Advisories · Weakness

CWE-61.

Every Advisory and CVE whose sources give the weakness CWE-61, newest first.

CVE-2022-3592 CVE record

CVSS 6.5 Medium

samba: A symlink following vulnerability was found in Samba…
- samba
- CWE-61
Not analysed yet 12 Jan 2023
binwalk PyPI

CVSS 5.0 Medium

binwalk vulnerable to UNIX Symbolic Link (Symlink) Following
- Path traversal
- CWE-61
<2.3.3 · fixed in 2.3.3

GHSA-8m3f-g62j-3vx8 · CVE-2021-4287 Not analysed yet 27 Dec 2022
github.com/argoproj/argo-cd/v2 Go

CVSS 4.3 Medium

Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server
- Path traversal
- CWE-61
<2.1.15 || >=2.2.0, <2.2.9 || >=2.3.0, <2.3.4 · fixed in 2.1.15, 2.2.9, 2.3.4

GHSA-6gcg-hp2x-q54h · CVE-2022-24904 Not analysed yet 23 May 2022
CVE-2021-1612 CVE record

CVSS 5.5 Medium

Cisco IOS XE SD-WAN Software Arbitrary File Overwrite Vulnerability
- Cisco IOS XE SD-WAN Software
- CWE-61
Not analysed yet 23 Sept 2021
@npmcli/arborist npm

CVSS 8.2 High

@npmcli/arborist vulnerable to UNIX Symbolic Link (Symlink) Following
- Path traversal
- CWE-61
<2.8.2 · fixed in 2.8.2

GHSA-2h3h-q99f-3fhc · CVE-2021-39134 Not analysed yet 31 Aug 2021
@npmcli/arborist npm

CVSS 8.2 High

UNIX Symbolic Link (Symlink) Following in @npmcli/arborist
- Path traversal
- CWE-61
<2.8.2 · fixed in 2.8.2

GHSA-gmw6-94gg-2rc2 · CVE-2021-39135 Not analysed yet 31 Aug 2021
CVE-2021-32518 CVE record

CVSS 7.5 High

QSAN Storage Manager - UNIX Symbolic Link (Symlink) Following
- QSAN Storage Manager
- CWE-61
Not analysed yet 7 Jul 2021
CVE-2021-32509 CVE record

CVSS 6.5 Medium

QSAN Storage Manager - UNIX Symbolic Link (Symlink) Following via FileviewDoc function
- QSAN Storage Manager
- CWE-61
Not analysed yet 7 Jul 2021
CVE-2021-32508 CVE record

CVSS 6.5 Medium

QSAN Storage Manager - UNIX Symbolic Link (Symlink) Following via FileStreaming function
- QSAN Storage Manager
- CWE-61
Not analysed yet 7 Jul 2021
CVE-2021-25321 CVE record

CVSS 7.8 High

arpwatch: Local privilege escalation from runtime user to root
- SUSE Linux Enterprise Server 11-SP4-LTSS
- SUSE Manager Server 4.0
- CWE-61
Not analysed yet 30 Jun 2021
CVE-2021-32557 CVE record

CVSS 5.2 Medium

apport process_report() arbitrary file write
- Canonical apport
- Path traversal
- CWE-61
Not analysed yet 12 Jun 2021
CVE-2021-32555 CVE record

CVSS 7.3 High

apport read_file() function could follow maliciously constructed symbolic links
- Canonical apport
- Path traversal
- CWE-61
Not analysed yet 12 Jun 2021
CVE-2021-32554 CVE record

CVSS 7.3 High

apport read_file() function could follow maliciously constructed symbolic links
- Canonical apport
- Path traversal
- CWE-61
Not analysed yet 12 Jun 2021
CVE-2021-32553 CVE record

CVSS 7.3 High

apport read_file() function could follow maliciously constructed symbolic links
- Canonical apport
- Path traversal
- CWE-61
Not analysed yet 12 Jun 2021
CVE-2021-32552 CVE record

CVSS 7.3 High

apport read_file() function could follow maliciously constructed symbolic links
- Canonical apport
- Path traversal
- CWE-61
Not analysed yet 12 Jun 2021
CVE-2021-32551 CVE record

CVSS 7.3 High

apport read_file() function could follow maliciously constructed symbolic links
- Canonical apport
- Path traversal
- CWE-61
Not analysed yet 12 Jun 2021
CVE-2021-32550 CVE record

CVSS 7.3 High

apport read_file() function could follow maliciously constructed symbolic links
- Canonical apport
- Path traversal
- CWE-61
Not analysed yet 12 Jun 2021
CVE-2021-32549 CVE record

CVSS 7.3 High

apport read_file() function could follow maliciously constructed symbolic links
- Canonical apport
- Path traversal
- CWE-61
Not analysed yet 12 Jun 2021
CVE-2021-32548 CVE record

CVSS 7.3 High

apport read_file() function could follow maliciously constructed symbolic links
- Canonical apport
- Path traversal
- CWE-61
Not analysed yet 12 Jun 2021
CVE-2021-32547 CVE record

CVSS 7.3 High

apport read_file() function could follow maliciously constructed symbolic links
- Canonical apport
- Path traversal
- CWE-61
Not analysed yet 12 Jun 2021
CVE-2021-25322 CVE record

CVSS 6.8 Medium

python-HyperKitty: hyperkitty-permissions.sh used during %post allows local privilege escalation from hyperkitty user to root
- openSUSE Leap 15.2
- openSUSE Factory
- CWE-61
Not analysed yet 10 Jun 2021
CVE-2020-15076 CVE record

Private Tunnel: Private Tunnel installer for macOS version 3.0.1 and older versions may corrupt system…
- Private Tunnel
- CWE-61
Not analysed yet 26 May 2021
CVE-2020-15075 CVE record

OpenVPN Connect: OpenVPN Connect installer for macOS version 3.2.6 and older may corrupt system critical…
- OpenVPN Connect
- CWE-61
Not analysed yet 30 Mar 2021
CVE-2021-1145 CVE record

CVSS 6.5 Medium

Cisco StarOS for Cisco ASR 5000 Series Routers Arbitrary File Read Vulnerability
- Cisco ASR 5000 Series Software
- CWE-61
Not analysed yet 13 Jan 2021
CVE-2020-8014 CVE record

CVSS 7.7 High

kopano-python-services: Local privilege escalation from kopano to root in kopano-spamd subpackage
- openSUSE Leap 15.1
- openSUSE Tumbleweed
- CWE-61
Not analysed yet 29 Jun 2020
CVE-2020-8019 CVE record

CVSS 7.7 High

syslog-ng: Local privilege escalation from new to root in %post
- SUSE Linux Enterprise Debuginfo 11-SP3
- SUSE Linux Enterprise Debuginfo 11-SP4
- CWE-61
Not analysed yet 29 Jun 2020
npm npm

CVSS 7.7 High

Arbitrary File Write in npm
- Path traversal
- CWE-61
<6.13.3 · fixed in 6.13.3

GHSA-m6cx-g6qm-p2cx · CVE-2019-16775 Not analysed yet 13 Dec 2019
CVE-2019-11249 CVE record

CVSS 4.8 Medium

kubectl cp allows symlink directory traversal
- Kubernetes
- CWE-61
Not analysed yet 29 Aug 2019
CVE-2019-11246 CVE record

CVSS 6.4 Medium

kubectl cp allows symlink directory traversal
- Kubernetes
- CWE-61
Not analysed yet 29 Aug 2019
CVE-2017-14798 CVE record

CVSS 7.3 High

local privilege escalation in SUSE postgresql init script
- suse postgresql-init
- CWE-61
Not analysed yet 1 Mar 2018