CVE-2019-13636

CVSS v3 Score
5.9
Medium
CVSS v2 Score
5.8
Medium

Vulnerability Description

In GNU patch through 2.7.6, the following of symlinks is mishandled in certain cases other than input files. This affects inp.c and util.c.

CVSS:5.9(Medium)

Spring Boot supports an embedded launch script that can be used to easily run the application as a systemd or init.d linux service. The script included with Spring Boot 1.5.9 and earlier and 2.0.0.M1 ...

CWE-592018
CVSS:5.9(Medium)

Armoury Crate Service’s logging function has insufficient validation to check if the log file is a symbolic link. A physical attacker with general user privilege can modify the log file property to a ...

CWE-592022
CVSS:5.9(Medium)

Wacom Driver 6.3.46-1 for Windows was discovered to contain an arbitrary file write vulnerability via the component \Wacom\Wacom_Tablet.exe.

CWE-592022
CVSS:6.0(Medium)

A flaw was found in chrony versions before 3.5.1 when creating the PID file under the /var/run/chrony folder. The file is created during chronyd startup while still running as the root user, and when ...

CWE-592020
CVSS:6.0(Medium)

Azure Network Watcher VM Extension Elevation of Privilege Vulnerability

CWE-592025
CVSS:6.0(Medium)

Windows Deployment Services Denial of Service Vulnerability

CWE-592025