Total
1343 CVE
CVE | Vendors | Products | Updated | CVSS v3.1 |
---|---|---|---|---|
CVE-2007-3742 | 1 Apple | 2 Iphone, Safari | 2025-04-09 | N/A |
WebKit in Apple Safari 3 Beta before Update 3.0.3, and iPhone before 1.0.1, does not properly handle the interaction between International Domain Name (IDN) support and Unicode fonts, which allows remote attackers to create a URL containing "look-alike characters" (homographs) and possibly perform phishing attacks. | ||||
CVE-2008-5370 | 1 Pvpgn | 1 Pvpgn | 2025-04-09 | N/A |
pvpgn-support-installer in pvpgn 1.8.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/pvpgn-support-1.0.tar.gz temporary file. | ||||
CVE-2008-4192 | 1 Redhat | 3 Cman, Enterprise Linux, Rhel Cluster | 2025-04-09 | N/A |
The pserver_shutdown function in fence_egenera in cman 2.20080629 and 2.20080801 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/eglog temporary file. | ||||
CVE-2008-0806 | 1 Paul Pelzl | 1 Wyrd | 2025-04-09 | N/A |
wyrd 1.4.3b allows local users to overwrite arbitrary files via a symlink attack on the wyrd-tmp.[USERID] temporary file. | ||||
CVE-2008-4108 | 1 Python Software Foundation | 1 Python | 2025-04-09 | N/A |
Tools/faqwiz/move-faqwiz.sh (aka the generic FAQ wizard moving tool) in Python 2.4.5 might allow local users to overwrite arbitrary files via a symlink attack on a tmp$RANDOM.tmp temporary file. NOTE: there may not be common usage scenarios in which tmp$RANDOM.tmp is located in an untrusted directory. | ||||
CVE-2008-4085 | 1 Stephenjungels | 1 Plait | 2025-04-09 | N/A |
plaiter in Plait before 1.6 allows local users to overwrite arbitrary files via a symlink attack on (1) cut.$$, (2) head.$$, (3) awk.$$, and (4) ps.$$ temporary files in /tmp/. | ||||
CVE-2008-5369 | 1 No-ip | 1 No-ip2 | 2025-04-09 | N/A |
noip2 in noip2 2.1.7 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/noip2 temporary file. | ||||
CVE-2008-5371 | 1 Marc Gloor | 1 Screenie | 2025-04-09 | N/A |
screenie in screenie 1.30.0 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/.screenie.##### temporary file. | ||||
CVE-2008-3946 | 1 Hp | 1 Openvms | 2025-04-09 | N/A |
The finger client in HP TCP/IP Services for OpenVMS 5.x allows local users to read arbitrary files via a link corresponding to a (1) .plan or (2) .project file. | ||||
CVE-2008-5377 | 1 Apple | 1 Cups | 2025-04-09 | N/A |
pstopdf in CUPS 1.3.8 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/pstopdf.log temporary file, a different vulnerability than CVE-2001-1333. | ||||
CVE-2008-5368 | 1 Lukas Ruf | 1 Muttprint | 2025-04-09 | N/A |
muttprint in muttprint 0.72d allows local users to overwrite arbitrary files via a symlink attack on the /tmp/muttprint.log temporary file. | ||||
CVE-2008-3931 | 1 R Foundation | 1 R | 2025-04-09 | N/A |
javareconf in R 2.7.2 allows local users to overwrite arbitrary files via a symlink attack on temporary files. | ||||
CVE-2008-3928 | 1 Debian | 1 Honeyd Common | 2025-04-09 | N/A |
test.sh in Honeyd 1.5c might allow local users to overwrite arbitrary files via a symlink attack on a temporary file. | ||||
CVE-2008-5704 | 1 Gpsdrive | 1 Gpsdrive | 2025-04-09 | N/A |
src/unit_test.c in gpsdrive (aka gpsdrive-scripts) 2.10~pre4 might allow local users to overwrite arbitrary files via a symlink attack on the /tmp/gpsdrive-unit-test/proc temporary file, a different vector than CVE-2008-4959 and CVE-2008-5380. | ||||
CVE-2008-5367 | 1 Marco D\'itri | 1 Ppp-udeb | 2025-04-09 | N/A |
ip-up in ppp-udeb 2.4.4rel on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on the /tmp/resolv.conf.tmp temporary file. | ||||
CVE-2008-5825 | 1 Nokia | 1 6131 Nfc | 2025-04-09 | N/A |
The SmartPoster implementation on the Nokia 6131 Near Field Communication (NFC) phone with 05.12 firmware does not properly display the URI record when the Title record contains a certain combination of space, CR (aka \r), and . (dot) characters, which allows remote attackers to trick a user into loading an arbitrary URI via a crafted NDEF tag, as demonstrated by (1) an http: URI for a malicious web site, (2) a tel: URI for a premium-rate telephone number, and (3) an sms: URI that triggers purchase of a ringtone. | ||||
CVE-2008-4994 | 1 Ti Kan | 1 Xmcd | 2025-04-09 | N/A |
The (1) ncsarmt and (2) ncsawrap scripts in xmcd 2.6 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/Mosaic.*pid temporary file. | ||||
CVE-2008-5256 | 1 Virtualox | 1 Virtualox | 2025-04-09 | N/A |
The AcquireDaemonLock function in ipcdUnix.cpp in Sun Innotek VirtualBox before 2.0.6 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/.vbox-$USER-ipc/lock temporary file. | ||||
CVE-2009-1753 | 1 Emn | 1 Coccinelle | 2025-04-09 | N/A |
Coccinelle 0.1.7 allows local users to overwrite arbitrary files via a symlink attack on an unspecified "result file." | ||||
CVE-2008-0665 | 1 Website Meta Language | 1 Website Meta Language | 2025-04-09 | N/A |
wml_backend/p1_ipp/ipp.src in Website META Language (WML) 2.0.11 allows local users to overwrite arbitrary files via a symlink attack on the ipp.$$.tmp temporary file. |