Lucene search
+L

2399 matches found

RedhatCVE
RedhatCVE
added 2025/10/17 3:52 p.m.12 views

CVE-2025-11842

A security vulnerability has been detected in Shazwazza Smidge up to 4.5.1. The impacted element is an unknown function of the component Bundle Handler. The manipulation of the argument Version leads to path traversal. Remote exploitation of the attack is possible. Upgrading to version 4.6.0 is...

6.5CVSS6.7AI score0.004EPSS
SaveExploits0References1
Veeam
Veeam
added 2025/10/17 12:00 a.m.35 views

How to Collect Logs from Veeam Appliance Installer

Purpose This article documents how to collect logs from the installer for the Software Appliances included with Veeam Backup & Replication 13 Veeam Software Appliance, Veeam Infrastructure Appliance, and Veeam Hardened Repository Appliance. This procedure may be required if an installation-relate...

6AI score
SaveExploits0Affected Software1
Github Security Blog
Github Security Blog
added 2025/10/16 6:30 p.m.16 views

Smidge is vulnerable to Path Traversal

A security vulnerability has been detected in Shazwazza Smidge up to 4.5.1. The impacted element is an unknown function of the component Bundle Handler. The manipulation of the argument Version leads to path traversal. Remote exploitation of the attack is possible. Upgrading to version 4.6.0 is...

6.5CVSS6.8AI score0.004EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2025/10/16 6:30 p.m.8 views

GHSA-9RVM-P3QM-F4VV Smidge is vulnerable to Path Traversal

A security vulnerability has been detected in Shazwazza Smidge up to 4.5.1. The impacted element is an unknown function of the component Bundle Handler. The manipulation of the argument Version leads to path traversal. Remote exploitation of the attack is possible. Upgrading to version 4.6.0 is...

6.3CVSS6.8AI score0.004EPSS
SaveExploits0References6
NVD
NVD
added 2025/10/16 4:15 p.m.20 views

CVE-2025-11842

A security vulnerability has been detected in Shazwazza Smidge up to 4.5.1. The impacted element is an unknown function of the component Bundle Handler. The manipulation of the argument Version leads to path traversal. Remote exploitation of the attack is possible. Upgrading to version 4.6.0 is...

6.5CVSS0.004EPSS
SaveExploits0References5
Snyk
Snyk
added 2025/10/16 3:43 p.m.10 views

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the Bundle Handler component when processing the Version argument. An attacker can access or modify files outside the intended directory by supplying crafted input remotely. Details A Directory Traversal attack...

6.5CVSS7.7AI score0.004EPSS
SaveExploits0References2
CVE
CVE
added 2025/10/16 3:32 p.m.25 views

CVE-2025-11842

The CVE-2025-11842 entry concerns Smidge (up to 4.5.1) with a path traversal vulnerability in the Bundle Handler that abuses the Version argument. This enables remote access to files outside the intended directory. A fix is available: upgrade Smidge Core to version 4.6.0 or higher. Connected sour...

6.5CVSS6.3AI score0.004EPSS
SaveExploits0References5
OSV
OSV
added 2025/10/16 3:32 p.m.9 views

CVE-2025-11842 Shazwazza Smidge Bundle path traversal

A security vulnerability has been detected in Shazwazza Smidge up to 4.5.1. The impacted element is an unknown function of the component Bundle Handler. The manipulation of the argument Version leads to path traversal. Remote exploitation of the attack is possible. Upgrading to version 4.6.0 is...

5.3CVSS6.1AI score
SaveExploits0References7
Cvelist
Cvelist
added 2025/10/16 3:32 p.m.17 views

CVE-2025-11842 Shazwazza Smidge Bundle path traversal

A security vulnerability has been detected in Shazwazza Smidge up to 4.5.1. The impacted element is an unknown function of the component Bundle Handler. The manipulation of the argument Version leads to path traversal. Remote exploitation of the attack is possible. Upgrading to version 4.6.0 is...

6.5CVSS0.004EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2025/10/16 3:32 p.m.4 views

CVE-2025-11842 Shazwazza Smidge Bundle path traversal

A security vulnerability has been detected in Shazwazza Smidge up to 4.5.1. The impacted element is an unknown function of the component Bundle Handler. The manipulation of the argument Version leads to path traversal. Remote exploitation of the attack is possible. Upgrading to version 4.6.0 is...

6.5CVSS6.4AI score0.004EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/10/16 12:00 a.m.8 views

Smidge 路径遍历漏洞

Smidge is a file compression, composition, compression, and management library from the individual developer Shannon Deminick. A path traversal vulnerability exists in Smidge 4.5.1 and earlier versions, which stems from the incorrect manipulation of the parameter Version in the Bundle Handler...

6.5CVSS6.2AI score0.004EPSS
SaveExploits0References5
NVD
NVD
added 2025/10/07 8:15 p.m.13 views

CVE-2025-61910

The NASA’s Interplanetary Overlay Network ION is an implementation of Delay/Disruption Tolerant Networking DTN. A BPv7 bundle with a malformed extension block causes uncontrolled memory allocation inside ION-DTN 4.1.3s, leading to receiver thread termination and a Denial-of-Service DoS. The...

7.5CVSS0.00331EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 7:31 p.m.12 views

EUVD-2025-32887

The NASA’s Interplanetary Overlay Network ION is an implementation of Delay/Disruption Tolerant Networking DTN. A BPv7 bundle with a malformed extension block causes uncontrolled memory allocation inside ION-DTN 4.1.3s, leading to receiver thread termination and a Denial-of-Service DoS. The...

7.5CVSS6.5AI score0.00331EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/10/07 7:31 p.m.4 views

CVE-2025-61910 NASA ION-DTN BPv7 4.1.3s Uncontrolled Memory Allocation that leads to Denial-of-Service

The NASA’s Interplanetary Overlay Network ION is an implementation of Delay/Disruption Tolerant Networking DTN. A BPv7 bundle with a malformed extension block causes uncontrolled memory allocation inside ION-DTN 4.1.3s, leading to receiver thread termination and a Denial-of-Service DoS. The...

7.5CVSS6.7AI score0.00331EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.12 views

EUVD-2007-6687

Malware in sbrugna...

5CVSS6.4AI score0.01298EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2015-3751

Malware in sbrugna...

6.8CVSS5.8AI score0.01491EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.13 views

EUVD-2015-3758

Malware in sbrugna...

4.3CVSS8.6AI score0.01683EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.12 views

EUVD-2019-13376

Malware in sbrugna...

7.8CVSS7.7AI score0.00336EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.12 views

EUVD-2007-6685

Malware in sbrugna...

5CVSS6.4AI score0.01298EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.13 views

EUVD-2021-1845

Malware in sbrugna...

5.4CVSS4.8AI score0.01401EPSS
SaveExploits1References6
Rows per page
Query Builder