Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

4398 matches found

osv_alpine
osv_alpine•added 2021/08/31 5:15 p.m.•11 views

ALPINE-CVE-2021-37713

The npm package "tar" aka node-tar before versions 4.4.18, 5.0.10, and 6.1.9 has an arbitrary file creation/overwrite and arbitrary code execution vulnerability. node-tar aims to guarantee that any file whose location would be outside of the extraction target directory is not extracted. This is, ...

8.6CVSS7.9AI score0.01273EPSS
SaveExploits0References1
NVD
NVD•added 2021/08/31 5:15 p.m.•29 views

CVE-2021-37713

The npm package "tar" aka node-tar before versions 4.4.18, 5.0.10, and 6.1.9 has an arbitrary file creation/overwrite and arbitrary code execution vulnerability. node-tar aims to guarantee that any file whose location would be outside of the extraction target directory is not extracted. This is, ...

8.6CVSS0.01273EPSS
SaveExploits0References4
osv_debian
osv_debian•added 2021/08/31 5:15 p.m.•9 views

DEBIAN-CVE-2021-37712

The npm package "tar" aka node-tar before versions 4.4.18, 5.0.10, and 6.1.9 has an arbitrary file creation/overwrite and arbitrary code execution vulnerability. node-tar aims to guarantee that any file whose location would be modified by a symbolic link is not extracted. This is, in part, achiev...

8.6CVSS7.9AI score0.01865EPSS
SaveExploits0References1
osv_alpine
osv_alpine•added 2021/08/31 5:15 p.m.•15 views

ALPINE-CVE-2021-37712

The npm package "tar" aka node-tar before versions 4.4.18, 5.0.10, and 6.1.9 has an arbitrary file creation/overwrite and arbitrary code execution vulnerability. node-tar aims to guarantee that any file whose location would be modified by a symbolic link is not extracted. This is, in part, achiev...

8.6CVSS8AI score0.01865EPSS
SaveExploits0References1
osv_cve
osv_cve•added 2021/08/31 5:15 p.m.•78 views

CVE-2021-37712

The npm package "tar" aka node-tar before versions 4.4.18, 5.0.10, and 6.1.9 has an arbitrary file creation/overwrite and arbitrary code execution vulnerability. node-tar aims to guarantee that any file whose location would be modified by a symbolic link is not extracted. This is, in part, achiev...

8.6CVSS2.5AI score
SaveExploits0References6
osv_cve
osv_cve•added 2021/08/31 5:15 p.m.•41 views

CVE-2021-37713

The npm package "tar" aka node-tar before versions 4.4.18, 5.0.10, and 6.1.9 has an arbitrary file creation/overwrite and arbitrary code execution vulnerability. node-tar aims to guarantee that any file whose location would be outside of the extraction target directory is not extracted. This is, ...

8.6CVSS8.8AI score
SaveExploits0References4
osv_alpine
osv_alpine•added 2021/08/31 5:15 p.m.•14 views

ALPINE-CVE-2021-37701

The npm package "tar" aka node-tar before versions 4.4.16, 5.0.8, and 6.1.7 has an arbitrary file creation/overwrite and arbitrary code execution vulnerability. node-tar aims to guarantee that any file whose location would be modified by a symbolic link is not extracted. This is, in part, achieve...

8.6CVSS7.9AI score0.03286EPSS
SaveExploits0References1
osv_debian
osv_debian•added 2021/08/31 5:15 p.m.•8 views

DEBIAN-CVE-2021-37701

The npm package "tar" aka node-tar before versions 4.4.16, 5.0.8, and 6.1.7 has an arbitrary file creation/overwrite and arbitrary code execution vulnerability. node-tar aims to guarantee that any file whose location would be modified by a symbolic link is not extracted. This is, in part, achieve...

8.6CVSS8AI score0.03286EPSS
SaveExploits0References1
NVD
NVD•added 2021/08/31 5:15 p.m.•27 views

CVE-2021-37701

The npm package "tar" aka node-tar before versions 4.4.16, 5.0.8, and 6.1.7 has an arbitrary file creation/overwrite and arbitrary code execution vulnerability. node-tar aims to guarantee that any file whose location would be modified by a symbolic link is not extracted. This is, in part, achieve...

8.6CVSS0.03286EPSS
SaveExploits0References6
Prion
Prion•added 2021/08/31 5:15 p.m.•48 views

Remote code execution

The npm package "tar" aka node-tar before versions 4.4.18, 5.0.10, and 6.1.9 has an arbitrary file creation/overwrite and arbitrary code execution vulnerability. node-tar aims to guarantee that any file whose location would be modified by a symbolic link is not extracted. This is, in part, achiev...

4.4CVSS9.4AI score0.01865EPSS
SaveExploits0References6Affected Software4
Prion
Prion•added 2021/08/31 5:15 p.m.•32 views

Remote code execution

The npm package "tar" aka node-tar before versions 4.4.18, 5.0.10, and 6.1.9 has an arbitrary file creation/overwrite and arbitrary code execution vulnerability. node-tar aims to guarantee that any file whose location would be outside of the extraction target directory is not extracted. This is, ...

4.4CVSS9.1AI score0.01273EPSS
SaveExploits0References4Affected Software3
osv_ubuntu
osv_ubuntu•added 2021/08/31 5:15 p.m.•24 views

UBUNTU-CVE-2021-37701

The npm package "tar" aka node-tar before versions 4.4.16, 5.0.8, and 6.1.7 has an arbitrary file creation/overwrite and arbitrary code execution vulnerability. node-tar aims to guarantee that any file whose location would be modified by a symbolic link is not extracted. This is, in part, achieve...

8.6CVSS7.3AI score0.03286EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve•added 2021/08/31 5:15 p.m.•391 views

CVE-2021-37713

The npm package "tar" aka node-tar before versions 4.4.18, 5.0.10, and 6.1.9 has an arbitrary file creation/overwrite and arbitrary code execution vulnerability. node-tar aims to guarantee that any file whose location would be outside of the extraction target directory is not extracted. This is, ...

8.6CVSS7.1AI score0.01273EPSS
SaveExploits0References3
attackerkb
attackerkb•added 2021/08/31 5:15 p.m.•4 views

CVE-2021-37712

The npm package "tar" aka node-tar before versions 4.4.18, 5.0.10, and 6.1.9 has an arbitrary file creation/overwrite and arbitrary code execution vulnerability. node-tar aims to guarantee that any file whose location would be modified by a symbolic link is not extracted. This is, in part, achiev...

8.6CVSS6.4AI score0.01865EPSS
SaveExploits0References7Affected Software1
attackerkb
attackerkb•added 2021/08/31 5:15 p.m.•2 views

CVE-2021-37701

The npm package "tar" aka node-tar before versions 4.4.16, 5.0.8, and 6.1.7 has an arbitrary file creation/overwrite and arbitrary code execution vulnerability. node-tar aims to guarantee that any file whose location would be modified by a symbolic link is not extracted. This is, in part, achieve...

8.6CVSS6.4AI score0.03286EPSS
SaveExploits0References7Affected Software1
Prion
Prion•added 2021/08/31 5:15 p.m.•32 views

Design/Logic Flaw

The npm package "tar" aka node-tar before versions 4.4.16, 5.0.8, and 6.1.7 has an arbitrary file creation/overwrite and arbitrary code execution vulnerability. node-tar aims to guarantee that any file whose location would be modified by a symbolic link is not extracted. This is, in part, achieve...

4.4CVSS9.4AI score0.03286EPSS
SaveExploits0References6Affected Software4
attackerkb
attackerkb•added 2021/08/31 5:15 p.m.•3 views

CVE-2021-37713

The npm package "tar" aka node-tar before versions 4.4.18, 5.0.10, and 6.1.9 has an arbitrary file creation/overwrite and arbitrary code execution vulnerability. node-tar aims to guarantee that any file whose location would be outside of the extraction target directory is not extracted. This is, ...

8.6CVSS6.3AI score0.01273EPSS
SaveExploits0References5Affected Software1
UbuntuCve
UbuntuCve•added 2021/08/31 5:15 p.m.•50 views

CVE-2021-37701

The npm package "tar" aka node-tar before versions 4.4.16, 5.0.8, and 6.1.7 has an arbitrary file creation/overwrite and arbitrary code execution vulnerability. node-tar aims to guarantee that any file whose location would be modified by a symbolic link is not extracted. This is, in part, achieve...

8.6CVSS6.9AI score0.03286EPSS
SaveExploits0References3
osv_ubuntu
osv_ubuntu•added 2021/08/31 5:15 p.m.•22 views

UBUNTU-CVE-2021-37712

The npm package "tar" aka node-tar before versions 4.4.18, 5.0.10, and 6.1.9 has an arbitrary file creation/overwrite and arbitrary code execution vulnerability. node-tar aims to guarantee that any file whose location would be modified by a symbolic link is not extracted. This is, in part, achiev...

8.6CVSS7.3AI score0.01865EPSS
SaveExploits0References4
Debian CVE
Debian CVE•added 2021/08/31 4:50 p.m.•54 views

CVE-2021-37713

The npm package "tar" aka node-tar before versions 4.4.18, 5.0.10, and 6.1.9 has an arbitrary file creation/overwrite and arbitrary code execution vulnerability. node-tar aims to guarantee that any file whose location would be outside of the extraction target directory is not extracted. This is, ...

8.6CVSS8.8AI score0.01273EPSS
SaveExploits0
Rows per page
Query Builder