Lucene search
+L

93 matches found

Positive Technologies
Positive Technologies
•added 2025/04/15 12:00 a.m.•27 views

PT-2025-16365

Name of the Vulnerable Software and Affected Versions PeaZip versions 10.4.0 and earlier Description This issue allows attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of PeaZip. User interaction is required to exploit this, where the target must visit a...

7.8CVSS6.3AI score0.00291EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/15 12:00 a.m.•9 views

CVE-2025-33026: Inclusion of Web Functionality from an Untrusted Source

In PeaZip through 10.4.0, there is a Mark-of-the-Web Bypass Vulnerability. This vulnerability allows attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of PeaZip. User interaction is required to exploit this vulnerability in that the target must visit a malicio...

7.8CVSS6.5AI score0.00291EPSS
SaveExploits0References1
osv_opensuse
osv_opensuse
•added 2024/06/15 12:00 a.m.•10 views

OPENSUSE-SU-2024:12734-1 peazip-9.1.0-1.1 on GA media

These are all security issues fixed in the peazip-9.1.0-1.1 package on the GA media of openSUSE Tumbleweed...

5.5CVSS5.6AI score0.00311EPSS
SaveExploits1References1
OpenVAS
OpenVAS
•added 2024/03/04 12:00 a.m.•35 views

openSUSE: Security Advisory for peazip (openSUSE-SU-2023:0071-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS5.6AI score0.00311EPSS
SaveExploits1References2
SUSE CVE
SUSE CVE
•added 2023/12/19 12:08 a.m.•19 views

SUSE CVE-2023-6891

A vulnerability has been found in PeaZip 9.4.0 and classified as problematic. Affected by this vulnerability is an unknown functionality in the library dragdropfilesdll.dll of the component Library Handler. The manipulation leads to uncontrolled search path. An attack has to be approached locally...

7.8CVSS5.4AI score0.00302EPSS
SaveExploits0References3
NVD
NVD
•added 2023/12/17 4:15 a.m.•34 views

CVE-2023-6891

A vulnerability has been found in PeaZip 9.4.0 and classified as problematic. Affected by this vulnerability is an unknown functionality in the library dragdropfilesdll.dll of the component Library Handler. The manipulation leads to uncontrolled search path. An attack has to be approached locally...

7.8CVSS0.00302EPSS
SaveExploits0References3
Prion
Prion
•added 2023/12/17 4:15 a.m.•32 views

Design/Logic Flaw

A vulnerability has been found in PeaZip 9.4.0 and classified as problematic. Affected by this vulnerability is an unknown functionality in the library dragdropfilesdll.dll of the component Library Handler. The manipulation leads to uncontrolled search path. An attack has to be approached locally...

4.3CVSS7.1AI score0.00302EPSS
SaveExploits0References3Affected Software1
osv_cve
osv_cve
•added 2023/12/17 3:31 a.m.•30 views

CVE-2023-6891 PeaZip Library dragdropfilesdll.dll uncontrolled search path

A vulnerability has been found in PeaZip 9.4.0 and classified as problematic. Affected by this vulnerability is an unknown functionality in the library dragdropfilesdll.dll of the component Library Handler. The manipulation leads to uncontrolled search path. An attack has to be approached locally...

5.3CVSS5.2AI score
SaveExploits0References5
CVE
CVE
•added 2023/12/17 3:31 a.m.•148 views

CVE-2023-6891

CVE-2023-6891 affects PeaZip 9.4.0 and is tied to the unknown functionality in the library dragdropfilesdll.dll within the Library Handler. The issue is an uncontrolled search path, enabling a local attacker to leverage path manipulation. A fix is available in PeaZip 9.6.0; upgrading the affected...

7.8CVSS6.3AI score0.00302EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2023/12/17 3:31 a.m.•45 views

CVE-2023-6891 PeaZip Library dragdropfilesdll.dll uncontrolled search path

A vulnerability has been found in PeaZip 9.4.0 and classified as problematic. Affected by this vulnerability is an unknown functionality in the library dragdropfilesdll.dll of the component Library Handler. The manipulation leads to uncontrolled search path. An attack has to be approached locally...

5.3CVSS7.8AI score0.00302EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/12/17 12:00 a.m.•28 views

PT-2023-32802 · Peazip · Peazip

Name of the Vulnerable Software and Affected Versions: PeaZip versions 9.4.0 Description: A vulnerability has been found in the library dragdropfilesdll.dll of the component Library Handler, leading to uncontrolled search path. The manipulation can be exploited locally. Upgrading to version 9.6.0...

7.8CVSS7.2AI score0.00302EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2023/12/17 12:00 a.m.•21 views

PeaZip Code Issue Vulnerability

PeaZip is a free Zip software and Rar extractor from the individual developer Giorgio Tani. A code issue vulnerability exists in PeaZip version 9.4.0, which stems from an uncontrolled search path issue...

7.8CVSS7.1AI score0.00302EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/17 12:00 a.m.•8 views

CVE-2023-6891: Uncontrolled Search Path Element

A vulnerability has been found in PeaZip 9.4.0 and classified as problematic. Affected by this vulnerability is an unknown functionality in the library dragdropfilesdll.dll of the component Library Handler. The manipulation leads to uncontrolled search path. An attack has to be approached locally...

7.8CVSS5.6AI score0.00302EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2023/04/07 12:00 a.m.•14 views

Mageia: Security Advisory (MGASA-2023-0124)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS5.7AI score0.00311EPSS
SaveExploits1References4
osv_mgasa
osv_mgasa
•added 2023/04/06 9:20 p.m.•9 views

MGASA-2023-0124 Updated peazip packages fix security vulnerability

Denial of service via the End of Archive tag function of the peazip/pea UNPEA feature. CVE-2023-24785...

5.5CVSS6.7AI score0.00311EPSS
SaveExploits1References3
Mageia
Mageia
•added 2023/04/06 9:20 p.m.•49 views

Updated peazip packages fix security vulnerability

Denial of service via the End of Archive tag function of the peazip/pea UNPEA feature. CVE-2023-24785...

5.5CVSS5.8AI score0.00311EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2023/03/15 12:00 a.m.•34 views

openSUSE 15 Security Update : peazip (openSUSE-SU-2023:0071-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2023:0071-1 advisory. - An issue in Giorgio Tani peazip v.9.0.0 allows attackers to cause a denial of service via the End of Archive tag function of the peazip/pea UNPEA...

5.5CVSS5.7AI score0.00311EPSS
SaveExploits1References5
osv_opensuse
osv_opensuse
•added 2023/03/14 3:01 p.m.•7 views

OPENSUSE-SU-2023:0071-1 Security update for peazip

This update for peazip fixes the following issues: peazip was updated to 9.1.0: Major restyle in application's look & feel and themes, and many usability improvements for the file manager, and archiving / extraction screens. The scripting engine was refined, with the ability to adapt the syntax f...

5.5CVSS5.6AI score0.00311EPSS
SaveExploits1References4
OPENSUSE Linux
OPENSUSE Linux
•added 2023/03/14 12:00 a.m.•19 views

Security update for peazip (moderate)

openSUSE Security Update: Security update for peazip Announcement ID: openSUSE-SU-2023:0071-1 Rating: moderate References: 1202690 1208468 Cross-References: CVE-2023-24785 CVSS scores: CVE-2023-24785 NVD : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: openSUSE Backports...

5.5CVSS6.8AI score0.00311EPSS
SaveExploits1References2
SUSE CVE
SUSE CVE
•added 2023/02/21 1:59 a.m.•13 views

SUSE CVE-2023-24785

An issue in Giorgio Tani peazip v.9.0.0 allows attackers to cause a denial of service via the End of Archive tag function of the peazip/pea UNPEA feature...

5.5CVSS6.8AI score0.00311EPSS
SaveExploits1References4
Rows per page
Query Builder