137 matches found
The vulnerability of the download_model_with_test_data() function in the software library for building deep learning neural networks, Open Neural Network Exchange (ONNX), allows a hacker to execute arbitrary code.
The vulnerability of the downloadmodelwithtestdata function in the software library for building deep learning neural networks, Open Neural Network Exchange ONNX, is related to an incorrect path name limitation for accessing restricted directories. Exploiting this vulnerability could allow a...
Arc 安全漏洞
ARC is a software package for creating and maintaining file archives. A security vulnerability exists in versions prior to Arc v1.6.0 that stems from using archives without properly validating the filenames within them, making them vulnerable to path traversal attacks...
VulnCheck KEV: CVE-2023-3824
In PHP version 8.0. before 8.0.30, 8.1. before 8.1.22, and 8.2. before 8.2.8, when loading phar file, while reading PHAR directory entries, insufficient length checking may lead to a stack buffer overflow, leading potentially to memory corruption or RCE...
CVE-2024-24940
In JetBrains IntelliJ IDEA before 2023.3.3 path traversal was possible when unpacking archives...
SUSE CVE-2023-51698
Atril is a simple multi-page document viewer. Atril is vulnerable to a critical Command Injection Vulnerability. This vulnerability gives the attacker immediate access to the target system when the target user opens a crafted document or clicks on a crafted link/URL using a maliciously crafted CB...
CVE-2023-49847
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Twinpictures Annual Archive allows Stored XSS.This issue affects Annual Archive: from n/a through 1.6.0...
Path traversal in Archive
An issue in Archive v3.3.7 allows attackers to execute a path traversal via extracting a crafted zip file...
CVE-2023-39139
An issue in Archive v3.3.7 allows attackers to execute a path traversal via extracting a crafted zip file...
CVE-2023-39137
An issue in Archive v3.3.7 allows attackers to spoof zip filenames which can lead to inconsistent filename parsing...
CVE-2023-39139
An issue in Archive v3.3.7 allows attackers to execute a path traversal via extracting a crafted zip file...
CVE-2023-39137
An issue in Archive v3.3.7 allows attackers to spoof zip filenames which can lead to inconsistent filename parsing...
CVE-2023-39139
An issue in Archive v3.3.7 allows attackers to execute a path traversal via extracting a crafted zip file...
SSZipArchive 安全漏洞
SSZipArchive is ZipArchive open source a simple utility class . Used to compress and uncompress files on iOS, macOS and tvOS. A security vulnerability exists in ZipArchive version v2.5.4, which stems from an unhandled edge case in the component sanitizedPath, allowing an attacker to cause a denia...
DEBIAN-CVE-2022-47069
p7zip 16.02 was discovered to contain a heap-buffer-overflow vulnerability via the function NArchive::NZip::CInArchive::FindCdbool at CPP/7zip/Archive/Zip/ZipIn.cpp. NOTE: the Supplier has found that this is not a buffer overflow; at most an out-of-bounds read can occur...
CVE-2023-37460
CVE-2023-37460 affects Plexis Archiver (Plexus Archiver) prior to version 4.8.0. The issue arises when extracting archives with an entry that already exists as a symlink whose target does not exist; resolveFile() returns the symlink source instead of the target, allowing subsequent Files.newOutpu...
PT-2023-21447 · Apple · Macos Monterey +4
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.3 macOS Monterey versions prior to 12.6.4 macOS Big Sur versions prior to 11.7.5 Description: The issue was addressed with improved checks. An archive may be able to bypass Gatekeeper. Recommendations: For macOS...
SUSE CVE-2007-4829
Directory traversal vulnerability in the Archive::Tar Perl module 1.36 and earlier allows user-assisted remote attackers to overwrite arbitrary files via a TAR archive that contains a file whose name is an absolute path or has ".." sequences...
SUSE CVE-2015-1191
Multiple directory traversal vulnerabilities in pigz 2.3.1 allow remote attackers to write to arbitrary files via a 1 full pathname or 2 .. dot dot in an archive...