-31 | `@npmcli/arborist`, the library that calculates dependency trees and manages the node_modules folder hierarchy for the npm command line interface, aims to guar… |
CVE-2021-37712 | High | 8.2 | 2021-08-31 | The npm package "tar" (aka node-tar) before versions 4.4.18, 5.0.10, and 6.1.9 has an arbitrary file creation/overwrite and arbitrary code execution vulnerabil… |
CVE-2021-37701 | High | 8.2 | 2021-08-31 | The npm package "tar" (aka node-tar) before versions 4.4.16, 5.0.8, and 6.1.7 has an arbitrary file creation/overwrite and arbitrary code execution vulnerabili… |
CVE-2021-36928 | Medium | 6.0 | 2021-08-26 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
CVE-2021-30968 | Medium | 5.5 | 2021-08-24 | A validation issue related to hard link behavior was addressed with improved sandbox restrictions. This issue is fixed in macOS Big Sur 11.6.2, tvOS 15.2, macO… |
CVE-2021-30855 | Medium | 5.5 | 2021-08-24 | A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. This issue is fixed in Security Update 2… |
CVE-2021-32825 | Low | 2.7 | 2021-08-16 | bblfshd is an open source self-hosted server for source code parsing. In bblfshd before commit 4265465b9b6fb5663c30ee43806126012066aad4 there is a "zipslip" vu… |
CVE-2021-26426 | High | 7.0 | 2021-08-12 | Windows User Account Profile Picture Elevation of Privilege Vulnerability |
CVE-2021-26425 | High | 7.8 | 2021-08-12 | Windows Event Tracing Elevation of Privilege Vulnerability |
CVE-2021-38570 | Critical | 9.1 | 2021-08-11 | An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows attackers to delete arbitrary files (during uninstallation) via a symlink. |
CVE-2021-38511 | High | 7.5 | 2021-08-10 | An issue was discovered in the tar crate before 0.4.36 for Rust. When symlinks are present in a TAR archive, extraction can create arbitrary directories via… |
CVE-2021-21740 | Low | 2.4 | 2021-08-09 | There is an information leak vulnerability in the digital media player (DMS) of ZTE's residential gateway product. The attacker could insert the USB disk with… |
CVE-2021-32803 | High | 8.2 | 2021-08-03 | The npm package "tar" (aka node-tar) before versions 6.1.2, 5.0.7, 4.4.15, and 3.2.3 has an arbitrary File Creation/Overwrite vulnerability via insufficient sy… |
CVE-2021-36983 | High | 7.8 | 2021-07-30 | replay-sorcery-kms in Replay Sorcery 0.6.0 allows a local attacker to gain root privileges via a symlink attack on /tmp/replay-sorcery or /tmp/replay-sorcery/d… |
CVE-2021-32610 | High | 7.1 | 2021-07-30 | In Archive_Tar before 1.4.14, symlinks can refer to targets outside of the extracted archive, a different vulnerability than CVE-2020-36193. |
CVE-2021-32000 | Low | 3.2 | 2021-07-28 | A UNIX Symbolic Link (Symlink) Following vulnerability in the clone-master-clean-up.sh script of clone-master-clean-up in SUSE Linux Enterprise Server 12 SP3… |
CVE-2021-1092 | High | 7.1 | 2021-07-22 | NVIDIA GPU Display Driver for Windows contains a vulnerability in the NVIDIA Control Panel application where it is susceptible to a Windows file system symboli… |
CVE-2021-1091 | High | 7.1 | 2021-07-22 | NVIDIA GPU Display driver for Windows contains a vulnerability where an unprivileged user can create a file hard link that causes the driver to overwrite a fil… |
CVE-2021-26089 | Medium | 6.7 | 2021-07-12 | An improper symlink following in FortiClient for Mac 6.4.3 and below may allow an non-privileged user to execute arbitrary privileged shell commands during ins… |
CVE-2021-32518 | High | 7.5 | 2021-07-07 | A vulnerability in share_link in QSAN Storage Manager allows remote attackers to create a symbolic link then access arbitrary files. The referred vulnerability… |
CVE-2021-32509 | Medium | 6.5 | 2021-07-07 | Absolute Path Traversal vulnerability in FileviewDoc in QSAN Storage Manager allows remote authenticated attackers access arbitrary files by injecting the Symb… |
CVE-2021-32508 | Medium | 6.5 | 2021-07-07 | Absolute Path Traversal vulnerability in FileStreaming in QSAN Storage Manager allows remote authenticated attackers access arbitrary files by injecting the Sy… |
CVE-2020-4885 | Medium | 4.7 | 2021-06-24 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 could allow a local user to access and change the configuration of Db2 due to a race con… |
CVE-2021-32557 | Medium | 5.2 | 2021-06-12 | It was discovered that the process_report() function in data/whoopsie-upload-all allowed arbitrary file writes via symlinks. |
CVE-2021-32555 | High | 7.3 | 2021-06-12 | It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the xorg-hwe-18.04 package a… |
CVE-2021-32554 | High | 7.3 | 2021-06-12 | It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the xorg package apport hook… |
CVE-2021-32553 | High | 7.3 | 2021-06-12 | It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-17 package appor… |
CVE-2021-32552 | High | 7.3 | 2021-06-12 | It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-16 package appor… |
CVE-2021-32551 | High | 7.3 | 2021-06-12 | It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-15 package appor… |
CVE-2021-32550 | High | 7.3 | 2021-06-12 | It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-14 package appor… |
CVE-2021-32549 | High | 7.3 | 2021-06-12 | It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-13 package appor… |
CVE-2021-32548 | High | 7.3 | 2021-06-12 | It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-8 package apport… |
CVE-2021-32547 | High | 7.3 | 2021-06-12 | It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-lts package appo… |
CVE-2021-31997 | Medium | 6.8 | 2021-06-10 | A UNIX Symbolic Link (Symlink) Following vulnerability in python-postorius of openSUSE Leap 15.2, Factory allows local attackers to escalate from users postori… |
CVE-2021-0094 | High | 7.8 | 2021-06-09 | Improper link resolution before file access in Intel(R) DSA before version 20.11.50.9 may allow an authenticated user to potentially enable an escalation of pr… |
CVE-2020-15076 | High | 7.8 | 2021-05-26 | Private Tunnel installer for macOS version 3.0.1 and older versions may corrupt system critical files it should not have access via symlinks in /tmp. |
CVE-2020-9452 | High | 7.8 | 2021-05-25 | An issue was discovered in Acronis True Image 2020 24.5.22510. anti_ransomware_service.exe includes functionality to quarantine files by copying a suspected ra… |
CVE-2020-27833 | High | 7.1 | 2021-05-14 | A Zip Slip vulnerability was found in the oc binary in openshift-clients where an arbitrary file write is achieved by using a specially crafted raw container i… |
CVE-2021-23892 | High | 8.2 | 2021-05-12 | By exploiting a time of check to time of use (TOCTOU) race condition during the Endpoint Security for Linux Threat Prevention and Firewall (ENSL TP/FW) install… |
CVE-2021-23872 | High | 7.8 | 2021-05-12 | Privilege Escalation vulnerability in the File Lock component of McAfee Total Protection (MTP) prior to 16.0.32 allows a local user to gain elevated privileges… |
CVE-2021-31187 | High | 7.8 | 2021-05-11 | Windows WalletService Elevation of Privilege Vulnerability |
CVE-2020-28007 | High | 7.8 | 2021-05-06 | Exim 4 before 4.94.2 allows Execution with Unnecessary Privileges. Because Exim operates as root in the log directory (owned by a non-root user), a symlink or… |
CVE-2021-27851 | Medium | 5.5 | 2021-04-26 | A security vulnerability that can lead to local privilege escalation has been found in ’guix-daemon’. It affects multi-user setups in which ’guix-daemon’ runs… |
CVE-2021-30356 | High | 8.1 | 2021-04-22 | A denial of service vulnerability was reported in Check Point Identity Agent before R81.018.0000, which could allow low privileged users to overwrite protected… |
CVE-2021-28098 | High | 7.8 | 2021-04-14 | An issue was discovered in Forescout CounterACT before 8.1.4. A local privilege escalation vulnerability is present in the logging function. SecureConnector ru… |
CVE-2021-28321 | High | 7.8 | 2021-04-13 | Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability |
CVE-2021-30463 | High | 7.8 | 2021-04-08 | VestaCP through 0.9.8-24 allows attackers to gain privileges by creating symlinks to files for which they lack permissions. After reading the RKEY value from u… |
CVE-2020-36314 | Low | 3.9 | 2021-04-07 | fr-archive-libarchive.c in GNOME file-roller through 3.38.0, as used by GNOME Shell and other software, allows Directory Traversal during extraction because it… |
CVE-2021-28163 | Low | 2.7 | 2021-04-01 | In Eclipse Jetty 9.4.32 to 9.4.38, 10.0.0.beta2 to 10.0.1, and 11.0.0.beta2 to 11.0.1, if a user uses a webapps directory that is a symlink, the contents of th… |
CVE-2020-15075 | High | 7.1 | 2021-03-30 | OpenVPN Connect installer for macOS version 3.2.6 and older may corrupt system critical files it should not have access via symlinks in /tmp. |
CVE-2021-27241 | Medium | 6.1 | 2021-03-29 | This vulnerability allows local attackers to delete arbitrary directories on affected installations of Avast Premium Security 20.8.2429 (Build 20.8.5653.561)… |
CVE-2021-20197 | Medium | 6.3 | 2021-03-26 | There is an open race window when writing output in the following utilities in GNU binutils version 2.35 and earlier:ar, objcopy, strip, ranlib. When these uti… |
CVE-2020-7346 | High | 7.8 | 2021-03-23 | Privilege Escalation vulnerability in McAfee Data Loss Prevention (DLP) for Windows prior to 11.6.100 allows a local, low privileged, attacker through the use… |
CVE-2021-28650 | Medium | 5.5 | 2021-03-17 | autoar-extractor.c in GNOME gnome-autoar before 0.3.1, as used by GNOME Shell, Nautilus, and other software, allows Directory Traversal during extraction becau… |
CVE-2021-28153 | Medium | 5.3 | 2021-03-11 | An issue was discovered in GNOME GLib before 2.66.8. When g_file_replace() is used with G_FILE_CREATE_REPLACE_DESTINATION to replace a path that is a dangling… |
CVE-2021-26889 | High | 7.8 | 2021-03-11 | Windows Update Stack Elevation of Privilege Vulnerability |
CVE-2021-26887 | High | 7.8 | 2021-03-11 | <p>An elevation of privilege vulnerability exists in Microsoft Windows when Folder redirection has been enabled via Group Policy. When folder redirection file… |
CVE-2021-26873 | High | 7.0 | 2021-03-11 | Windows User Profile Service Elevation of Privilege Vulnerability |
CVE-2021-26866 | High | 7.1 | 2021-03-11 | Windows Update Service Elevation of Privilege Vulnerability |
CVE-2021-26862 | High | 7.0 | 2021-03-11 | Windows Installer Elevation of Privilege Vulnerability |
CVE-2020-4717 | Medium | 5.5 | 2021-03-10 | A vulnerability exists in IBM SPSS Modeler Subscription Installer that allows a user with create symbolic link permission to write arbitrary file in another pr… |
CVE-2021-3310 | High | 7.8 | 2021-03-10 | Western Digital My Cloud OS 5 devices before 5.10.122 mishandle Symbolic Link Following on SMB and AFP shares. This can lead to code execution and information… |
CVE-2021-21300 | High | 8.0 | 2021-03-09 | Git is an open-source distributed revision control system. In affected versions of Git a specially crafted repository that contains symbolic links as well as f… |
CVE-2021-24084 | Medium | 5.5 | 2021-02-25 | Windows Mobile Device Management Information Disclosure Vulnerability |
CVE-2020-12878 | High | 7.8 | 2021-02-18 | Digi ConnectPort X2e before 3.2.30.6 allows an attacker to escalate privileges from the python user to root via a symlink attack that uses chown, related to /e… |
CVE-2021-26720 | High | 7.8 | 2021-02-17 | avahi-daemon-check-dns.sh in the Debian avahi package through 0.8-4 is executed as root via /etc/network/if-up.d/avahi-daemon, and allows a local attacker to c… |
CVE-2021-27229 | High | 8.8 | 2021-02-16 | Mumble before 1.3.4 allows remote code execution if a victim navigates to a crafted URL on a server list and clicks on the Open Webpage text. |
CVE-2021-23873 | High | 7.8 | 2021-02-10 | Privilege Escalation vulnerability in McAfee Total Protection (MTP) prior to 16.0.30 allows a local user to gain elevated privileges and perform arbitrary file… |
CVE-2021-21131 | Medium | 6.5 | 2021-02-09 | Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a cra… |
CVE-2021-21125 | High | 8.1 | 2021-02-09 | Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restriction… |
CVE-2021-21117 | High | 7.8 | 2021-02-09 | Insufficient policy enforcement in Cryptohome in Google Chrome prior to 88.0.4324.96 allowed a local attacker to perform OS-level privilege escalation via a cr… |
CVE-2020-36241 | Medium | 5.5 | 2021-02-05 | autoar-extractor.c in GNOME gnome-autoar through 0.2.4, as used by GNOME Shell, Nautilus, and other software, allows Directory Traversal during extraction beca… |
CVE-2020-8585 | Medium | 5.5 | 2021-01-28 | OnCommand Unified Manager Core Package versions prior to 5.2.5 may disclose sensitive account information to unauthorized users via the use of PuTTY Link (plin… |
CVE-2021-21272 | High | 7.7 | 2021-01-25 | ORAS is open source software which enables a way to push OCI Artifacts to OCI Conformant registries. ORAS is both a CLI for initial testing and a Go Module. In… |
CVE-2020-4966 | Medium | 4.3 | 2021-01-21 | IBM Security Identity Governance and Intelligence 5.2.6 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to… |
CVE-2021-1278 | High | 8.6 | 2021-01-20 | Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affecte… |
CVE-2020-36193 | High | 7.5 | 2021-01-18 | Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-202… |
CVE-2021-1145 | Medium | 6.5 | 2021-01-13 | A vulnerability in the Secure FTP (SFTP) of Cisco StarOS for Cisco ASR 5000 Series Routers could allow an authenticated, remote attacker to read arbitrary file… |
CVE-2021-21602 | Medium | 6.5 | 2021-01-13 | Jenkins 2.274 and earlier, LTS 2.263.1 and earlier allows reading arbitrary files using the file browser for workspaces and archived artifacts by following sym… |
CVE-2021-23240 | High | 7.8 | 2021-01-12 | selinux_edit_copy_tfiles in sudoedit in Sudo before 1.9.5 allows a local unprivileged user to gain file ownership and escalate privileges by replacing a tempor… |
CVE-2021-23239 | Low | 2.5 | 2021-01-12 | The sudoedit personality of Sudo before 1.9.5 may allow a local unprivileged user to perform arbitrary directory-existence tests by winning a sudo_edit.c race… |
CVE-2020-27643 | Medium | 6.5 | 2020-12-29 | The %PROGRAMDATA%\1E\Client directory in 1E Client 5.0.0.745 and 4.1.0.267 allows remote authenticated users and local users to create and modify files in prot… |
CVE-2020-27172 | Critical | 9.8 | 2020-12-28 | An issue was discovered in G-Data before 25.5.9.25 using Symbolic links, it is possible to abuse the infected-file restore mechanism to achieve arbitrary write… |
CVE-2020-35766 | High | 7.8 | 2020-12-28 | The test suite in libopendkim in OpenDKIM through 2.10.3 allows local users to gain privileges via a symlink attack against the /tmp/testkeys file (related to… |
CVE-2020-28641 | High | 7.1 | 2020-12-22 | In Malwarebytes Free 4.1.0.56, a symbolic link may be used delete an arbitrary file on the system by exploiting the local quarantine system. |
CVE-2020-26277 | Medium | 6.1 | 2020-12-21 | DBdeployer is a tool that deploys MySQL database servers easily. In DBdeployer before version 1.58.2, users unpacking a tarball may use a maliciously packaged… |
CVE-2020-10003 | High | 7.8 | 2020-12-08 | An issue existed within the path validation logic for symlinks. This issue was addressed with improved path sanitization. This issue is fixed in macOS Big Sur… |
CVE-2020-28935 | Medium | 5.5 | 2020-12-07 | NLnet Labs Unbound, up to and including version 1.12.0, and NLnet Labs NSD, up to and including version 4.3.3, contain a local vulnerability that would allow f… |
CVE-2020-29529 | High | 7.5 | 2020-12-03 | HashiCorp go-slug up to 0.4.3 did not fully protect against directory traversal while unpacking tar archives, and protections could be bypassed with specific c… |
CVE-2020-5797 | Medium | 6.1 | 2020-11-21 | UNIX Symbolic Link (Symlink) Following in TP-Link Archer C9(US)_V1_180125 firmware allows an unauthenticated actor, with physical access and network access, to… |
CVE-2020-25989 | High | 7.8 | 2020-11-19 | Privilege escalation via arbitrary file write in pritunl electron client 1.0.1116.6 through v1.2.2550.20. Successful exploitation of the issue may allow an att… |