Lucene search
K

11 matches found

Tenable Nessus
Tenable Nessus
added 2026/03/27 12:0 a.m.1 views

Linux Distros Unpatched Vulnerability : CVE-2025-70952

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pf4j before 20c2f80 has a path traversal vulnerability in the extract function of Unzip.java, where improper handling of zip entry names can allow directory...

7.5CVSS5.8AI score0.0046EPSS
Exploits1References3
OSV
OSV
added 2026/03/25 9:30 p.m.1 views

GHSA-5458-7HH9-V7P4 pf4j is vulnerable to Path Traversal or Zip Slip attack through improper handling of zip entry names

pf4j before 20c2f80 has a path traversal vulnerability in the extract function of Unzip.java, where improper handling of zip entry names can allow directory traversal or Zip Slip attacks, due to a lack of proper path normalization and validation...

8.7CVSS5.9AI score0.0046EPSS
Exploits1References6
Github Security Blog
Github Security Blog
added 2026/03/25 9:30 p.m.5 views

pf4j is vulnerable to Path Traversal or Zip Slip attack through improper handling of zip entry names

pf4j before 20c2f80 has a path traversal vulnerability in the extract function of Unzip.java, where improper handling of zip entry names can allow directory traversal or Zip Slip attacks, due to a lack of proper path normalization and validation...

7.5CVSS5.9AI score0.0046EPSS
Exploits1References6Affected Software1
OSV
OSV
added 2026/03/25 7:16 p.m.0 views

UBUNTU-CVE-2025-70952

pf4j before 20c2f80 has a path traversal vulnerability in the extract function of Unzip.java, where improper handling of zip entry names can allow directory traversal or Zip Slip attacks, due to a lack of proper path normalization and validation...

7.5CVSS5.8AI score0.0046EPSS
Exploits1References6
UbuntuCve
UbuntuCve
added 2026/03/25 7:16 p.m.1 views

CVE-2025-70952

pf4j before 20c2f80 has a path traversal vulnerability in the extract function of Unzip.java, where improper handling of zip entry names can allow directory traversal or Zip Slip attacks, due to a lack of proper path normalization and validation...

7.5CVSS5.9AI score0.0046EPSS
Exploits1References5
CNNVD
CNNVD
added 2026/03/25 12:0 a.m.3 views

Plexus-Utils 安全漏洞

Plexus-Utils is a general-purpose utility program developed by Plexus. This program is primarily used to simplify the handling of strings, files, command lines, and XML data. Versions of Plexus-Utils prior to 20c2f80 contained security vulnerabilities. These vulnerabilities stemmed from the extra...

7.5CVSS5.8AI score0.0046EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2026/03/25 12:0 a.m.1 views

CVE-2025-70952

pf4j before 20c2f80 has a path traversal vulnerability in the extract function of Unzip.java, where improper handling of zip entry names can allow directory traversal or Zip Slip attacks, due to a lack of proper path normalization and validation...

5.9AI score0.0046EPSS
Exploits1References4
Veracode
Veracode
added 2023/10/09 12:49 p.m.17 views

Integer Overflow

libxrdp.so,is vulnerable to Path Traversal. The vulnerability exists in the extract function in Unzip.java due to a lack of path validation which allows an attacker to obtain sensitive information and execute arbitrary code via the expandIfZip parameter...

7.8CVSS7.2AI score0.00099EPSS
Exploits0References6
Veracode
Veracode
added 2023/08/31 5:14 a.m.13 views

Path Traversal

PF4J is vulnerable to Path Traversal. The vulnerability exists in the extract function in Unzip.java due to a lack of path validation which allows an attacker to obtain sensitive information and execute arbitrary code via the expandIfZip parameter...

7.5CVSS7.3AI score0.01089EPSS
Exploits0References4Affected Software1
Veracode
Veracode
added 2023/08/31 5:5 a.m.17 views

Path Traversal

PF4J is vulnerable to Path Traversal. The vulnerability exists in the extract function in Unzip.java due to a lack of path validation which allows an attacker to obtain sensitive information and execute arbitrary code via the loadpluginPath parameter...

7.5CVSS7.3AI score0.00685EPSS
Exploits1References4Affected Software1
Veracode
Veracode
added 2023/08/31 4:48 a.m.17 views

Path Traversal

PF4J is vulnerable to Path Traversal. The vulnerability exists in the extract function in Unzip.java due to a lack of path validation which allows an attacker to obtain sensitive information and execute arbitrary code via the zippluginPath parameter...

7.5CVSS7.3AI score0.00807EPSS
Exploits1References5Affected Software1
Rows per page
Query Builder