Vendors / Tug Records 17 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1 CVSS 9.0–10.0
CVSS high 4 CVSS 7.0–8.9
Exploited now Tug records in CISA KEV No Tug vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 28
mktexlsr revision 36855, and before revision 36626 as packaged in texlive allows local users to write to arbitrary files via a symlink attack.
CVSS 3.0 MEDIUM 6.1· Local · Low privileges · No interaction · EPSS 0.00419 · Published 2017-08-25 · Will not fix CWE-59
Priority LOW 28
mktexlsr revision 22855 through revision 36625 as packaged in texlive allows local users to write to arbitrary files via a symlink attack.
CVSS 3.0 MEDIUM 6.1· Local · Low privileges · No interaction · EPSS 0.0044 · Published 2017-08-25 · Will not fix CWE-59
Priority LOW 22
The pre-install script in texlive 3.1.20140525_r34255.fc21 as packaged in Fedora 21 and rpm, and texlive 6.20131226_r32488.fc20 and rpm allows local users to delete arbitrary files via a crafted file in the user's home d…
CVSS 3.0 MEDIUM 4.7· Local · No auth · User interaction · EPSS 0.00397 · Published 2017-10-06 · No fix listed CWE-264
Open these records in search → All records by CVSS severity
Critical1 High4 Medium11 Low1 No CVSS0