CWE-59: insecure temporary file
The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.
Also known as Improper Link Resolution Before File Access, Zip Slip, Link Following.
A kind of CWE-706 Use of Incorrectly-Resolved Name or Reference.
From the CWE List. © The MITRE Corporation.
Newest
- microsoft windows 10 version 1709, windows 10 version 1709 for 32-bit systems, windows 10 version 1803 +10 more +12 moreLNK Remote Code Execution Vulnerability7.5 High
- nvidia gpu display driver, gpu driver +1 moreNVIDIA Windows GPU Display Driver (all versions) contains a vulnerability in the user mode video...7.8 High
- containers podman, libpod project libpod, opensuse leap +2 morePodman Path Traversal Vulnerability leads to arbitrary file read/write7.5 High
- techsmith snagitUploaderService in SnagIT 2019.1.2 allows elevation of privilege by placing an invalid...7.8 High
- avast antivirusIn Avast Antivirus before 19.4, a local administrator can trick the product into renaming...4.4 Medium
- b3log wideb3log Wide unauthenticated file access7.5 High
- gnu patchIn GNU patch through 2.7.6, the following of symlinks is mishandled in certain cases other than...5.9 Medium
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +17 more +19 moreAn elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC)...7.8 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +11 more +13 moreAn elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC)...7.8 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +6 more +8 moreAn elevation of privilege vulnerability exists in Microsoft Windows where certain folders, with...5.5 Medium
- londontrustmedia private internet access vpn clientA vulnerability in the London Trust Media Private Internet Access (PIA) VPN Client v0.9.8 beta ...7.1 High
- londontrustmedia private internet access vpn clientA vulnerability in the London Trust Media Private Internet Access (PIA) VPN Client v82 for Linux...7.1 High
- deepin clonedeepin-clone before 1.1.3 uses a fixed path /tmp/partclone.log in the Helper:...5.5 Medium
- deepin deepin-clonedeepin-clone before 1.1.3 uses a fixed path /tmp/repo.iso in the BootDoctor::fix() function to...4.7 Medium
- deepin deepin-cloneIn GUI mode, deepin-clone before 1.1.3 creates a log file at the fixed path /tmp/.deepin-clone...5.5 Medium
- deepin deepin-clone, fedoraproject fedora +1 moredeepin-clone before 1.1.3 uses a predictable path /tmp/.deepin-clone/mount/<block-dev-basename>...7.0 High
- microsoft task scheduler, windows 10 version 1507, windows 10 version 1607 +24 more +26 moreTask Scheduler Elevation of Privilege Vulnerability7.8 High
- microsoft windows, windows 10 version 1607, windows 10 version 1703 +22 more +24 moreWindows Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1703 +29 more +31 moreWindows Shell Elevation of Privilege Vulnerability6.3 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1703 +29 more +31 moreWindows User Profile Service Elevation of Privilege Vulnerability6.3 Medium
- freedesktop dbus, canonical ubuntu linux +1 moredbus before 1.10.28, 1.12.x before 1.12.16, and 1.13.x before 1.13.12, as used in DBusServer in...7.1 High
- clusterlabs libqblibqb before 1.0.5 allows local users to overwrite arbitrary files via a symlink attack, because...7.1 High
- yubico pam-u2fYubico pam-u2f 1.0.7 attempts parsing of the configured authfile (default $HOME/.config/Yubico...7.5 High
- facebook osqueryIn some configurations an attacker can inject a new executable path into the extensions.load file...8.1 High
- fstream project fstreamArbitrary File Overwrite in fstream7.5 High
- westerndigital my cloud dl2100 firmware, my cloud dl4100 firmware, my cloud ex2100 firmware +6 more +8 moreWestern Digital My Cloud Cloud, Mirror Gen2, EX2 Ultra, EX2100, EX4100, DL2100, DL4100, PR2100...8.8 High
- intel converged security management engine firmware, trusted execution engine firmware +1 moreInsufficient access control vulnerability in Dynamic Application Loader software for Intel(R)...7.8 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +11 more +13 moreAn elevation of privilege vulnerability exists in Microsoft Windows when Windows fails to...7.8 High
- harpjs harpUnauthorized File Access in harp5.3 Medium
- ruby-lang webrick** DISPUTED ** The WEBrick gem 1.4.2 for Ruby allows directory traversal if the attacker once had...5.5 Medium
- cisco nx-os software for nexus 9000 series fabric switches aci mode, nx-os +1 moreCisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Symbolic Link Path Traversal Vulnerability5.5 Medium
- isaacs tarArbitrary File Overwrite in tar7.5 High
- check point endpoint security client for windows, checkpoint endpoint security +1 moreA local attacker can create a hard-link between a file to which the Check Point Endpoint Security...7.0 High
- ivanti connect secureIn Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX...7.7 High
- canonical snapdsnap-confine as included in snapd before 2.39 did not guard against symlink races when performing...7.5 High
- canonical snapdsnap-confine in snapd before 2.38 incorrectly set the ownership of a snap application to the uid...7.5 High
- check point endpoint security client for windows, check point zonealarm point endpoint security client for windows, point zonealarm +2 more +4 moreA hard-link created from log file archive of Check Point ZoneAlarm up to 15.4.062 or Check Point...7.8 High
- mercurial, debian linux, redhat enterprise linux +2 moreMercurial Path Traversal/Link Following vulnerability5.1 Medium
- check point zonealarm point zonealarm, checkpoint zonealarm +1 moreA hard-link created from the log file of Check Point ZoneAlarm up to 15.4.062 to any file on the...7.1 High
- microsoft windows, windows server, windows 10 1703 +5 more +7 moreAn elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC)...7.8 High
- kubernetes, redhat openshift container platform +1 morekubectl cp path traversal6.4 Medium
- nvidia geforce experienceNVIDIA GeForce Experience before 3.18 contains a vulnerability when ShadowPlay or GameStream is...7.0 High
- opensuse yast2-multipathStatic tempfile name allows overwriting of arbitrary files2.2 Low
- nvidia gpu driver, nvidia corporation gpu graphics driver +1 moreNVIDIA Windows GPU Display driver contains a vulnerability in the 3D vision component in which...7.8 High
- opensuse supportutilsUser can overwrite arbitrary log files in support tar2.2 Low
- opensuse supportutilsStatic temporary filename allows overwriting of files2.8 Low
- lg lha.sysThe LHA.sys driver before 1.1.1811.2101 in LG Device Manager exposes functionality that allows...7.0 High
- microsoft windows 10, windows 10 servers, windows server 2016 +1 more +3 moreAn elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly...7.8 High
- microsoft windows 10, windows 10 servers, windows server 2016 +1 more +3 moreAn elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly...7.8 High
- ibm db2, db2 for linux, unix and windows +1 moreIBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1...7.4 High
- Show moreLoading…