Lucene search
K

54 matches found

BDU FSTEC
BDU FSTEC
added 2022/04/01 12:0 a.m.3 views

The vulnerability of the gf_fprintf function in the os_file.c component of the GPAC multimedia platform allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the gffprintf function in the osfile.c component of the GPAC multimedia platform is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

8.8CVSS7.5AI score0.01222EPSS
Exploits1References5Affected Software2
CNVD
CNVD
added 2021/11/24 12:0 a.m.19 views

Huawei HarmonyOS Distributed File Component Null Pointer Access Vulnerability

Huawei HarmonyOS is an operating system from Huawei China. A null pointer access vulnerability exists in the distributed file component of Huawei HarmonyOS, which provides a microkernel-based, full-scenario distributed operating system. An attacker could exploit this vulnerability to cause the...

7.8CVSS2.3AI score0.00685EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/11/23 12:0 a.m.4 views

Huawei HarmonyOS 输入验证错误漏洞

Huawei HarmonyOS is an operating system from Huawei China. A null pointer access vulnerability exists in the distributed file component of Huawei HarmonyOS, which provides a microkernel-based, full-scenario distributed operating system. An attacker could exploit this vulnerability to cause the...

7.8CVSS5.7AI score0.00685EPSS
Exploits0References3
CNNVD
CNNVD
added 2021/11/23 12:0 a.m.4 views

Huawei HarmonyOS 输入验证错误漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. An input validation error vulnerability exists in the distributed file component of some Huawei products. An attacker could exploit the vulnerability to caus...

7.8CVSS5.7AI score0.00667EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2020/08/03 12:0 a.m.35 views

Debian DLA-2307-1 : ruby-zip security update

rubyzip gem version 1.2.1 and earlier contains a Directory Traversal vulnerability in Zip::File component that can result in write arbitrary files to the filesystem. This attack appear to be exploitable via if a site allows uploading of .zip files, an attacker can upload a malicious file that...

9.8CVSS6.8AI score0.04499EPSS
Exploits1References4
OSV
OSV
added 2019/05/02 3:21 p.m.2 views

GHSA-4WJQ-69RC-8WCP Path Traversal in Apache Camel

Apache Camel's File is vulnerable to directory traversal. Camel 2.21.0 to 2.21.3, 2.22.0 to 2.22.2, 2.23.0 and the unsupported Camel 2.x 2.19 and earlier versions may be also affected...

7.5CVSS7AI score0.08482EPSS
Exploits1References9
Github Security Blog
Github Security Blog
added 2019/05/02 3:21 p.m.31 views

Path Traversal in Apache Camel

Apache Camel's File is vulnerable to directory traversal. Camel 2.21.0 to 2.21.3, 2.22.0 to 2.22.2, 2.23.0 and the unsupported Camel 2.x 2.19 and earlier versions may be also affected...

7.5CVSS3.7AI score0.08482EPSS
Exploits1References9Affected Software1
RedHat Linux
RedHat Linux
added 2019/04/30 3:18 p.m.0 views

camel: Directory traversal in file producer

Apache Camel's File is vulnerable to directory traversal. Camel 2.21.0 to 2.21.3, 2.22.0 to 2.22.2, 2.23.0 and the unsupported Camel 2.x 2.19 and earlier versions may be also affected...

7.5CVSS5.7AI score0.08482EPSS
Exploits1References4
OSV
OSV
added 2018/09/06 3:27 a.m.32 views

GHSA-VQCQ-MRMW-MCMG Rubyzip gem contains a Directory Traversal vulnerability in zip file component

rubyzip gem rubyzip version 1.2.1 and earlier contains a Directory Traversal vulnerability in Zip::File component that can result in write arbitrary files to the filesystem. This attack appear to be exploitable via If a site allows uploading of .zip files , an attacker can upload a malicious file...

9.8CVSS9.3AI score0.04499EPSS
Exploits1References7
Github Security Blog
Github Security Blog
added 2018/09/06 3:27 a.m.33 views

Rubyzip gem contains a Directory Traversal vulnerability in zip file component

rubyzip gem rubyzip version 1.2.1 and earlier contains a Directory Traversal vulnerability in Zip::File component that can result in write arbitrary files to the filesystem. This attack appear to be exploitable via If a site allows uploading of .zip files , an attacker can upload a malicious file...

9.8CVSS2.8AI score0.04499EPSS
Exploits1References7Affected Software1
NVD
NVD
added 2018/06/26 4:29 p.m.16 views

CVE-2018-1000544

rubyzip gem rubyzip version 1.2.1 and earlier contains a Directory Traversal vulnerability in Zip::File component that can result in write arbitrary files to the filesystem. This attack appear to be exploitable via If a site allows uploading of .zip files , an attacker can upload a malicious file...

9.8CVSS9.4AI score0.04499EPSS
Exploits1References4
UbuntuCve
UbuntuCve
added 2018/06/26 4:29 p.m.28 views

CVE-2018-1000544

rubyzip gem rubyzip version 1.2.1 and earlier contains a Directory Traversal vulnerability in Zip::File component that can result in write arbitrary files to the filesystem. This attack appear to be exploitable via If a site allows uploading of .zip files , an attacker can upload a malicious file...

9.8CVSS6.8AI score0.04499EPSS
Exploits1References2
Prion
Prion
added 2018/06/26 4:29 p.m.26 views

Directory traversal

rubyzip gem rubyzip version 1.2.1 and earlier contains a Directory Traversal vulnerability in Zip::File component that can result in write arbitrary files to the filesystem. This attack appear to be exploitable via If a site allows uploading of .zip files , an attacker can upload a malicious file...

7.5CVSS9.3AI score0.04499EPSS
Exploits1References4Affected Software3
Cvelist
Cvelist
added 2018/06/26 4:0 p.m.21 views

CVE-2018-1000544

rubyzip gem rubyzip version 1.2.1 and earlier contains a Directory Traversal vulnerability in Zip::File component that can result in write arbitrary files to the filesystem. This attack appear to be exploitable via If a site allows uploading of .zip files , an attacker can upload a malicious file...

9.3AI score0.04499EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2018/06/26 12:0 a.m.5 views

PT-2018-9440

Name of the Vulnerable Software and Affected Versions rubyzip versions 1.2.1 and earlier Description The rubyzip gem contains a Directory Traversal issue in the Zip::File component, allowing an attacker to write arbitrary files to the filesystem. This can be exploited if a site allows uploading o...

9.8CVSS6.6AI score0.04499EPSS
Exploits1References22
BDU FSTEC
BDU FSTEC
added 2018/01/18 12:0 a.m.4 views

The vulnerability of the Mac OS X operating system’s file component allows a hacker to trigger a service failure or cause other adverse effects.

The vulnerability of the Mac OS X operating system’s file component is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure application termination or have other adverse effects...

10CVSS7.8AI score0.02925EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2017/11/14 12:0 a.m.4 views

The vulnerability of the Mac OS X operating system’s file component, which allows a hacker to trigger a service failure

The vulnerability of the Mac OS X operating system’s file component exists due to insufficient checks on input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

9.8CVSS7.7AI score0.02602EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2017/11/14 12:0 a.m.2 views

The vulnerability of the Mac OS X operating system’s file component, which allows a hacker to trigger a service failure

The vulnerability of the Mac OS X operating system’s file component exists due to insufficient checks on input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

9.8CVSS7.7AI score0.01352EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2017/11/14 12:0 a.m.5 views

The vulnerability of the Mac OS X operating system’s file component, which allows a hacker to trigger a service failure

The vulnerability of the Mac OS X operating system’s file component exists due to insufficient checks on input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

9.8CVSS7.7AI score0.01352EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2017/11/14 12:0 a.m.4 views

The vulnerability of the Mac OS X operating system’s file component, which allows a hacker to trigger a service failure

The vulnerability of the Mac OS X operating system’s file component exists due to insufficient checks on input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

9.8CVSS7.7AI score0.01352EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder