205 matches found
CVE-2007-4559
Summary (fact-grounded) : The connected advisory describes a directory traversal vulnerability in Python's tarfile extraction path as used by Keras’ get_file() in keras.utils.get_file(), where extractall() is called without a security filter. The root cause is a PATH_MAX symlink resolution bug th...
CVE-2006-4559
CVE-2006-4559 describes multiple PHP remote file inclusion vulnerabilities in Yet Another Community System (YACS) CMS 6.6.1 and earlier. The flaw allows remote attackers to execute arbitrary PHP code by supplying a URL in the context[path_to_root] parameter to several PHP endpoints, including art...
CVE-2005-4559
CVE-2005-4559 affects IceWarp Web Mail 5.5.1 (as used by Merak Mail Server 8.3.0r and VisNetic Mail Server 8.3.0 build 1). The issue lies in mail/include.html where default_layout and layout_settings are not properly initialized when an unrecognized HTTP_USER_AGENT is sent. This allows remote att...