653 matches found
CVE-2025-29213
A zip slip vulnerability in the component \service\migrate\MigrateForm.java of JEEWMS v3.7 allows attackers to execute arbitrary code via a crafted Zip file...
CVE-2025-29213
A zip slip vulnerability in the component \service\migrate\MigrateForm.java of JEEWMS v3.7 allows attackers to execute arbitrary code via a crafted Zip file...
CVE-2025-29213
CVE-2025-29213 affects JeeWMS v3.7 in the service migrate module, specifically the MigrateForm.java component. The vulnerability is a zip-slip flaw that can lead to arbitrary code execution when processing crafted ZIP files. Documents consistently name the vulnerable path as \service\migrate\Migr...
Vim vulnerable to potential data loss with zip.vim and special crafted zip files
...
SUSE CVE-2025-29768
Vim, a text editor, is vulnerable to potential data loss with zip.vim and special crafted zip files in versions prior to 9.1.1198. The impact is medium because a user must be made to view such an archive with Vim and then press 'x' on such a strange filename. The issue has been fixed as of Vim...
AZL-58616 CVE-2025-29768 affecting package vim for versions less than 9.1.1198-1
Vim, a text editor, is vulnerable to potential data loss with zip.vim and special crafted zip files in versions prior to 9.1.1198. The impact is medium because a user must be made to view such an archive with Vim and then press 'x' on such a strange filename. The issue has been fixed as of Vim...
AZL-58632 CVE-2025-29768 affecting package vim for versions less than 9.1.1198-1
Vim, a text editor, is vulnerable to potential data loss with zip.vim and special crafted zip files in versions prior to 9.1.1198. The impact is medium because a user must be made to view such an archive with Vim and then press 'x' on such a strange filename. The issue has been fixed as of Vim...
DEBIAN-CVE-2025-29768
Vim, a text editor, is vulnerable to potential data loss with zip.vim and special crafted zip files in versions prior to 9.1.1198. The impact is medium because a user must be made to view such an archive with Vim and then press 'x' on such a strange filename. The issue has been fixed as of Vim...
ALPINE-CVE-2025-29768
Vim, a text editor, is vulnerable to potential data loss with zip.vim and special crafted zip files in versions prior to 9.1.1198. The impact is medium because a user must be made to view such an archive with Vim and then press 'x' on such a strange filename. The issue has been fixed as of Vim...
UBUNTU-CVE-2025-29768
Vim, a text editor, is vulnerable to potential data loss with zip.vim and special crafted zip files in versions prior to 9.1.1198. The impact is medium because a user must be made to view such an archive with Vim and then press 'x' on such a strange filename. The issue has been fixed as of Vim...
Vim 参数注入漏洞
Vim is a cross-platform text editor from the Vim open source. A parameter injection vulnerability exists in Vim versions prior to 9.1.1198, which stems from zip.vim and specially crafted zip files that may result in data loss...
FreeBSD : vim -- potential data loss with zip.vim and specially crafted zip files (9cf03c96-ffa5-11ef-bb15-002590af0794)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 9cf03c96-ffa5-11ef-bb15-002590af0794 advisory. Vim reports: See https://github.com/vim/vim/security/advisories/GHSA-693p-m996-3rmf Tenable has extract...
Linux Distros Unpatched Vulnerability : CVE-2017-5981
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - seeko.c in zziplib 0.13.62 allows remote attackers to cause a denial of service assertion failure and crash via a crafted ZIP file. CVE-2017-5981 Note that Ness...
CVE-2025-25784
An arbitrary file upload vulnerability in the component \c\TemplateController.php of Jizhicms v2.5.4 allows attackers to execute arbitrary code via uploading a crafted Zip file...
CVE-2025-25791
An arbitrary file upload vulnerability in the plugin installation feature of YZNCMS v2.0.1 allows attackers to execute arbitrary code via uploading a crafted Zip file...
CVE-2025-25790
An arbitrary file upload vulnerability in the component \controller\LocalTemplate.php of FoxCMS v1.2.5 allows attackers to execute arbitrary code via uploading a crafted Zip file...
CVE-2025-25790
An arbitrary file upload vulnerability in the component \controller\LocalTemplate.php of FoxCMS v1.2.5 allows attackers to execute arbitrary code via uploading a crafted Zip file...
CVE-2025-25790
An arbitrary file upload vulnerability in the component \controller\LocalTemplate.php of FoxCMS v1.2.5 allows attackers to execute arbitrary code via uploading a crafted Zip file...
CVE-2025-25790
CVE-2025-25790 discusses an arbitrary file upload vulnerability affecting FoxCMS v1.2.5, specifically in the component path and file \controller\LocalTemplate.php. The issue permits an attacker to execute arbitrary code by uploading a crafted ZIP file. The CVE entry indicates a high-severity impa...