415 matches found
CVE-2026-78254
The ftp and scp tasks of Apache Ant can download files from a remote s...
UBUNTU-CVE-2026-78254
The ftp and scp tasks of Apache Ant can download files from a remote s...
CVE-2026-78254
A flaw was found in Apache Ant. The ftp and scp tasks, used for downloading files, are vulnerable to a path traversal issue. A malicious remote server can exploit this by providing specially crafted relative paths, allowing it to write files outside the intended download directory. This could lea...
DEBIAN-CVE-2026-78254
The ftp and scp tasks of Apache Ant can download files from a remote server. A malicious server can provide relative paths that allow it to write outside of the dedicated target directory for the download, making it possible to overwrite files of the attacker's choice using the permissions of the...
AZL-99972 CVE-2026-78254 affecting package ant 1.10.14-1
The ftp and scp tasks of Apache Ant can download files from a remote server. A malicious server can provide relative paths that allow it to write outside of the dedicated target directory for the download, making it possible to overwrite files of the attacker's choice using the permissions of the...
CVE-2026-78254
The ftp and scp tasks of Apache Ant can download files from a remote server. A malicious server can provide relative paths that allow it to write outside of the dedicated target directory for the download, making it possible to overwrite files of the attacker's choice using the permissions of the...
CVE-2026-78254
The ftp and scp tasks of Apache Ant can download files from a remote server. A malicious server can provide relative paths that allow it to write outside of the dedicated target directory for the download, making it possible to overwrite files of the attacker's choice using the permissions of the...
CVE-2026-78254
A path traversal vulnerability in the ftp and scp tasks of Apache Ant (versions prior to 1.10.18 ) allows a malicious server (or a man-in-the-middle) to supply relative paths that cause downloaded files to be written outside the dedicated target directory . This permits overwriting attacker-chose...
Linux Distros Unpatched Vulnerability : CVE-2026-78254
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ftp and scp tasks of Apache Ant can download files from a remote server. A malicious server can provide relative paths that allow it to write outside of the...
Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: ant (UTSA-2026-016647)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016647 advisory. As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access them...
Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: ant (UTSA-2026-016617)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016617 advisory. When reading a specially crafted TAR archive an Apache Ant build can be made to allocate large amounts of memory that finally leads to an out of memory error, even f...
Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: ant (UTSA-2026-016612)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016612 advisory. When reading a specially crafted ZIP archive, or a derived formats, an Apache Ant build can be made to allocate large amounts of memory that leads to an out of memor...
Security Bulletin: IBM webMethods BPM is vulnerable to a denial of service due to ant
Summary Ant is used by IBM webMethods BPM for internal build and deployment operations. Vulnerability Details CVEID:CVE-2012-2098 DESCRIPTION: Algorithmic complexity vulnerability in the sorting algorithms in bzip2 compressing stream BZip2CompressorOutputStream in Apache Commons Compress before...
EUVD-2021-1834
Malware in sbrugna...
EUVD-2021-1582
Malware in sbrugna...
EUVD-2020-0743
Malware in sbrugna...
EUVD-2021-0549
Malware in sbrugna...
Security Bulletin: Vulnerabilities in Apache Ant and Apache Derby affect IBM Operations Analytics - Log Analysis (CVE-2019-11358, CVE-2020-23064, CVE-2020-11023, CVE-2020-11022)
Summary Cross-site scriptingXSS vulnerabilities in Apache Ant and Apache Derby affect IBM Operations Analytics - Log Analysis. It allows remote attackers to execute a script in a victim's Web browser. Vulnerability Details CVEID:CVE-2019-11358 DESCRIPTION: jQuery before 3.4.0, as used in Drupal,...
Linux Distros Unpatched Vulnerability : CVE-2020-11979
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access them...