CWE-59: insecure temporary file
The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.
Also known as Improper Link Resolution Before File Access, Zip Slip, Link Following.
A kind of CWE-706 Use of Incorrectly-Resolved Name or Reference.
From the CWE List. © The MITRE Corporation.
Newest
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreWindows Event Tracing Denial of Service Vulnerability5.5 Medium
- trend micro apex one, trend micro, inc. micro apex one, micro apex one as a service +2 moreA LogServer arbitrary file creation vulnerability in Trend Micro Apex One could allow a local...7.8 High
- foxit pdf reader, pdf editor +1 moreFoxit PDF Reader Link Following Local Privilege Escalation Vulnerability6.7 Medium
- panda security dome, watchguard panda dome +1 morePanda Security Dome Link Following Local Privilege Escalation Vulnerability7.8 High
- anydeskAnyDesk Link Following Information Disclosure Vulnerability5.5 Medium
- dell supportassist for business pcs, supportassist for home pcs +1 moreDell SupportAssist for Home PCs versions 4.6.1 and prior and Dell SupportAssist for Business PCs...7.1 High
- apple macosThis issue was addressed with improved validation of symlinks. This issue is fixed in macOS...5.5 Medium
- dell inventory collector client, inventory collector +1 moreDell Inventory Collector Client, versions prior to 12.7.0, contains an Improper Link Resolution...7.8 High
- dell appsyncDell AppSync, version 4.6.0.x, contain a Symbolic Link (Symlink) Following vulnerability. A low...4.4 Medium
- No product listedgitingest before 9996a06 mishandles symbolic links that point outside of the base directory.5.5 Medium
- msi centerWacom Center WTabletServicePro Link Following Local Privilege Escalation Vulnerability7.0 High
- dell client platform bios, dock hd22q firmware update utility, dock wd19 firmware update utility +1 more +3 moreDell Client Platform Firmware Update Utility contains an Improper Link Resolution vulnerability....6.3 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +23 more +25 moreWmsRepair Service Elevation of Privilege Vulnerability7.3 High
- microsoft office, 365 apps, 365 apps for enterprise +5 more +7 moreMicrosoft Office Elevation of Privilege Vulnerability7.0 High
- dell data lakehouse, insightiq, powerflex appliance +5 more +7 moreDell PowerFlex appliance versions prior to IC 46.381.00 and IC 46.376.00, Dell PowerFlex rack...10.0 Critical
- qnap qsync centralQsync Central6.8 Medium
- qnap qts, quts hero +1 moreQTS, QuTS hero8.7 High
- suse opensuse factoryDoS attacks, information leaks etc. with crafted Git repositories in obs-scm-bridge6.8 Medium
- panda security dome, pandasecurity panda dome +1 morePanda Security Dome Link Following Local Privilege Escalation Vulnerability7.8 High
- panda security dome, pandasecurity panda dome +1 morePanda Security Dome Link Following Local Privilege Escalation Vulnerability7.8 High
- panda security dome, pandasecurity panda dome +1 morePanda Security Dome Link Following Local Privilege Escalation Vulnerability7.8 High
- f-secure totalF-Secure Total Link Following Local Privilege Escalation Vulnerability7.3 High
- vipre advanced securityVIPRE Advanced Security SBAMSvc Link Following Local Privilege Escalation Vulnerability7.8 High
- vipre advanced securityVIPRE Advanced Security Link Following Local Privilege Escalation Vulnerability7.8 High
- avg antivirus, antivirus free +1 moreAVG AntiVirus Free icarus Arbitrary File Creation Denial of Service Vulnerability5.3 Medium
- avg antivirus, antivirus free, anti-virus +2 moreAVG AntiVirus Free AVGSvc Link Following Local Privilege Escalation Vulnerability7.8 High
- avg antivirus, antivirus free, anti-virus +2 moreAVG AntiVirus Free AVGSvc Link Following Local Privilege Escalation Vulnerability7.8 High
- avg antivirus, antivirus free +1 moreAVG AntiVirus Free Link Following Denial-of-Service Vulnerability6.1 Medium
- avast free antivirusAvast Free Antivirus AvastSvc Link Following Local Privilege Escalation Vulnerability7.8 High
- avast free antivirusAvast Free Antivirus AvastSvc Link Following Local Privilege Escalation Vulnerability7.8 High
- avast free antivirusAvast Free Antivirus AvastSvc Link Following Local Privilege Escalation Vulnerability7.8 High
- avast cleanup, cleanup premium +1 moreAvast Cleanup Premium Link Following Local Privilege Escalation Vulnerability7.8 High
- avast cleanup, cleanup premium +1 moreAvast Cleanup Premium Link Following Local Privilege Escalation Vulnerability7.8 High
- avast cleanup, cleanup premium +1 moreAvast Cleanup Premium Link Following Local Privilege Escalation Vulnerability7.8 High
- avast free antivirusAvast Free Antivirus Link Following Denial-of-Service Vulnerability6.1 Medium
- msi centerWacom Center WTabletServicePro Link Following Local Privilege Escalation Vulnerability7.8 High
- malwarebytes antimalware, anti-malware +1 moreMalwarebytes Antimalware Link Following Local Privilege Escalation Vulnerability7.0 High
- check point zonealarm extreme security, checkpoint zonealarm extreme security nextgen +1 moreCheck Point ZoneAlarm Extreme Security Link Following Local Privilege Escalation Vulnerability7.8 High
- bitdefender total securityG DATA Total Security Scan Server Link Following Local Privilege Escalation Vulnerability7.8 High
- bitdefender total securityG DATA Total Security Link Following Local Privilege Escalation Vulnerability7.8 High
- bitdefender total securityG DATA Total Security Link Following Local Privilege Escalation Vulnerability7.8 High
- qnap qulog centerQuLog Center8.7 High
- rcloneRclone Improper Permission and Ownership Handling on Symlink Targets with --links and --metadata5.4 Medium
- cisco catalyst sd-wan managerCisco SD-WAN vManage Software Information Disclosure Vulnerability6.5 Medium
- cisco roomos software, roomos, telepresence collaboration endpoint +1 more +3 moreCisco TelePresence Collaboration Endpoint and RoomOS Software Arbitrary File Write Vulnerability4.4 Medium
- blackberry secusuiteVulnerabilities in SecuSUITE Server Components Impact SecuSUITE7.3 High
- microsoft pc managerMicrosoft PC Manager Elevation of Privilege Vulnerability7.8 High
- github enterprise serverPre-Receive Hook Path Collision Vulnerability in GitHub Enterprise Server Allowing Privilege Escalation8.7 High
- mudler localai, mudler/localai +1 moreArbitrary File Write in mudler/LocalAI8.1 High
- apple macosThis issue was addressed with improved validation of symlinks. This issue is fixed in macOS...5.5 Medium
- Show moreLoading…