Lucene search
+L

383 matches found

OSV
OSV
added 2018/08/16 2:55 p.m.9 views

SUSE-SU-2018:2388-1 Security update for perl-Archive-Zip

This update for perl-Archive-Zip fixes the following security issue: - CVE-2018-10860: Prevent directory traversal caused by not properly sanitizing paths while extracting zip files. An attacker able to provide a specially crafted archive for processing could have used this flaw to write or...

7.5CVSS7.5AI score0.43067EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2018/07/25 12:00 a.m.29 views

Debian DLA-1440-1 : libarchive-zip-perl security update

The libarchive-zip-perl package is vulnerable to a directory traversal attack in Archive::Zip. It was found that the Archive::Zip module did not properly sanitize paths while extracting zip files. An attacker able to provide a specially crafted archive for processing could use this flaw to write ...

7.5CVSS6.4AI score0.43067EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2018/07/24 12:00 a.m.51 views

Fedora 27 : perl-Archive-Zip (2018-ebebe9abe2)

This release fixes a directory and symbolic link traversal vulnerability in Archive::Zip::Archive Perl module that allows an attacker to writite into an arbitrary file accesible by a local user. Note that Tenable Network Security has extracted the preceding description block directly from the...

7.5CVSS6.5AI score0.43067EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2018/07/20 12:00 a.m.23 views

Fedora Update for perl-Archive-Zip FEDORA-2018-6abfa0012f

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.43067EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2018/07/20 12:00 a.m.26 views

Fedora Update for perl-Archive-Zip FEDORA-2018-ebebe9abe2

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.43067EPSS
SaveExploits0References2
Fedora
Fedora
added 2018/07/19 6:06 p.m.32 views

[SECURITY] Fedora 28 Update: perl-Archive-Zip-1.60-3.fc28

The Archive::Zip module allows a Perl program to create, manipulate, read, and write Zip archive files. Zip archives can be created, or you can read from existing zip files. Once created, they can be written to files, streams, or strings. Members can be added, removed, extracted, replaced,...

7.5CVSS3AI score0.43067EPSS
SaveExploits0
Fedora
Fedora
added 2018/07/19 5:48 p.m.30 views

[SECURITY] Fedora 27 Update: perl-Archive-Zip-1.59-6.fc27

The Archive::Zip module allows a Perl program to create, manipulate, read, and write Zip archive files. Zip archives can be created, or you can read from existing zip files. Once created, they can be written to files, streams, or strings. Members can be added, removed, extracted, replaced,...

7.5CVSS3AI score0.43067EPSS
SaveExploits0
Mageia
Mageia
added 2018/07/11 9:07 p.m.33 views

Updated perl-Archive-Zip packages fix security vulnerability

It was discovered that the Archive::Zip module incorrectly handled certain inputs. An attacker could possibly use this to access sensitive information CVE-2018-10860...

7.5CVSS1.9AI score0.43067EPSS
SaveExploits0References1
OSV
OSV
added 2018/07/11 9:07 p.m.9 views

MGASA-2018-0311 Updated perl-Archive-Zip packages fix security vulnerability

It was discovered that the Archive::Zip module incorrectly handled certain inputs. An attacker could possibly use this to access sensitive information CVE-2018-10860...

7.5CVSS7.4AI score0.43067EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2018/07/05 12:00 a.m.25 views

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : Archive Zip (USN-3703-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-3703-1 advisory. It was discovered that the Archive Zip module incorrectly handled certain inputs. An attacker could possibly use this to access sensitive...

7.5CVSS6.5AI score0.43067EPSS
SaveExploits0References2
OSV
OSV
added 2018/07/04 2:44 p.m.10 views

USN-3703-1 libarchive-zip-perl vulnerability

It was discovered that the Archive Zip module incorrectly handled certain inputs. An attacker could possibly use this to access sensitive information...

7.5CVSS6.7AI score0.43067EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2018/06/29 8:19 p.m.32 views

CVE-2018-10860

It was found that the Archive::Zip module did not properly sanitize paths while extracting zip files. An attacker able to provide a specially crafted archive for processing could use this flaw to write or overwrite arbitrary files in the context of the perl interpreter...

7.5CVSS3.4AI score0.43067EPSS
SaveExploits0References2
OSV
OSV
added 2018/06/29 7:29 p.m.6 views

DEBIAN-CVE-2018-10860

perl-archive-zip is vulnerable to a directory traversal in Archive::Zip. It was found that the Archive::Zip module did not properly sanitize paths while extracting zip files. An attacker able to provide a specially crafted archive for processing could use this flaw to write or overwrite arbitrary...

7.5CVSS7AI score0.43067EPSS
SaveExploits0References1
Prion
Prion
added 2018/06/29 7:29 p.m.22 views

Directory traversal

perl-archive-zip is vulnerable to a directory traversal in Archive::Zip. It was found that the Archive::Zip module did not properly sanitize paths while extracting zip files. An attacker able to provide a specially crafted archive for processing could use this flaw to write or overwrite arbitrary...

6.4CVSS7.4AI score0.43067EPSS
SaveExploits0References6Affected Software2
NVD
NVD
added 2018/06/29 7:29 p.m.17 views

CVE-2018-10860

perl-archive-zip is vulnerable to a directory traversal in Archive::Zip. It was found that the Archive::Zip module did not properly sanitize paths while extracting zip files. An attacker able to provide a specially crafted archive for processing could use this flaw to write or overwrite arbitrary...

7.5CVSS6.4AI score0.43067EPSS
SaveExploits0References6
OSV
OSV
added 2018/06/29 7:29 p.m.9 views

CVE-2018-10860

perl-archive-zip is vulnerable to a directory traversal in Archive::Zip. It was found that the Archive::Zip module did not properly sanitize paths while extracting zip files. An attacker able to provide a specially crafted archive for processing could use this flaw to write or overwrite arbitrary...

7.5CVSS7.4AI score
SaveExploits0References6
Cvelist
Cvelist
added 2018/06/29 7:00 p.m.43 views

CVE-2018-10860

perl-archive-zip is vulnerable to a directory traversal in Archive::Zip. It was found that the Archive::Zip module did not properly sanitize paths while extracting zip files. An attacker able to provide a specially crafted archive for processing could use this flaw to write or overwrite arbitrary...

5.4CVSS7.4AI score0.43067EPSS
SaveExploits0References6
Debian CVE
Debian CVE
added 2018/06/29 7:00 p.m.54 views

CVE-2018-10860

perl-archive-zip is vulnerable to a directory traversal in Archive::Zip. It was found that the Archive::Zip module did not properly sanitize paths while extracting zip files. An attacker able to provide a specially crafted archive for processing could use this flaw to write or overwrite arbitrary...

7.5CVSS6.6AI score0.43067EPSS
SaveExploits0
UbuntuCve
UbuntuCve
added 2018/06/29 12:00 a.m.22 views

CVE-2018-10860

perl-archive-zip is vulnerable to a directory traversal in Archive::Zip. It was found that the Archive::Zip module did not properly sanitize paths while extracting zip files. An attacker able to provide a specially crafted archive for processing could use this flaw to write or overwrite arbitrary...

7.5CVSS6.7AI score0.43067EPSS
SaveExploits0References4
OSV
OSV
added 2018/06/29 12:00 a.m.10 views

UBUNTU-CVE-2018-10860

perl-archive-zip is vulnerable to a directory traversal in Archive::Zip. It was found that the Archive::Zip module did not properly sanitize paths while extracting zip files. An attacker able to provide a specially crafted archive for processing could use this flaw to write or overwrite arbitrary...

7.5CVSS6.8AI score0.43067EPSS
SaveExploits0References5
Rows per page
Query Builder