Lucene search
+L

61 matches found

OSV
OSV
added 2023/12/17 3:31 a.m.19 views

CVE-2023-6891 PeaZip Library dragdropfilesdll.dll uncontrolled search path

A vulnerability has been found in PeaZip 9.4.0 and classified as problematic. Affected by this vulnerability is an unknown functionality in the library dragdropfilesdll.dll of the component Library Handler. The manipulation leads to uncontrolled search path. An attack has to be approached locally...

5.3CVSS5.2AI score
SaveExploits0References5
Cvelist
Cvelist
added 2023/12/17 3:31 a.m.33 views

CVE-2023-6891 PeaZip Library dragdropfilesdll.dll uncontrolled search path

A vulnerability has been found in PeaZip 9.4.0 and classified as problematic. Affected by this vulnerability is an unknown functionality in the library dragdropfilesdll.dll of the component Library Handler. The manipulation leads to uncontrolled search path. An attack has to be approached locally...

5.3CVSS7.8AI score0.00302EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/12/17 12:00 a.m.18 views

PT-2023-32802 · Peazip · Peazip

Name of the Vulnerable Software and Affected Versions: PeaZip versions 9.4.0 Description: A vulnerability has been found in the library dragdropfilesdll.dll of the component Library Handler, leading to uncontrolled search path. The manipulation can be exploited locally. Upgrading to version 9.6.0...

7.8CVSS7.2AI score0.00302EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2023/12/17 12:00 a.m.11 views

PeaZip Code Issue Vulnerability

PeaZip is a free Zip software and Rar extractor from the individual developer Giorgio Tani. A code issue vulnerability exists in PeaZip version 9.4.0, which stems from an uncontrolled search path issue...

7.8CVSS7.1AI score0.00302EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2023/04/07 12:00 a.m.10 views

Mageia: Security Advisory (MGASA-2023-0124)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS5.7AI score0.00311EPSS
SaveExploits1References4
Mageia
Mageia
added 2023/04/06 9:20 p.m.37 views

Updated peazip packages fix security vulnerability

Denial of service via the End of Archive tag function of the peazip/pea UNPEA feature. CVE-2023-24785...

5.5CVSS5.8AI score0.00311EPSS
SaveExploits1References2
OSV
OSV
added 2023/04/06 9:20 p.m.6 views

MGASA-2023-0124 Updated peazip packages fix security vulnerability

Denial of service via the End of Archive tag function of the peazip/pea UNPEA feature. CVE-2023-24785...

5.5CVSS6.7AI score0.00311EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2023/03/15 12:00 a.m.29 views

openSUSE 15 Security Update : peazip (openSUSE-SU-2023:0071-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2023:0071-1 advisory. - An issue in Giorgio Tani peazip v.9.0.0 allows attackers to cause a denial of service via the End of Archive tag function of the peazip/pea UNPEA...

5.5CVSS5.7AI score0.00311EPSS
SaveExploits1References5
OSV
OSV
added 2023/03/14 3:01 p.m.5 views

OPENSUSE-SU-2023:0071-1 Security update for peazip

This update for peazip fixes the following issues: peazip was updated to 9.1.0: Major restyle in application's look & feel and themes, and many usability improvements for the file manager, and archiving / extraction screens. The scripting engine was refined, with the ability to adapt the syntax f...

5.5CVSS5.6AI score0.00311EPSS
SaveExploits1References4
OPENSUSE Linux
OPENSUSE Linux
added 2023/03/14 12:00 a.m.7 views

Security update for peazip (moderate)

openSUSE Security Update: Security update for peazip Announcement ID: openSUSE-SU-2023:0071-1 Rating: moderate References: 1202690 1208468 Cross-References: CVE-2023-24785 CVSS scores: CVE-2023-24785 NVD : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: openSUSE Backports...

5.5CVSS6.8AI score0.00311EPSS
SaveExploits1References2
SUSE CVE
SUSE CVE
added 2023/02/21 1:59 a.m.8 views

SUSE CVE-2023-24785

An issue in Giorgio Tani peazip v.9.0.0 allows attackers to cause a denial of service via the End of Archive tag function of the peazip/pea UNPEA feature...

5.5CVSS6.8AI score0.00311EPSS
SaveExploits1References4
NVD
NVD
added 2023/02/17 6:15 p.m.23 views

CVE-2023-24785

An issue in Giorgio Tani peazip v.9.0.0 allows attackers to cause a denial of service via the End of Archive tag function of the peazip/pea UNPEA feature...

5.5CVSS5.4AI score0.00311EPSS
SaveExploits1References1
OSV
OSV
added 2023/02/17 6:15 p.m.4 views

CVE-2023-24785

An issue in Giorgio Tani peazip v.9.0.0 allows attackers to cause a denial of service via the End of Archive tag function of the peazip/pea UNPEA feature...

5.5CVSS6.1AI score0.00311EPSS
SaveExploits1References1
Prion
Prion
added 2023/02/17 6:15 p.m.15 views

Design/Logic Flaw

An issue in Giorgio Tani peazip v.9.0.0 allows attackers to cause a denial of service via the End of Archive tag function of the peazip/pea UNPEA feature...

1.9CVSS5.3AI score0.00311EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/02/17 12:00 a.m.6 views

CVE-2023-24785

An issue in Giorgio Tani peazip v.9.0.0 allows attackers to cause a denial of service via the End of Archive tag function of the peazip/pea UNPEA feature...

6.6AI score0.00311EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2023/02/17 12:00 a.m.33 views

CVE-2023-24785

An issue in Giorgio Tani peazip v.9.0.0 allows attackers to cause a denial of service via the End of Archive tag function of the peazip/pea UNPEA feature...

5.6AI score0.00311EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2023/02/17 12:00 a.m.8 views

PeaZip 安全漏洞

PeaZip is a free Zip software and Rar extractor from the individual developer Giorgio Tani. A security vulnerability exists in Giorgio Tani peazip version v.9.0.0, which originates from a denial of service that allows an attacker to cause a denial of service via the end-of-archive marking feature...

5.5CVSS5.7AI score0.00311EPSS
SaveExploits1References2
CVE
CVE
added 2023/02/17 12:00 a.m.63 views

CVE-2023-24785

CVE-2023-24785 affects Giorgio Tani’s PeaZip (peazip) up to at least v9.0.0, where the DoS is triggered through the End of Archive tag function in the peazip/pea UNPEA feature. The connected documents confirm the issue and cite the vulnerability description, with remediation noted in advisories t...

5.5CVSS5.3AI score0.00311EPSS
SaveExploits1References1Affected Software1
Check Point Advisories
Check Point Advisories
added 2017/09/26 12:00 a.m.19 views

PeaZip Compressed Filename Command Injection (CVE-2009-2261)

A command injection vulnerability exists in PeaZip. A remote attacker may exploit this vulnerability by sending a specially crafted Zip file to a target user, and convince him to open this file with PeaZip. Successful exploitation would allow an attacker to execute commands in the security contex...

9.3CVSS3.8AI score0.41422EPSS
SaveExploits4
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.23 views

PeaZip <= 2.6.1 Zip Processing Command Injection

No description provided by source. $Id: peazipcommandinjection.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...

7.1AI score
SaveExploits0
Rows per page
Query Builder