CWE-59

An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard li

UploaderService in SnagIT 2019.1.2 allows elevation of privilege by placing an invalid presentation file in %PROGRAMDATA

NVIDIA Windows GPU Display Driver (all versions) contains a vulnerability in the user mode video driver trace logger com

An issue was discovered in Avira Free Security Suite 10. The permissive access rights on the SoftwareUpdater folder (fil

An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.To e

An elevation of privilege vulnerability exists in Microsoft Compatibility Appraiser where a configuration file, with loc

A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file

An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links, aka '

An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links, aka '

atop: symlink attack possible due to insecure tempfile handling

An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege

An elevation of privilege vulnerability exists in the way that the iphlpsvc.dll handles file creation allowing for a fil

An elevation of privilege vulnerability exists in the way that the StartTileData.dll handles file creation in protected

A symlink issue exists in Iceweasel-firegpg before 0.6 due to insecure tempfile handling.

Shibboleth Service Provider (SP) 3.x before 3.1.0 shipped a spec file that calls chown on files in a directory controlle

An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.To e

SafeNet Sentinel LDK License Manager, all versions prior to 7.101(only Microsoft Windows versions are affected) is vulne

In Yarn before 1.21.1, the package install functionality can be abused to generate arbitrary symlinks on the host filesy

In K7 Ultimate Security 16.0.0117, the module K7BKCExt.dll (aka the backup module) improperly validates the administrati

In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1R

Versions of the npm CLI prior to 6.13.3 are vulnerable to an Arbitrary File Write. It is possible for packages to create

snap-confine in snapd before 2.38 incorrectly set the ownership of a snap application to the uid and gid of the first ca

snap-confine as included in snapd before 2.39 did not guard against symlink races when performing the chdir() to the cur

A vulnerability was found in node-tar before version 4.4.2 (excluding version 2.2.2). An Arbitrary File Overwrite issue

Yubico pam-u2f 1.0.7 attempts parsing of the configured authfile (default $HOME/.config/Yubico/u2f_keys) as root (unless

fstream before 1.0.12 is vulnerable to Arbitrary File Overwrite. Extracting tarballs containing a hardlink to a file tha

b3log Wide before 1.6.0 allows three types of attacks to access arbitrary files. First, the attacker can write code in t

A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file

An issue was discovered in the tar crate before 0.4.16 for Rust. Arbitrary file overwrite can occur via a symlink or har

Hadoop 1.0.3 contains a symlink vulnerability.

Gambas before 3.4.0 allows remote attackers to move or manipulate directory contents or perform symlink attacks due to t

Symlink Traversal vulnerability in Belkin N900 due to misconfiguration in the SMB service.

A denial of service vulnerability was reported in Check Point Endpoint Security Client for Windows before E82.10, that c

A privilege escalation vulnerability in Trend Micro Antivirus for Mac 2019 (v9.0.1379 and below) could potentially allow

A denial of service vulnerability exists when Windows improperly handles hard links, aka 'Microsoft Windows Denial of Se

A path traversal vulnerability has been discovered in podman before version 1.4.0 in the way it handles symlinks inside

A hard-link created from the log file of Check Point ZoneAlarm up to 15.4.062 to any file on the system will get its per

A vulnerability in the system shell for Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (A

libqb before 1.0.5 allows local users to overwrite arbitrary files via a symlink attack, because it uses predictable fil

dbus before 1.10.28, 1.12.x before 1.12.16, and 1.13.x before 1.13.12, as used in DBusServer in Canonical Upstart in Ubu

A vulnerability in the London Trust Media Private Internet Access (PIA) VPN Client v0.9.8 beta (build 02099) for macOS c

A vulnerability in the London Trust Media Private Internet Access (PIA) VPN Client v82 for Linux and macOS could allow a

Versions 10.0, 11.0 and 12.0 of the Trend Micro Deep Security Agent are vulnerable to an arbitrary file delete attack, w

rpcbind 0.2.0 allows local users to write to arbitrary files or gain privileges via a symlink attack on (1) /tmp/portmap

openvas-scanner before 2011-09-11 creates a temporary file insecurely when generating OVAL system characteristics docume

Hardlink before 0.1.2 operates on full file system objects path names which can allow a local attacker to use this flaw

Dell Command Configure versions prior to 4.2.1 contain an uncontrolled search path vulnerability. A locally authenticate

The Trend Micro Security 2020 consumer family of products contains a vulnerability that could allow a local attacker to

The LHA.sys driver before 1.1.1811.2101 in LG Device Manager exposes functionality that allows low-privileged users to r

NVIDIA GeForce Experience before 3.18 contains a vulnerability when ShadowPlay or GameStream is enabled. When an attacke