Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
1,084 results · page 22 of 22
Dec 31, 1999lpr on SunOS 4.1.1, BSD 4.3, A/UX 2.0.1, and other BSD-based operating systems allows local users to create or overwrite arbitrary files via a symlink attack thCVE-1999-1102 · Other software · SGI · reported by MITRELow 2.1
lpr on SunOS 4.1.1, BSD 4.3, A/UX 2.0.1, and other BSD-based operating systems allows local users to create or overwrite arbitrary files via a symlink attack that is triggered after invoking lpr 1000 times.
- Product
- Irix
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordciac.llnl.govaenigma.net
Dec 31, 1999gzexe in the gzip package on Red Hat Linux 5.0 and earlier allows local users to overwrite files of other users via a symlink attack on a temporary file.CVE-1999-1332 · Other software · Redhat · reported by MITRELow 2.1
gzexe in the gzip package on Red Hat Linux 5.0 and earlier allows local users to overwrite files of other users via a symlink attack on a temporary file.
- Product
- Linux
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 31, 1999CascadeView TFTP server allows local users to gain privileges via a symlink attack.CVE-2000-0015 · Other software · Ascend · reported by MITREMedium 4.6
CascadeView TFTP server allows local users to gain privileges via a symlink attack.
- Product
- Cascadeview UX
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Dec 31, 1999Perl 5.004_04 and earlier follows symbolic links when running with the -e option, which allows local users to overwrite arbitrary files via a symlink attack on CVE-1999-1386 · Other software · Perl · reported by MITREMedium 5.5
Perl 5.004_04 and earlier follows symbolic links when running with the -e option, which allows local users to overwrite arbitrary files via a symlink attack on the /tmp/perl-eaXXXXX file.
- Product
- Perl
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 27, 1999UnixWare pis and mkpis commands allow local users to gain privileges via a symlink attack.CVE-2000-0029 · Other software · SCO · reported by MITREMedium 4.6
UnixWare pis and mkpis commands allow local users to gain privileges via a symlink attack.
- Product
- Unixware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmarc.infosecurityfocus.com
Dec 27, 1999IBM Network Station Manager NetStation allows local users to gain privileges via a symlink attack.CVE-2000-0027 · Other software · IBM · reported by MITREMedium 6.2
IBM Network Station Manager NetStation allows local users to gain privileges via a symlink attack.
- Product
- Network Station Manager
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordiss.netsecurityfocus.com
Dec 4, 1999UnixWare pkgtrans allows local users to read arbitrary files via a symlink attack.CVE-1999-0988 · Other software · SCO · reported by MITREHigh 7.2
UnixWare pkgtrans allows local users to read arbitrary files via a symlink attack.
- Product
- Unixware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Dec 3, 1999UnixWare programs that dump core allow a local user to modify files via a symlink attack on the ./core.pid file.CVE-1999-0864 · Other software · SCO · reported by MITREHigh 7.2
UnixWare programs that dump core allow a local user to modify files via a symlink attack on the ./core.pid file.
- Product
- Unixware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 2, 1999dump in Debian GNU/Linux 2.1 does not properly restore symlinks, which allows a local user to modify the ownership of arbitrary files.CVE-2000-0366 · Other software · Debian · reported by MITRELow 2.1
dump in Debian GNU/Linux 2.1 does not properly restore symlinks, which allows a local user to modify the ownership of arbitrary files.
- Product
- Debian Linux
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recorddebian.orgsecurityfocus.com
Dec 1, 1999FreeBSD mount_union command allows local users to gain root privileges via a symlink attack.CVE-1999-0963 · Other software · Freebsd · reported by MITREHigh 7.2
FreeBSD mount_union command allows local users to gain root privileges via a symlink attack.
- Product
- Freebsd
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 1, 1999Solaris chkperm allows local users to read files owned by bin via the VMSYS environmental variable and a symlink attack.CVE-1999-0860 · Other software · SUN · reported by MITRELow 2.1
Solaris chkperm allows local users to read files owned by bin via the VMSYS environmental variable and a symlink attack.
- Product
- Solaris
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Dec 1, 1999FreeBSD gdc program allows local users to modify files via a symlink attack.CVE-1999-0857 · Other software · Freebsd · reported by MITRELow 2.1
FreeBSD gdc program allows local users to modify files via a symlink attack.
- Product
- Freebsd
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Oct 11, 1999userOsa in SCO OpenServer allows local users to corrupt files via a symlink attack.CVE-1999-0893 · Other software · SCO · reported by MITRELow 2.1
userOsa in SCO OpenServer allows local users to corrupt files via a symlink attack.
- Product
- Openserver
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Oct 4, 1999shell-lock in Cactus Software Shell Lock allows local users to read or modify decoded shell files before they are executed, via a symlink attack on a temporary CVE-1999-1541 · Other software · Cactus Software · reported by MITREHigh 7.2
shell-lock in Cactus Software Shell Lock allows local users to read or modify decoded shell files before they are executed, via a symlink attack on a temporary file.
- Product
- Shell-lock
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 22, 1999The dynamic linker in Solaris allows a local user to create arbitrary files via the LD_PROFILE environmental variable and a symlink attack.CVE-1999-0786 · Other software · SUN · reported by MITREMedium 4.6
The dynamic linker in Solaris allows a local user to create arbitrary files via the LD_PROFILE environmental variable and a symlink attack.
- Product
- Solaris
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Sep 17, 1999The SSH authentication agent follows symlinks via a UNIX domain socket.CVE-1999-0787 · Other software · SSH · reported by MITRELow 2.1
The SSH authentication agent follows symlinks via a UNIX domain socket.
- Product
- SSH
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 13, 1999The CDE dtspcd daemon allows local users to execute arbitrary commands via a symlink attack.CVE-1999-0689 · Other software · CDE · reported by MITREHigh 7.2
The CDE dtspcd daemon allows local users to execute arbitrary commands via a symlink attack.
- Product
- CDE
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsunsolve.sun.comsecurityfocus.com
Aug 20, 1999Trn allows local users to overwrite other users' files via symlinks.CVE-1999-0743 · Other software · Debian · reported by MITRELow 2.1
Trn allows local users to overwrite other users' files via symlinks.
- Product
- Debian Linux
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Aug 20, 1999Man2html 2.1 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file.CVE-1999-1565 · Other software · Earl Hood · reported by MITREMedium 4.6
Man2html 2.1 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file.
- Product
- Man2html
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordosvdb.orgsecurityfocus.com
Aug 9, 1999sdtcm_convert in Solaris 2.6 allows a local user to overwrite sensitive files via a symlink attack.CVE-1999-0676 · Other software · SUN · reported by MITREMedium 4.6
sdtcm_convert in Solaris 2.6 allows a local user to overwrite sensitive files via a symlink attack.
- Product
- Solaris
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Jul 30, 1999Ethereal allows local users to overwrite arbitrary files via a symlink attack on the packet capture file.CVE-1999-1227 · Other software · Ethereal Group · reported by MITREHigh 7.2
Ethereal allows local users to overwrite arbitrary files via a symlink attack on the packet capture file.
- Product
- Ethereal
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordethereal.comethereal.com
Jun 12, 1999The zsoelim program in the Debian man-db package allows local users to overwrite files via a symlink attack.CVE-1999-0730 · Other software · Debian · reported by MITREHigh 10
The zsoelim program in the Debian man-db package allows local users to overwrite files via a symlink attack.
- Product
- Debian Linux
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
May 25, 1999The fwluser script in AIX eNetwork Firewall allows local users to write to arbitrary files via a symlink attack.CVE-1999-0803 · Other software · IBM · reported by MITRELow 2.1
The fwluser script in AIX eNetwork Firewall allows local users to write to arbitrary files via a symlink attack.
- Product
- AIX Enetwork Firewall
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 15, 1999IPFilter 3.2.3 through 3.2.10 allows local users to modify arbitrary files via a symlink attack on the saved output file.CVE-1999-1244 · Other software · Darren Reed · reported by MITREHigh 7.2
IPFilter 3.2.3 through 3.2.10 allows local users to modify arbitrary files via a symlink attack on the saved output file.
- Product
- Ipfilter
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comexchange.xforce.ibmcloud.com
Apr 1, 1999Local attackers can conduct a denial of service in Midnight Commander 4.x with a symlink attack.CVE-1999-0480 · Other software · Midnight Commander · reported by MITRELow 2.1
Local attackers can conduct a denial of service in Midnight Commander 4.x with a symlink attack.
- Product
- Midnight Commander
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Mar 30, 1999XFree86 xfs command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privilegesCVE-1999-0434 · Other software · Caldera · reported by MITREHigh 7.5
XFree86 xfs command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a denial of service.
- Product
- Openlinux
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Mar 21, 1999XFree86 startx command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileCVE-1999-0433 · Other software · Xfree86 Project · reported by MITREMedium 4.6
XFree86 startx command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a denial of service.
- Product
- X11r6
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Mar 7, 1999Several startup scripts in SCO OpenServer Enterprise System v 5.0.4p, including S84rpcinit, S95nis, S85tcp, and S89nfs, are vulnerable to a symlink attack, alloCVE-1999-0411 · Other software · SCO · reported by MITREHigh 7.2
Several startup scripts in SCO OpenServer Enterprise System v 5.0.4p, including S84rpcinit, S95nis, S85tcp, and S89nfs, are vulnerable to a symlink attack, allowing a local user to gain root access.
- Product
- Openserver
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Mar 1, 1999The libmediatool library used for the KDE mediatool allows local users to create arbitrary files via a symlink attack.CVE-2000-0371 · Other software · KDE · reported by MITRELow 1.2
The libmediatool library used for the KDE mediatool allows local users to create arbitrary files via a symlink attack.
- Product
- KDE
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordftp.calderasystems.comsecurityfocus.com
Feb 18, 1999xtvscreen in SuSE Linux 6.0 allows local users to overwrite arbitrary files via a symlink attack on the pic000.pnm file.CVE-1999-1495 · Other software · Suse · reported by MITRELow 2.1
xtvscreen in SuSE Linux 6.0 allows local users to overwrite arbitrary files via a symlink attack on the pic000.pnm file.
- Product
- Suse Linux
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Feb 16, 1999Debian GNU/Linux cfengine package is susceptible to a symlink attack.CVE-1999-0374 · Other software · Debian · reported by MITRELow 2.1
Debian GNU/Linux cfengine package is susceptible to a symlink attack.
- Product
- Debian Linux
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Feb 11, 1999Lynx allows a local user to overwrite sensitive files through /tmp symlinks.CVE-1999-0371 · Other software · University Of Kansas · reported by MITRELow 1.2
Lynx allows a local user to overwrite sensitive files through /tmp symlinks.
- Product
- Lynx
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Jan 2, 1999HP-UX aserver program allows local users to gain privileges via a symlink attack.CVE-2000-0005 · Other software · HP · reported by MITREHigh 7.2
HP-UX aserver program allows local users to gain privileges via a symlink attack.
- Product
- Hp-ux
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordoval.cisecurity.orgoval.cisecurity.org
Jan 2, 1999wget 1.5.3 follows symlinks to change permissions of the target file instead of the symlink itself.CVE-1999-0402 · Other software · GNU · reported by MITREMedium 5
wget 1.5.3 follows symlinks to change permissions of the target file instead of the symlink itself.
- Product
- Wget
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.