Lucene search
+L

7379 matches found

osv_ghsa
osv_ghsa
•added 2022/12/28 12:30 a.m.•37 views

GHSA-JPF8-H7H7-3PPM tar-utils Path Traversal vulnerability

Due to improper path sanitization, archives containing relative file paths can cause files to be written or overwritten outside of the target directory...

9.1CVSS9.1AI score0.0107EPSS
SaveExploits0References5
NVD
NVD
•added 2022/12/27 10:15 p.m.•40 views

CVE-2020-36561

Due to improper path sanitization, archives containing relative file paths can cause files to be written or overwritten outside of the target directory...

9.1CVSS0.01363EPSS
SaveExploits1References4
osv_cve
osv_cve
•added 2022/12/27 10:15 p.m.•28 views

CVE-2018-25046

Due to improper path sanitization, archives containing relative file paths can cause files to be written or overwritten outside of the target directory...

9.1CVSS9.2AI score
SaveExploits0References3
Prion
Prion
•added 2022/12/27 10:15 p.m.•29 views

Input validation

Due to improper path sanitization, archives containing relative file paths can cause files to be written or overwritten outside of the target directory...

6.4CVSS9.1AI score0.01285EPSS
SaveExploits1References4Affected Software1
Prion
Prion
•added 2022/12/27 10:15 p.m.•26 views

Input validation

Due to improper path sanitization, archives containing relative file paths can cause files to be written or overwritten outside of the target directory...

6.4CVSS9.1AI score0.01243EPSS
SaveExploits0References3Affected Software1
Prion
Prion
•added 2022/12/27 10:15 p.m.•34 views

Input validation

Due to improper path sanitization, archives containing relative file paths can cause files to be written or overwritten outside of the target directory...

6.4CVSS9.1AI score0.01363EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2022/12/27 9:13 p.m.•44 views

CVE-2020-36566 Path traversal in github.com/whyrusleeping/tar-utils

Due to improper path sanitization, archives containing relative file paths can cause files to be written or overwritten outside of the target directory...

9.2AI score0.0107EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2022/12/27 9:13 p.m.•50 views

CVE-2020-36561 Path traversal in github.com/yi-ge/unzip

Due to improper path sanitization, archives containing relative file paths can cause files to be written or overwritten outside of the target directory...

9.2AI score0.01363EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2022/12/27 9:13 p.m.•46 views

CVE-2020-36560 Path traversal in github.com/artdarek/go-unzip

Due to improper path sanitization, archives containing relative file paths can cause files to be written or overwritten outside of the target directory...

9.2AI score0.01285EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2022/12/27 9:13 p.m.•8 views

CVE-2018-25046 Path traversal in code.cloudfoundry.org/archiver

Due to improper path sanitization, archives containing relative file paths can cause files to be written or overwritten outside of the target directory...

9.2AI score0.01243EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2022/12/27 9:13 p.m.•43 views

CVE-2018-25046 Path traversal in code.cloudfoundry.org/archiver

Due to improper path sanitization, archives containing relative file paths can cause files to be written or overwritten outside of the target directory...

9.2AI score0.01243EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/27 12:00 a.m.•2 views

CVE-2018-25046: Improper Limitation of a Pathname to a Restricted Directory

Due to improper path sanitization, archives containing relative file paths can cause files to be written or overwritten outside of the target directory...

9.1CVSS5.8AI score0.01243EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/27 12:00 a.m.•2 views

CVE-2020-36561: Improper Limitation of a Pathname to a Restricted Directory

Due to improper path sanitization, archives containing relative file paths can cause files to be written or overwritten outside of the target directory...

9.1CVSS5.8AI score0.01363EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/12/27 12:00 a.m.•19 views

go-unzip 路径遍历漏洞

Package go-unzip is a very simple library from the personal developer Dariusz Prząda. It is used to extract zip archives. A path traversal vulnerability exists in go-unzip, which stems from an incorrect path, where an archive containing relative file paths may cause files to be written or...

9.1CVSS8.1AI score0.01285EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/27 12:00 a.m.•4 views

CVE-2020-36560: Improper Limitation of a Pathname to a Restricted Directory

Due to improper path sanitization, archives containing relative file paths can cause files to be written or overwritten outside of the target directory...

9.1CVSS5.8AI score0.01285EPSS
SaveExploits1References2
osv_debian
osv_debian
•added 2022/12/22 8:15 p.m.•10 views

DEBIAN-CVE-2022-31744

An attacker could have injected CSS into stylesheets accessible via internal URIs, such as resource:, and in doing so bypass a page's Content Security Policy. This vulnerability affects Firefox ESR 91.11, Thunderbird 102, Thunderbird 91.11, and Firefox 101...

6.5CVSS6.5AI score0.00596EPSS
SaveExploits0References1
osv_ghsa
osv_ghsa
•added 2022/12/22 8:03 p.m.•35 views

GHSA-6MV3-WM7J-H4W5 Tauri Filesystem Scope Glob Pattern is too Permissive

Impact The filesystem glob pattern wildcards , ?, and ... match file path literals and leading dots by default, which unintentionally exposes sub folder content of allowed paths. Example: The fs scope $HOME/.key would also allow $HOME/.ssh/secret.key to be read even though it is in a sub director...

6.8CVSS6.8AI score0.01035EPSS
SaveExploits1References6
Debian CVE
Debian CVE
•added 2022/12/22 12:00 a.m.•80 views

CVE-2022-31739

When downloading files on Windows, the % character was not escaped, which could have lead to a download incorrectly being saved to attacker-influenced paths that used variables such as %HOMEPATH% or %APPDATA%.This bug only affects Firefox for Windows. Other operating systems are unaffected.. This...

8.8CVSS8.6AI score0.0068EPSS
SaveExploits0
Veracode
Veracode
•added 2022/12/21 1:11 a.m.•33 views

Path Traversal

plexus-utils is vulnerable to Path Traversal. An attacker can access arbitrary files and directories stored on the file system through the extractFile function in Expand.java and manipulate files with dot-dot-slash ../ sequences and variations or by using absolute file paths...

7.5CVSS6.4AI score0.01347EPSS
SaveExploits0References7Affected Software1
Positive Technologies
Positive Technologies
•added 2022/12/21 12:00 a.m.•33 views

PT-2022-27935 · Roxio · Roxio Creator Ljb

Name of the Vulnerable Software and Affected Versions: Roxio Creator LJB version 12.2 build number 106B62B Roxio Creator LJB version 12.2 build number 106B63A Roxio Creator LJB version 12.2 build number 106B69A Roxio Creator LJB version 12.2 build number 106B71A Roxio Creator LJB version 12.2 bui...

6.7CVSS6.4AI score0.00451EPSS
SaveExploits0References5
Rows per page
Query Builder