Arbitrary Code Execution

vim is vulnerable to arbitrary code execution. The vulnerability exists as a security flaw was found in zip.vim, the Vim plug-in that handles ZIP archive browsing. If a user opened a ZIP archive using the zip.vim plug-in, it could result in arbitrary code execution as the user running Vim...

Arbitrary Code Execution

vim is vulnerable to arbitrary code execution. The vulnerability exists as a security flaw was found in tar.vim, the Vim plug-in which handles TAR archive browsing. If a user opened a TAR archive using the tar.vim plug-in, it could result in arbitrary code execution as the user runnin Vim...

Denial Of Service (DoS)

gzip is vulnerable to denial of service. If a victim expanded a malicious archive, it could cause the gzip executable to hang or crash...

Arbitrary Code Execution

gzip is vulnerable to arbitrary code execution. If a victim expanded a malicious archive, it could cause the gzip executable to crash or execute arbitrary code...

Denial Of Service (DoS)

gzip is vulnerable to denial of service DoS. The vulnerability exists in the way gzip expanded archive files. If a victim expanded a specially crafted archive, it could cause the gzip executable to hang or crash...

Updated python-nltk packages fix security vulnerability

Updated python-ntlk package fixes security vulnerability: A vulnerability was found in NLTK Downloader before 3.4.5 is vulnerable to a directory traversal, allowing attackers to write arbitrary files via a ../ in an NLTK package ZIP archive that is mishandled during extraction CVE-2019-14751...

Design/Logic Flaw

The Upload Visualization plugin in the Microstrategy Web 10.4 admin panel allows an administrator to upload a ZIP archive containing files with arbitrary extensions and data. This is also exploitable via SSRF. Note: The ability to upload visualization plugins requires administrator privileges...

EulerOS Virtualization for ARM 64 3.0.6.0 : sqlite (EulerOS-SA-2020-1364)

According to the versions of the sqlite packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - In SQLite 3.27.2, interleaving reads and writes in a single transaction with an fts5 virtual table will lead to a NULL...

[SECURITY] Fedora 30 Update: libarchive-3.3.3-7.fc30

Libarchive is a programming library that can create and read several differ ent streaming archive formats, including most popular tar variants, several cpio formats, and both BSD and GNU ar variants. It can also write shar archives and read ISO9660 CDROM images and ZIP archives...

php: Reflected XSS on PHAR 404 page

An issue was discovered in PHP before 5.6.33, 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1. There is Reflected XSS on the PHAR 404 error page via the URI of a request for a .phar file...

GitLab Denial of Service Vulnerability (CNVD-2020-20425)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A security vulnerability exists in GitLab version 12.9 an...

CVE-2020-10954

GitLab through 12.9 is affected by a potential DoS in repository archive download...

CVE-2020-10954

GitLab through 12.9 is affected by a potential DoS in repository archive download...

UBUNTU-CVE-2020-10954

GitLab through 12.9 is affected by a potential DoS in repository archive download...

Design/Logic Flaw

GitLab through 12.9 is affected by a potential DoS in repository archive download...

CVE-2020-10954

GitLab through 12.9 is affected by a potential DoS in repository archive download...

CVE-2020-10954

Removed by vendor...

CVE-2020-10954

GitLab

CVE-2020-10691

An archive traversal flaw was found in Ansible Engine when running ansible-galaxy collection install. When extracting a collection .tar.gz file, the directory is created without sanitizing the filename. An attacker could take advantage to overwrite any file within the system. Mitigation A possibl...

PT-2020-12446 · Gitlab · Gitlab

Name of the Vulnerable Software and Affected Versions: GitLab versions prior to 12.10 Description: The issue is related to a potential Denial of Service DoS in repository archive download. Recommendations: For versions prior to 12.10, update to version 12.10 or later to resolve the issue...