Lucene search
+L

1409 matches found

Tenable Nessus
Tenable Nessus
added 2023/01/10 12:0 a.m.22 views

EulerOS Virtualization 2.9.1 : unzip (EulerOS-SA-2023-1207)

According to the versions of the unzip package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in unzip. The vulnerability occurs due to improper handling of Unicode strings, which can lead to a null pointer...

3.3CVSS6.1AI score0.0057EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2023/01/10 12:0 a.m.24 views

EulerOS Virtualization 2.10.1 : unzip (EulerOS-SA-2023-1157)

According to the versions of the unzip package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in unzip. The vulnerability occurs due to improper handling of Unicode strings, which can lead to a null pointer...

3.3CVSS6.1AI score0.0057EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2023/01/10 12:0 a.m.27 views

EulerOS Virtualization 2.10.0 : unzip (EulerOS-SA-2023-1178)

According to the versions of the unzip package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in unzip. The vulnerability occurs due to improper handling of Unicode strings, which can lead to a null pointer...

3.3CVSS6.1AI score0.0057EPSS
SaveExploits1References2
IBM Security Bulletins
IBM Security Bulletins
added 2023/01/05 7:5 a.m.51 views

Security Bulletin: TADDM affected by vulnerabilities in UnZip.

Summary UnZip.exe is used by IBM Tivoli Application Dependency Discovery Manager and is vulnerable to CVE-2021-4217, CVE-2022-0529, CVE-2022-0530 Publicly disclosed vulnerabilities Vulnerability Details CVEID:CVE-2021-4217 DESCRIPTION: Info-ZIP UnZip could allow a remote attacker to execute...

5.5CVSS6.8AI score0.02421EPSS
SaveExploits3Affected Software1
OSV
OSV
added 2022/12/28 12:30 a.m.58 views

GHSA-RMJ9-Q58G-9QGG go-unzip vulnerable to Path Traversal

Due to improper path santization, archives containing relative file paths can cause files to be written or overwritten outside of the target directory...

9.1CVSS9.1AI score0.01249EPSS
SaveExploits1References6
Github Security Blog
Github Security Blog
added 2022/12/28 12:30 a.m.28 views

go-unzip vulnerable to Path Traversal

Due to improper path santization, archives containing relative file paths can cause files to be written or overwritten outside of the target directory...

9.1CVSS8.7AI score0.01249EPSS
SaveExploits1References6Affected Software1
Vulnrichment
Vulnrichment
added 2022/12/27 9:13 p.m.8 views

CVE-2020-36561 Path traversal in github.com/yi-ge/unzip

Due to improper path sanitization, archives containing relative file paths can cause files to be written or overwritten outside of the target directory...

9.2AI score0.01325EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2022/12/27 9:13 p.m.8 views

CVE-2020-36560 Path traversal in github.com/artdarek/go-unzip

Due to improper path sanitization, archives containing relative file paths can cause files to be written or overwritten outside of the target directory...

9.2AI score0.01249EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2022/12/27 12:0 a.m.5 views

go-unzip 路径遍历漏洞

Package go-unzip is a very simple library from the personal developer Dariusz Prząda. It is used to extract zip archives. A path traversal vulnerability exists in go-unzip, which stems from an incorrect path, where an archive containing relative file paths may cause files to be written or...

9.1CVSS8.1AI score0.01249EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2022/12/27 12:0 a.m.8 views

go-unzip 路径遍历漏洞

Package go-unzip is a very simple library from the personal developer Dariusz Prząda. It is used to extract zip archives. A path traversal vulnerability exists in go-unzip, which stems from an incorrect path, where an archive containing relative file paths may cause files to be written or...

9.1CVSS8.1AI score0.01325EPSS
SaveExploits1References5
OpenVAS
OpenVAS
added 2022/12/22 12:0 a.m.14 views

Huawei EulerOS: Security Advisory for unzip (EulerOS-SA-2022-2860)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

3.3CVSS4.1AI score0.0057EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2022/12/22 12:0 a.m.17 views

Huawei EulerOS: Security Advisory for unzip (EulerOS-SA-2022-2834)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

3.3CVSS4.1AI score0.0057EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2022/12/21 12:0 a.m.31 views

EulerOS 2.0 SP10 : unzip (EulerOS-SA-2022-2834)

According to the versions of the unzip package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in unzip. The vulnerability occurs due to improper handling of Unicode strings, which can lead to a null pointer dereference. Thi...

3.3CVSS6.2AI score0.0057EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2022/12/21 12:0 a.m.26 views

EulerOS 2.0 SP10 : unzip (EulerOS-SA-2022-2860)

According to the versions of the unzip package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in unzip. The vulnerability occurs due to improper handling of Unicode strings, which can lead to a null pointer dereference. Thi...

3.3CVSS6.2AI score0.0057EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2022/12/09 12:0 a.m.28 views

Amazon Linux 2022 : unzip (ALAS2022-2022-221)

The version of unzip installed on the remote host is prior to 6.0-57. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-221 advisory. - A flaw was found in unzip. The vulnerability occurs due to improper handling of Unicode strings, which can lead to a null...

5.5CVSS6.1AI score0.02421EPSS
SaveExploits3References7
OpenVAS
OpenVAS
added 2022/12/09 12:0 a.m.15 views

Huawei EulerOS: Security Advisory for unzip (EulerOS-SA-2022-2809)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

3.3CVSS4.1AI score0.0057EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2022/12/08 12:0 a.m.25 views

EulerOS 2.0 SP8 : unzip (EulerOS-SA-2022-2809)

According to the versions of the unzip package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in unzip. The vulnerability occurs due to improper handling of Unicode strings, which can lead to a null pointer dereference. Thi...

3.3CVSS6.2AI score0.0057EPSS
SaveExploits1References2
Cloud Foundry
Cloud Foundry
added 2022/12/07 12:0 a.m.27 views

USN-5673-1: unzip vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Canonical Ubuntu 18.04 Canonical Ubuntu 22.04 Description It was discovered that unzip did not properly handle unicode strings under certain circumstances. If a user were tricked into opening a specially crafted zip...

5.5CVSS6.7AI score0.02421EPSS
SaveExploits3Affected Software4
Photon
Photon
added 2022/11/26 12:0 a.m.23 views

Low Photon OS Security Update - PHSA-2022-3.0-0493

Updates of 'unzip' packages of Photon OS have been released...

3.3CVSS2.5AI score0.0057EPSS
SaveExploits1
Veracode
Veracode
added 2022/11/18 2:10 a.m.18 views

Path Traversal

The fileutil subpackage in github.com/duke-git/lancet is vulnerable to path traversal. The vulnerability exists in the UnZip function in file.go due to a ZipSlip vulnerability which allows an attacker to create files outside the designated target directory using malicious zip file names...

8.8CVSS8.2AI score0.00793EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder