1406 matches found
CVE-2016-9844 affecting package unzip for versions less than 6.0-19
CVE-2016-9844 affecting package unzip for versions less than 6.0-19. A patched version of the package is available...
CVE-2014-8141 affecting package unzip for versions less than 6.0-19
CVE-2014-8141 affecting package unzip for versions less than 6.0-19. A patched version of the package is available...
CVE-2018-1000035 affecting package unzip for versions less than 6.0-19
CVE-2018-1000035 affecting package unzip for versions less than 6.0-19. A patched version of the package is available...
CVE-2014-9636 affecting package unzip for versions less than 6.0-19
CVE-2014-9636 affecting package unzip for versions less than 6.0-19. A patched version of the package is available...
CVE-2014-8140 affecting package unzip for versions less than 6.0-19
CVE-2014-8140 affecting package unzip for versions less than 6.0-19. A patched version of the package is available...
CVE-2008-0888 affecting package unzip for versions less than 6.0-19
CVE-2008-0888 affecting package unzip for versions less than 6.0-19. A patched version of the package is available...
CVE-2018-18384 affecting package unzip for versions less than 6.0-19
CVE-2018-18384 affecting package unzip for versions less than 6.0-19. A patched version of the package is available...
CVE-2021-32961
A getfile function in MDT AutoSave versions prior to v6.02.06 enables a user to supply an optional parameter, resulting in the processing of a request in a special manner. This can result in the execution of an unzip command and place a malicious .exe file in one of the locations the function loo...
OESA-2022-1548 unzip security update
A utility for unpacking zip files. Security Fixes: A flaw was found in Unzip. The vulnerability occurs during the conversion of a wide string to a local string that leads to a heap of out-of-bound write. This flaw allows an attacker to input a specially crafted zip file, leading to a crash or cod...
Security Bulletin: Vulnerabilities in unzip affect IBM Security Network Intrusion Prevention System (CVE-2014-8139, CVE-2014-8140, CVE-2014-8141, and CVE-2014-9636 )
Summary The unzip utility is used to list, test, or extract files from a zip archive. Security vulnerabilities have been discovered in unzip used with IBM Security Network Intrusion Prevention System. Vulnerability Details CVE ID: CVE-2014-8139 DESCRIPTION: Info-ZIP UnZip is vulnerable to a...
Path traversal in MCMS
MCMS v5.2.4 was discovered to contain an arbitrary file deletion vulnerability via the component /template/unzip.do...
CVE-2021-46037
MCMS v5.2.4 was discovered to contain an arbitrary file deletion vulnerability via the component /template/unzip.do...
CVE-2021-46037
MCMS v5.2.4 was discovered to contain an arbitrary file deletion vulnerability via the component /template/unzip.do...
CVE-2021-46037
MCMS v5.2.4 was discovered to contain an arbitrary file deletion vulnerability via the component /template/unzip.do...
GHSA-PQCF-V8V5-JMCG Zip slip in Microweber
A directory traversal issue in the Utils/Unzip module in Microweber through 1.1.20 allows an authenticated attacker to gain remote code execution via the backup restore feature. To exploit the vulnerability, an attacker must have the credentials of an administrative user, upload a maliciously...
ALPINE-CVE-2022-0530
A flaw was found in Unzip. The vulnerability occurs during the conversion of a wide string to a local string that leads to a heap of out-of-bound write. This flaw allows an attacker to input a specially crafted zip file, leading to a crash or code execution...
CVE-2022-0529
A flaw was found in Unzip. The vulnerability occurs during the conversion of a wide string to a local string that leads to a heap of out-of-bound write. This flaw allows an attacker to input a specially crafted zip file, leading to a crash or code execution...
CVE-2022-0529
A flaw was found in Unzip. The vulnerability occurs during the conversion of a wide string to a local string that leads to a heap of out-of-bound write. This flaw allows an attacker to input a specially crafted zip file, leading to a crash or code execution...
CVE-2022-0530
A flaw was found in Unzip. The vulnerability occurs during the conversion of a wide string to a local string that leads to a heap of out-of-bound write. This flaw allows an attacker to input a specially crafted zip file, leading to a crash or code execution...
CVE-2022-0530
A flaw was found in Unzip. The vulnerability occurs during the conversion of a wide string to a local string that leads to a heap of out-of-bound write. This flaw allows an attacker to input a specially crafted zip file, leading to a crash or code execution...