CWE-59

AMD fglrx-driver before 15.9 allows local users to gain privileges via a symlink attack. NOTE: This vulnerability exist

The chroot, jail, and zone connection plugins in ansible before 1.9.2 allow local users to escape a restricted environme

Unspecified tests in Lynis before 2.5.0 allow local users to write to arbitrary files or possibly gain privileges via a

Automatic Bug Reporting Tool (ABRT) allows local users to read, change the ownership of, or have other unspecified impac

sosreport in SoS 3.x allows local users to obtain sensitive information from sosreport files or gain privileges via a sy

It was found that versions of rpm before 4.13.0.2 use temporary files with predictable names when installing an RPM. An

The pg_ctlcluster script in postgresql-common package in Debian wheezy before 134wheezy5, in Debian jessie before 165+de

The tar package before 2.0.0 for Node.js allows remote attackers to write to arbitrary files via a symlink attack in an

Argument injection vulnerability in devscripts before 2.15.7 allows remote attackers to write to arbitrary files via a c

Mercurial prior to version 4.3 is vulnerable to a missing symlink check that can malicious repositories to modify files

The setpermissions function in the auto-updater in Arq before 5.9.7 for Mac allows local users to gain root privileges v

The pulp-gen-nodes-certificate script in Pulp before 2.8.3 allows local users to leak the keys or write to arbitrary fil

In the cron package through 3.0pl1-128 on Debian, and through 3.0pl1-128ubuntu2 on Ubuntu, the postinst maintainer scrip

PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, 9.3.x before 9.3.20, and 9.2.

A flaw was found in instack-undercloud 7.2.0 as packaged in Red Hat OpenStack Platform Pike, 6.1.0 as packaged in Red Ha

mktexlsr revision 22855 through revision 36625 as packaged in texlive allows local users to write to arbitrary files via

mktexlsr revision 36855, and before revision 36626 as packaged in texlive allows local users to write to arbitrary files

A vulnerability in the web-based UI of Cisco Unified Communications Manager could allow an unauthenticated, remote attac

An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. tvOS b

An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchO

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS b

ProFTPD before 1.3.5e and 1.3.6 before 1.3.6rc5 controls whether the home directory of a user could contain a symbolic l

perltidy through 20160302, as used by perlcritic, check-all-the-things, and other software, relies on the current workin

The IPTables-Parse module before 1.6 for Perl allows local users to write to arbitrary files owned by the current user.

The Hotspot component in OpenJDK8 as packaged in Red Hat Enterprise Linux 6 and 7 allows local users to write to arbitra

The _write_config function in trove/guestagent/datastore/experimental/mongodb/service.py, reset_configuration function i

php-fpm allows local users to write to or create arbitrary files via a symlink attack.

IBM Spectrum Protect 7.1 and 8.1 could allow a local attacker to launch a symlink attack. IBM Spectrum Protect Backup-ar

foo2zjs before 20110722dfsg-3ubuntu1 as packaged in Ubuntu, 20110722dfsg-1 as packaged in Debian unstable, and 20090908d

The Debian pg_ctlcluster, pg_createcluster, and pg_upgradecluster scripts, as distributed in the Debian postgresql-commo

In libXfont before 1.5.4 and libXfont2 before 2.0.3, a local attacker can open (but not read) files on the system as roo

The rs_filter_graph function in librawstudio/rs-filter.c in rawstudio might allow local users to truncate arbitrary file