UBUNTU-CVE-2024-12088

A flaw was found in rsync. When using the --safe-links option, the rsync client fails to properly verify if a symbolic link destination sent from the server contains another symbolic link within it. This results in a path traversal vulnerability, which may lead to arbitrary file write outside the...

GHSA-CJGQ-5QMW-RCJ6 keras Path Traversal vulnerability

An issue in keras 3.7.0 allows attackers to write arbitrary files to the user's machine via downloading a crafted tar file through the getfile function...

AZL-55313 CVE-2024-55459 affecting package keras 3.3.3-8

An issue in keras 3.7.0 allows attackers to write arbitrary files to the user's machine via downloading a crafted tar file through the getfile function...

DEBIAN-CVE-2024-55459

An issue in keras 3.7.0 allows attackers to write arbitrary files to the user's machine via downloading a crafted tar file through the getfile function...

CVE-2024-55459

An issue in keras 3.7.0 allows attackers to write arbitrary files to the user's machine via downloading a crafted tar file through the getfile function...

UBUNTU-CVE-2024-55459

An issue in keras 3.7.0 allows attackers to write arbitrary files to the user's machine via downloading a crafted tar file through the getfile function...

Keras 安全漏洞

Keras is a multi-backend deep learning framework open-sourced by Keras. A security vulnerability exists in Keras version 3.7.0, which stems from a vulnerability that allows an attacker to write arbitrary files to a user's computer by downloading a carefully crafted tar file via the getfile functi...

CVE-2024-55459

Removed by vendor...

CVE-2024-55459

An issue in keras 3.7.0 allows attackers to write arbitrary files to the user's machine via downloading a crafted tar file through the getfile function...

CVE-2024-55459

An issue in keras 3.7.0 allows attackers to write arbitrary files to the user's machine via downloading a crafted tar file through the getfile function...

PT-2025-3118 · Keras · Keras

Name of the Vulnerable Software and Affected Versions: Keras version 3.7.0 Description: The issue allows attackers to write arbitrary files to the user's machine by downloading a crafted tar file through the get file function. This enables attackers to potentially compromise the user's system by...

CVE-2024-12425 Path traversal leading to arbitrary .ttf file write

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in The Document Foundation LibreOffice allows Absolute Path Traversal. An attacker can write to arbitrary locations, albeit suffixed with ".ttf", by supplying a file in a format that supports embedded font...

CVE-2024-12425

CVE-2024-12425 concerns LibreOffice: an improper PATH traversal in the Document Foundation implementation allows an attacker to write to arbitrary locations (suffixing outputs with .ttf) by supplying a file that contains embedded font data. Affected versions are LibreOffice 24.8 and earlier than ...

CVE-2024-12425 Path traversal leading to arbitrary .ttf file write

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in The Document Foundation LibreOffice allows Absolute Path Traversal. An attacker can write to arbitrary locations, albeit suffixed with ".ttf", by supplying a file in a format that supports embedded font...

CVE-2024-12425

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in The Document Foundation LibreOffice allows Absolute Path Traversal. An attacker can write to arbitrary locations, albeit suffixed with ".ttf", by supplying a file in a format that supports embedded font...

CVE-2024-56514 Karmada Tar Slips in CRDs archive extraction

Karmada is a Kubernetes management system that allows users to run cloud-native applications across multiple Kubernetes clusters and clouds. Prior to version 1.12.0, both in karmadactl and karmada-operator, it is possible to supply a filesystem path, or an HTTPs URL to retrieve the custom resourc...

CVE-2024-56514 Karmada Tar Slips in CRDs archive extraction

Karmada is a Kubernetes management system that allows users to run cloud-native applications across multiple Kubernetes clusters and clouds. Prior to version 1.12.0, both in karmadactl and karmada-operator, it is possible to supply a filesystem path, or an HTTPs URL to retrieve the custom resourc...

PT-2025-25390

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description A directory traversal vulnerability in the recv file method allows arbitrary files to be written to the master cache directory. Recommendations At the moment, there is no information about a...

PT-2025-54483

Name of the Vulnerable Software and Affected Versions GNU Wget2 affected versions not specified Description A stack-based buffer overflow exists in the filename sanitization logic when processing attacker-controlled URL paths, particularly when filename restriction options are active. A remote...

PT-2025-54482

Name of the Vulnerable Software and Affected Versions GNU Wget2 affected versions not specified Description GNU Wget2 contains a path traversal flaw when processing Metalink documents. The application does not properly validate file paths within the elements of Metalink v3/v4 documents. This allo...