OpenJDK: jar directory traversal issues (Tools, 8064601)

A directory traversal flaw was found in the way the jar tool extracted JAR archive files. A specially crafted JAR archive could cause jar to overwrite arbitrary files writable by the user running jar when the archive was extracted...

SQL Injection Vulnerability in Safi OA System

Safe OA system is an office system developed by ASP.NET, and customers involved in medicine, finance, schools, administration and many other units. There is a SQL injection vulnerability in Safi OA system, because the ID parameter of the /ArchiveSend/GetArchiveFlowInfo.aspx page fails to filter t...

Debian DSA-3217-1 : dpkg - security update

Jann Horn discovered that the source package integrity verification in dpkg-source can be bypassed via a specially crafted Debian source control file .dsc. Note that this flaw only affects extraction of local Debian source packages via dpkg-source but not the installation of packages from the...

PHP 5.4.x < 5.4.39 / 5.5.x < 5.5.23 / 5.6.x < 5.6.7 Multiple Vulnerabilities

Binary data 8681.prm...

Open-source ARJ archiver buffer overflow vulnerability

Open-source ARJ archiver is an ARJ archive processing tool. A buffer overflow vulnerability exists in Open-source ARJ archiver that allows an attacker to trick an application into parsing a specially crafted ARJ archive, which could crash the application or execute arbitrary code...

DEBIAN-CVE-2015-2782

Buffer overflow in Open-source ARJ archiver 3.10.22 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted ARJ archive...

CVE-2015-0557

Open-source ARJ archiver 3.10.22 does not properly remove leading slashes from paths, which allows remote attackers to conduct absolute path traversal attacks and write to arbitrary files via multiple leading slashes in a path in an ARJ archive...

DEBIAN-CVE-2015-0556

Open-source ARJ archiver 3.10.22 allows remote attackers to conduct directory traversal attacks via a symlink attack in an ARJ archive...

Path traversal

Open-source ARJ archiver 3.10.22 does not properly remove leading slashes from paths, which allows remote attackers to conduct absolute path traversal attacks and write to arbitrary files via multiple leading slashes in a path in an ARJ archive...

Buffer overflow

Buffer overflow in Open-source ARJ archiver 3.10.22 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted ARJ archive...

CVE-2015-2782

Buffer overflow in Open-source ARJ archiver 3.10.22 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted ARJ archive...

CVE-2015-2782

Buffer overflow in Open-source ARJ archiver 3.10.22 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted ARJ archive...

New Coalition Launches Fight Against Patriot Act Section 215

A broad group of civil-rights, technology and political groups from across the spectrum has developed a new initiative to advocate for the repeal of Section 215 of the USA PATRIOT Act, the part that provides the authority for the bulk collection of phone metadata and other information. The new...

Debian DSA-3213-1 : arj - security update

Multiple vulnerabilities have been discovered in arj, an open source version of the arj archiver. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2015-0556 Jakub Wilk discovered that arj follows symlinks created during unpacking of an arj archive. A remo...

CVE-2015-1890

/usr/lpp/mmfs/bin/gpfs.snap in IBM General Parallel File System GPFS 4.1 before 4.1.0.7 produces an archive potentially containing cleartext keys, and lacks a warning about reviewing this archive to detect included keys, which might allow remote attackers to obtain sensitive information by...

PT-2015-5893 · Arj +1 · Open-Source Arj Archiver +1

Name of the Vulnerable Software and Affected Versions: Open-source ARJ archiver version 3.10.22 Description: A buffer overflow issue in the Open-source ARJ archiver allows remote attackers to cause a denial of service, potentially leading to a crash, or possibly execute arbitrary code. This can b...

CVE-2015-2331

Integer overflow in the zipcdirnew function in zipdirent.c in libzip 0.11.2 and earlier, as used in the ZIP extension in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 and other products, allows remote attackers to cause a denial of service application crash or possibly execute...

Integer overflow

Integer overflow in the zipcdirnew function in zipdirent.c in libzip 0.11.2 and earlier, as used in the ZIP extension in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 and other products, allows remote attackers to cause a denial of service application crash or possibly execute...

Design/Logic Flaw

Use-after-free vulnerability in the pharrenamearchive function in pharobject.c in PHP before 5.5.22 and 5.6.x before 5.6.6 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an attempted renaming of a Phar archive to the name of...

CVE-2015-2301

Use-after-free vulnerability in the pharrenamearchive function in pharobject.c in PHP before 5.5.22 and 5.6.x before 5.6.6 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an attempted renaming of a Phar archive to the name of...