450 matches found
UBUNTU-CVE-2026-78254
The ftp and scp tasks of Apache Ant can download files from a remote server. A malicious server can provide relative paths that allow it to write outside of the dedicated target directory for the download, making it possible to overwrite files of the attacker's choice using the permissions of the...
CVE-2026-78254 Apache Ant: Path traversal in ftp and scp tasks allows arbitrary file write
The ftp and scp tasks of Apache Ant can download files from a remote server. A malicious server can provide relative paths that allow it to write outside of the dedicated target directory for the download, making it possible to overwrite files of the attacker's choice using the permissions of the...
CVE-2026-78254 Apache Ant: Path traversal in ftp and scp tasks allows arbitrary file write
The ftp and scp tasks of Apache Ant can download files from a remote server. A malicious server can provide relative paths that allow it to write outside of the dedicated target directory for the download, making it possible to overwrite files of the attacker's choice using the permissions of the...
EUVD-2026-72281
The ftp and scp tasks of Apache Ant can download files from a remote server. A malicious server can provide relative paths that allow it to write outside of the dedicated target directory for the download, making it possible to overwrite files of the attacker's choice using the permissions of the...
CVE-2026-78254
The ftp and scp tasks of Apache Ant can download files from a remote server. A malicious server can provide relative paths that allow it to write outside of the dedicated target directory for the download, making it possible to overwrite files of the attacker's choice using the permissions of the...
CVE-2026-78254
Apache Ant versions prior to 1.10.18 are vulnerable to a path traversal flaw in the ftp and scp tasks. A malicious server, or an attacker performing a machine-in-the-middle attack, can provide relative paths that allow the application to write files outside the designated target directory. This e...
CVE-2026-78254
The ftp and scp tasks of Apache Ant can download files from a remote server. A malicious server can provide relative paths that allow it to write outside of the dedicated target directory for the download, making it possible to overwrite files of the attacker's choice using the permissions of the...
CVE-2026-78254 Apache Ant: Path traversal in ftp and scp tasks allows arbitrary file write
The ftp and scp tasks of Apache Ant can download files from a remote server. A malicious server can provide relative paths that allow it to write outside of the dedicated target directory for the download, making it possible to overwrite files of the attacker's choice using the permissions of the...
PT-2026-86641
Name of the Vulnerable Software and Affected Versions Apache Ant versions prior to 1.10.18 Description The ftp and scp tasks allow downloading files from remote servers. A malicious server or a machine-in-the-middle attacker can provide relative paths that enable writing files outside the...
CVE-2026-78254: Relative Path Traversal
The ftp and scp tasks of Apache Ant can download files from a remote server. A malicious server can provide relative paths that allow it to write outside of the dedicated target directory for the download, making it possible to overwrite files of the attacker's choice using the permissions of the...
CVE-2026-78254: Relative Path Traversal
The ftp and scp tasks of Apache Ant can download files from a remote server. A malicious server can provide relative paths that allow it to write outside of the dedicated target directory for the download, making it possible to overwrite files of the attacker's choice using the permissions of the...
Linux Distros Unpatched Vulnerability : CVE-2026-78254
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ftp and scp tasks of Apache Ant can download files from a remote server. A malicious server can provide relative paths that allow it to write outside of the...
[SECURITY] Fedora 44 Update: apache-ivy-2.6.0-2.fc44
Apache Ivy is a tool for managing recording, tracking, resolving and reporting project dependencies. It is designed as process agnostic and is not tied to any methodology or structure. while available as a standalone tool, Apache Ivy works particularly well with Apache Ant providing a number of...
Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: ant (UTSA-2026-016647)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016647 advisory. As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access them...
Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: ant (UTSA-2026-016617)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016617 advisory. When reading a specially crafted TAR archive an Apache Ant build can be made to allocate large amounts of memory that finally leads to an out of memory error, even f...
Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: ant (UTSA-2026-016612)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016612 advisory. When reading a specially crafted ZIP archive, or a derived formats, an Apache Ant build can be made to allocate large amounts of memory that leads to an out of memor...
Security Bulletin: IBM webMethods BPM is vulnerable to a denial of service due to ant
Summary Ant is used by IBM webMethods BPM for internal build and deployment operations. Vulnerability Details CVEID:CVE-2012-2098 DESCRIPTION: Algorithmic complexity vulnerability in the sorting algorithms in bzip2 compressing stream BZip2CompressorOutputStream in Apache Commons Compress before...
EUVD-2021-1834
Malware in sbrugna...