Lucene search
+L

81 matches found

Positive Technologies
Positive Technologies
•added 2022/07/21 12:00 a.m.•1 views

PT-2022-4554

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 103.0.5060.134 Google Chrome on Android versions prior to 103.0.5060.134 Microsoft Edge affected versions not specified Description The issue is related to insufficient validation of untrusted input in the File...

5CVSS0.00838EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2022/04/01 12:00 a.m.•14 views

The vulnerability of the gf_fprintf function in the os_file.c component of the GPAC multimedia platform allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the gffprintf function in the osfile.c component of the GPAC multimedia platform is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

8.8CVSS7.5AI score0.01257EPSS
SaveExploits1References5Affected Software2
CNVD
CNVD
•added 2021/11/24 12:00 a.m.•33 views

Huawei HarmonyOS Distributed File Component Null Pointer Access Vulnerability

Huawei HarmonyOS is an operating system from Huawei China. A null pointer access vulnerability exists in the distributed file component of Huawei HarmonyOS, which provides a microkernel-based, full-scenario distributed operating system. An attacker could exploit this vulnerability to cause the...

7.8CVSS2.3AI score0.00708EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/11/23 12:00 a.m.•16 views

Huawei HarmonyOS 输入验证错误漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. An input validation error vulnerability exists in the distributed file component of some Huawei products. An attacker could exploit the vulnerability to caus...

7.8CVSS5.7AI score0.00689EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2021/11/23 12:00 a.m.•13 views

Huawei HarmonyOS 输入验证错误漏洞

Huawei HarmonyOS is an operating system from Huawei China. A null pointer access vulnerability exists in the distributed file component of Huawei HarmonyOS, which provides a microkernel-based, full-scenario distributed operating system. An attacker could exploit this vulnerability to cause the...

7.8CVSS5.7AI score0.00708EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2020/08/03 12:00 a.m.•47 views

Debian DLA-2307-1 : ruby-zip security update

rubyzip gem version 1.2.1 and earlier contains a Directory Traversal vulnerability in Zip::File component that can result in write arbitrary files to the filesystem. This attack appear to be exploitable via if a site allows uploading of .zip files, an attacker can upload a malicious file that...

9.8CVSS6.8AI score0.04407EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
•added 2019/05/02 3:21 p.m.•44 views

Path Traversal in Apache Camel

Apache Camel's File is vulnerable to directory traversal. Camel 2.21.0 to 2.21.3, 2.22.0 to 2.22.2, 2.23.0 and the unsupported Camel 2.x 2.19 and earlier versions may be also affected...

7.5CVSS3.7AI score0.08482EPSS
SaveExploits1References9Affected Software1
OSV
OSV
•added 2019/05/02 3:21 p.m.•9 views

GHSA-4WJQ-69RC-8WCP Path Traversal in Apache Camel

Apache Camel's File is vulnerable to directory traversal. Camel 2.21.0 to 2.21.3, 2.22.0 to 2.22.2, 2.23.0 and the unsupported Camel 2.x 2.19 and earlier versions may be also affected...

7.5CVSS7AI score0.08482EPSS
SaveExploits1References9
Mend
Mend
•added 2019/04/30 9:30 p.m.•4 views

CVE-2019-0194

Apache Camel's File is vulnerable to directory traversal. Camel 2.21.0 to 2.21.3, 2.22.0 to 2.22.2, 2.23.0 and the unsupported Camel 2.x 2.19 and earlier versions may be also affected...

8.7CVSS0.08482EPSS
SaveExploits1References17
RedHat Linux
RedHat Linux
•added 2019/04/30 3:18 p.m.•10 views

camel: Directory traversal in file producer

Apache Camel's File is vulnerable to directory traversal. Camel 2.21.0 to 2.21.3, 2.22.0 to 2.22.2, 2.23.0 and the unsupported Camel 2.x 2.19 and earlier versions may be also affected...

7.5CVSS5.7AI score0.08482EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2019/04/30 12:00 a.m.•2 views

PT-2019-11184

Name of the Vulnerable Software and Affected Versions: Apache Camel versions 2.19 and earlier Apache Camel versions 2.21.0 through 2.21.3 Apache Camel versions 2.22.0 through 2.22.2 Apache Camel version 2.23.0 Description: The issue concerns directory traversal in Apache Camel's File component...

7.5CVSS0.08482EPSS
SaveExploits1References19
OSV
OSV
•added 2018/09/06 3:27 a.m.•51 views

GHSA-VQCQ-MRMW-MCMG Rubyzip gem contains a Directory Traversal vulnerability in zip file component

rubyzip gem rubyzip version 1.2.1 and earlier contains a Directory Traversal vulnerability in Zip::File component that can result in write arbitrary files to the filesystem. This attack appear to be exploitable via If a site allows uploading of .zip files , an attacker can upload a malicious file...

9.8CVSS9.3AI score0.04407EPSS
SaveExploits1References7
Github Security Blog
Github Security Blog
•added 2018/09/06 3:27 a.m.•45 views

Rubyzip gem contains a Directory Traversal vulnerability in zip file component

rubyzip gem rubyzip version 1.2.1 and earlier contains a Directory Traversal vulnerability in Zip::File component that can result in write arbitrary files to the filesystem. This attack appear to be exploitable via If a site allows uploading of .zip files , an attacker can upload a malicious file...

9.8CVSS2.8AI score0.04407EPSS
SaveExploits1References7Affected Software1
NVD
NVD
•added 2018/06/26 4:29 p.m.•32 views

CVE-2018-1000544

rubyzip gem rubyzip version 1.2.1 and earlier contains a Directory Traversal vulnerability in Zip::File component that can result in write arbitrary files to the filesystem. This attack appear to be exploitable via If a site allows uploading of .zip files , an attacker can upload a malicious file...

9.8CVSS9.4AI score0.04407EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
•added 2018/06/26 4:29 p.m.•44 views

CVE-2018-1000544

rubyzip gem rubyzip version 1.2.1 and earlier contains a Directory Traversal vulnerability in Zip::File component that can result in write arbitrary files to the filesystem. This attack appear to be exploitable via If a site allows uploading of .zip files , an attacker can upload a malicious file...

9.8CVSS6.8AI score0.04407EPSS
SaveExploits1References2
Prion
Prion
•added 2018/06/26 4:29 p.m.•38 views

Directory traversal

rubyzip gem rubyzip version 1.2.1 and earlier contains a Directory Traversal vulnerability in Zip::File component that can result in write arbitrary files to the filesystem. This attack appear to be exploitable via If a site allows uploading of .zip files , an attacker can upload a malicious file...

7.5CVSS9.3AI score0.04407EPSS
SaveExploits1References4Affected Software3
Cvelist
Cvelist
•added 2018/06/26 4:00 p.m.•63 views

CVE-2018-1000544

rubyzip gem rubyzip version 1.2.1 and earlier contains a Directory Traversal vulnerability in Zip::File component that can result in write arbitrary files to the filesystem. This attack appear to be exploitable via If a site allows uploading of .zip files , an attacker can upload a malicious file...

9.3AI score0.04407EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2018/06/26 12:00 a.m.•15 views

PT-2018-9440

Name of the Vulnerable Software and Affected Versions rubyzip versions 1.2.1 and earlier Description The rubyzip gem contains a Directory Traversal issue in the Zip::File component, allowing an attacker to write arbitrary files to the filesystem. This can be exploited if a site allows uploading o...

9.8CVSS6.6AI score0.04407EPSS
SaveExploits1References22
BDU FSTEC
BDU FSTEC
•added 2018/01/18 12:00 a.m.•14 views

The vulnerability of the Mac OS X operating system’s file component allows a hacker to trigger a service failure or cause other adverse effects.

The vulnerability of the Mac OS X operating system’s file component is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure application termination or have other adverse effects...

10CVSS7.8AI score0.02925EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2017/11/14 12:00 a.m.•19 views

The vulnerability of the Mac OS X operating system’s file component, which allows a hacker to trigger a service failure

The vulnerability of the Mac OS X operating system’s file component exists due to insufficient checks on input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

9.8CVSS7.7AI score0.01352EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder