Vulnerabilities > Improper Link Resolution Before File Access ('Link Following')

DATE CVE VULNERABILITY TITLE RISK
2024-12-18 CVE-2024-47480 Link Following vulnerability in Dell Inventory Collector 12.3.0.6
Dell Inventory Collector Client, versions prior to 12.7.0, contains an Improper Link Resolution Before File Access vulnerability.
local
low complexity
dell CWE-59
7.8
2024-12-17 CVE-2024-52542 Link Following vulnerability in Dell Appsync
Dell AppSync, version 4.6.0.x, contain a Symbolic Link (Symlink) Following vulnerability.
local
low complexity
dell CWE-59
5.5
2024-12-11 CVE-2024-52537 Link Following vulnerability in Dell products
Dell Client Platform Firmware Update Utility contains an Improper Link Resolution vulnerability.
local
low complexity
dell CWE-59
6.7
2024-11-22 CVE-2024-7228 Link Following vulnerability in Avast Free Antivirus 23.11.6090
Avast Free Antivirus Link Following Denial-of-Service Vulnerability.
local
low complexity
avast CWE-59
5.5
2024-11-22 CVE-2024-7235 Link Following vulnerability in AVG Antivirus 23.11.8635.809
AVG AntiVirus Free Link Following Denial-of-Service Vulnerability.
local
low complexity
avg CWE-59
5.5
2024-11-22 CVE-2024-7236 Link Following vulnerability in AVG Antivirus 23.12.8700.812
AVG AntiVirus Free icarus Arbitrary File Creation Denial of Service Vulnerability.
local
low complexity
avg CWE-59
5.5
2024-11-22 CVE-2024-9766 Link Following vulnerability in Wacom Center
Wacom Center WTabletServicePro Link Following Local Privilege Escalation Vulnerability.
local
low complexity
wacom CWE-59
7.8
2024-11-15 CVE-2023-20004 Three vulnerabilities in the CLI of Cisco TelePresence CE and RoomOS could allow an authenticated, local attacker to overwrite arbitrary files on the local file system of an affected device. These vulnerabilities are due to improper access controls on files that are on the local file system.
local
low complexity
CWE-59
4.4
2024-10-28 CVE-2024-44175 Link Following vulnerability in Apple Macos
This issue was addressed with improved validation of symlinks.
local
low complexity
apple CWE-59
5.5
2024-10-28 CVE-2024-44258 Link Following vulnerability in Apple products
This issue was addressed with improved handling of symlinks.
local
low complexity
apple CWE-59
7.1