Lucene search
+L

46 matches found

Tenable Nessus
Tenable Nessus
•added 2026/10/01 12:00 a.m.•10 views

CentOS Linux 7 [TuxCare] Security Update: clamav / clamav-data / clamav-devel / clamav-doc / etc Multiple Vulnerabilities (CENTOS7:CLSA-2026:1787337364)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1787337364 advisory. - A vulnerability in the PE file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or...

7.5CVSS7.8AI score0.00573EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/01 12:00 a.m.•4 views

CVE-2026-20215: Buffer Copy without Checking Size of Input

A vulnerability in the 7z file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in 7z file...

7.5CVSS7.8AI score0.00573EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2015-8778

Malware in sbrugna...

5.5CVSS6.8AI score0.02058EPSS
SaveExploits0References18
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•26 views

EUVD-2016-2471

Malware in sbrugna...

5.5CVSS6.7AI score0.01606EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
•added 2025/03/20 12:00 a.m.•17 views

PT-2025-12132 · Unknown +1 · Binary-Husky/Gpt Academic +1

Name of the Vulnerable Software and Affected Versions: binary-husky/gpt academic version git 310122f Description: A path traversal vulnerability exists in the application. The application extracts user-provided 7z files without proper validation. The Python py7zr package used for extraction does...

8.8CVSS8.8AI score0.01653EPSS
SaveExploits1References6
NVD
NVD
•added 2025/02/11 10:15 p.m.•31 views

CVE-2025-1240

WinZip 7Z File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of WinZip. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or op...

8.8CVSS0.10311EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/02/11 9:53 p.m.•13 views

CVE-2025-1240 WinZip 7Z File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

WinZip 7Z File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of WinZip. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or op...

7.8CVSS8.1AI score0.10311EPSS
SaveExploits0References1
CVE
CVE
•added 2025/02/11 9:53 p.m.•218 views

CVE-2025-1240

Summary: CVE-2025-1240 corresponds to a WinZip 7Z file parsing vulnerability that enables remote code execution via an out-of-bounds/write within the 7Z parser. The issue stems from insufficient validation of user-supplied data, potentially allowing code execution in the affected process. Exploit...

8.8CVSS8AI score0.10311EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/11 12:00 a.m.•9 views

CVE-2025-1240: Out-of-bounds Write

WinZip 7Z File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of WinZip. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or op...

8.8CVSS6.7AI score0.10311EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/02/11 12:00 a.m.•25 views

WinZip 7Z File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of WinZip. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of 7Z files. Th...

7.8CVSS6.9AI score0.10311EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2024/04/02 12:00 a.m.•32 views

Debian dsa-5652 : python-py7zr-doc - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5652 advisory. - A directory traversal vulnerability in the SevenZipFile.extractall function of the python library py7zr v0.20.0 and earlier allows attackers to write arbitrary files via...

9.1CVSS8.4AI score0.02465EPSS
SaveExploits3References4
zdt
zdt
•added 2022/12/07 12:00 a.m.•277 views

py7zr 0.20.0 Directory Traversal Vulnerability

CVE-2022-44900: path traversal vulnerability in py7zr Directory traversal vulnerability in SevenZipFile.extractall function of the python library py7zr version 0.20.0 and earlier allow attackers to read arbitrary files on the local machine via malicious 7z file extraction. CVE-2022-44900...

9.1CVSS9.3AI score0.02465EPSS
SaveExploits3
osv-ghsa
osv-ghsa
•added 2022/12/06 9:30 p.m.•47 views

GHSA-M8XW-9X5X-6VH3 py7zr directory traversal vulnerability

A directory traversal vulnerability in the SevenZipFile.extractall function of the python library py7zr v0.20.0 and earlier allows attackers to write arbitrary files via extracting a crafted 7z file...

9.3CVSS8.9AI score0.02465EPSS
SaveExploits3References7
Github Security Blog
Github Security Blog
•added 2022/12/06 9:30 p.m.•53 views

py7zr directory traversal vulnerability

A directory traversal vulnerability in the SevenZipFile.extractall function of the python library py7zr v0.20.0 and earlier allows attackers to write arbitrary files via extracting a crafted 7z file...

9.1CVSS8.6AI score0.02465EPSS
SaveExploits3References7Affected Software1
NVD
NVD
•added 2022/12/06 8:15 p.m.•53 views

CVE-2022-44900

A directory traversal vulnerability in the SevenZipFile.extractall function of the python library py7zr v0.20.0 and earlier allows attackers to write arbitrary files via extracting a crafted 7z file...

9.1CVSS0.02465EPSS
SaveExploits3References3
Prion
Prion
•added 2022/12/06 8:15 p.m.•28 views

Directory traversal

A directory traversal vulnerability in the SevenZipFile.extractall function of the python library py7zr v0.20.0 and earlier allows attackers to write arbitrary files via extracting a crafted 7z file...

6.4CVSS9AI score0.02465EPSS
SaveExploits3References3Affected Software1
UbuntuCve
UbuntuCve
•added 2022/12/06 8:15 p.m.•38 views

CVE-2022-44900

A directory traversal vulnerability in the SevenZipFile.extractall function of the python library py7zr v0.20.0 and earlier allows attackers to write arbitrary files via extracting a crafted 7z file...

9.1CVSS7.3AI score0.02465EPSS
SaveExploits3References3
osv-pysec
osv-pysec
•added 2022/12/06 8:15 p.m.•29 views

PYSEC-2022-42998

A directory traversal vulnerability in the SevenZipFile.extractall function of the python library py7zr v0.20.0 and earlier allows attackers to write arbitrary files via extracting a crafted 7z file...

9.1CVSS6.9AI score0.02465EPSS
SaveExploits3References7
osv-cve
osv-cve
•added 2022/12/06 12:00 a.m.•35 views

CVE-2022-44900

A directory traversal vulnerability in the SevenZipFile.extractall function of the python library py7zr v0.20.0 and earlier allows attackers to write arbitrary files via extracting a crafted 7z file...

9.1CVSS9.1AI score
SaveExploits0References5
CVE
CVE
•added 2022/12/06 12:00 a.m.•124 views

CVE-2022-44900

CVE-2022-44900 : A directory traversal vulnerability in the Python py7zr library (v0.20.0 and earlier) affects SevenZipFile.extractall(), allowing an attacker to write arbitrary files when extracting crafted 7z archives. The issue is documented across multiple advisories (Ubuntu, Debian, OpenVAS,...

9.1CVSS8.8AI score0.02465EPSS
SaveExploits3References3Affected Software1
Rows per page
Query Builder