143 matches found
UBUNTU-CVE-2021-27919
archive/zip in Go 1.16.x before 1.16.1 allows attackers to cause a denial of service panic upon attempted use of the Reader.Open API for a ZIP archive in which ../ occurs at the beginning of any filename...
PT-2019-20113
Name of the Vulnerable Software and Affected Versions http.cookiejar affected versions not specified Description The issue concerns the handling of cookies by the http.cookiejar module, specifically when using the DefaultCookiePolicy. Cookies set for a path, such as path=/any, are sent to...
PT-2007-5319 · Php · Phpwebfilemanager
Name of the Vulnerable Software and Affected Versions: phpWebFileManager version 0.5 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the PN PathPrefix parameter in the index.php file. However, this issue is disputed by a reliable third party, who...