Lucene search
+L

598 matches found

OSV
OSV
added 2022/12/28 12:30 a.m.49 views

GHSA-32QH-8VG6-9G43 Cloud Foundry Archiver vulnerable to path traversal

Due to improper path santization, archives containing relative file paths can cause files to be written or overwritten outside of the target directory...

9.1CVSS9.1AI score0.01188EPSS
SaveExploits0References5
GitLab Advisory Database
GitLab Advisory Database
added 2022/12/28 12:00 a.m.72 views

Cloud Foundry Archiver vulnerable to path traversal

Due to improper path santization, archives containing relative file paths can cause files to be written or overwritten outside of the target directory...

9.1CVSS4AI score0.01188EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2022/12/27 9:13 p.m.32 views

CVE-2018-25046 Path traversal in code.cloudfoundry.org/archiver

Due to improper path sanitization, archives containing relative file paths can cause files to be written or overwritten outside of the target directory...

9.2AI score0.01188EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2022/12/27 12:00 a.m.14 views

archiver 路径遍历漏洞

archiver is a compression/decompression utility program. A path traversal vulnerability exists in archiver, which stems from an incorrect path, where an archive file containing a relative file path could result in the file being written or overwritten outside of the target directory...

9.1CVSS8.1AI score0.01188EPSS
SaveExploits0References4
Fedora
Fedora
added 2022/12/04 1:58 a.m.50 views

[SECURITY] Fedora 35 Update: qpress-20220819-1.fc35

qpress is a portable file archiver using QuickLZ and designed to utilize fast storage systems to their max. It's often faster than file copy because the destination is smaller than the source...

5.3CVSS5.2AI score0.01336EPSS
SaveExploits1
Fedora
Fedora
added 2022/12/04 1:01 a.m.34 views

[SECURITY] Fedora 36 Update: qpress-20220819-1.fc36

qpress is a portable file archiver using QuickLZ and designed to utilize fast storage systems to their max. It's often faster than file copy because the destination is smaller than the source...

5.3CVSS5.2AI score0.01336EPSS
SaveExploits1
Fedora
Fedora
added 2022/12/04 12:28 a.m.65 views

[SECURITY] Fedora 37 Update: qpress-20220819-1.fc37

qpress is a portable file archiver using QuickLZ and designed to utilize fast storage systems to their max. It's often faster than file copy because the destination is smaller than the source...

5.3CVSS5.2AI score0.01336EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2022/12/04 12:00 a.m.23 views

Fedora: Security Advisory for qpress (FEDORA-2022-e19ca639ef)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

5.3CVSS5.4AI score0.01336EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2022/12/04 12:00 a.m.23 views

Fedora: Security Advisory for qpress (FEDORA-2022-dacf699829)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

5.3CVSS5.4AI score0.01336EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2022/12/04 12:00 a.m.16 views

Fedora: Security Advisory for qpress (FEDORA-2022-0ff8149aad)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

5.3CVSS5.4AI score0.01336EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2022/07/31 12:00 a.m.15 views

Fedora: Security Advisory for golang-github-mholt-archiver (FEDORA-2022-ea8f4e232d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Fedora
Fedora
added 2022/07/30 1:57 a.m.19 views

[SECURITY] Fedora 36 Update: golang-github-mholt-archiver-3.5.1-4.fc36

Package Archiver makes it trivially easy to make and extract common archive formats such as zip and tarball and its compressed variants. Simply name the input and output files. The arc command runs the same on all platforms and has no external dependencies not even libc. It is powered by the Go...

7.3AI score
SaveExploits0
OpenVAS
OpenVAS
added 2022/07/18 12:00 a.m.18 views

Fedora: Security Advisory for golang-github-mholt-archiver (FEDORA-2022-3969b64d4b)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.3CVSS8.9AI score0.0995EPSS
SaveExploits4References2
Fedora
Fedora
added 2022/07/17 1:15 a.m.30 views

[SECURITY] Fedora 35 Update: golang-github-mholt-archiver-3.5.1-3.fc35

Package Archiver makes it trivially easy to make and extract common archive formats such as zip and tarball and its compressed variants. Simply name the input and output files. The arc command runs the same on all platforms and has no external dependencies not even libc. It is powered by the Go...

9.3CVSS8.1AI score0.0995EPSS
SaveExploits4
NVD
NVD
added 2022/07/07 9:15 p.m.44 views

CVE-2021-29281

File upload vulnerability in GFI Mail Archiver versions up to and including 15.1 via insecure implementation of Telerik Web UI plugin which is affected by CVE-2014-2217, and CVE-2017-11317...

9.8CVSS0.02493EPSS
SaveExploits1References5
OSV
OSV
added 2022/07/07 9:15 p.m.9 views

CVE-2021-29281

File upload vulnerability in GFI Mail Archiver versions up to and including 15.1 via insecure implementation of Telerik Web UI plugin which is affected by CVE-2014-2217, and CVE-2017-11317...

9.8CVSS5.7AI score0.02493EPSS
SaveExploits1References5
Prion
Prion
added 2022/07/07 9:15 p.m.55 views

Unrestricted file upload

File upload vulnerability in GFI Mail Archiver versions up to and including 15.1 via insecure implementation of Telerik Web UI plugin which is affected by CVE-2014-2217, and CVE-2017-11317...

7.5CVSS9.3AI score0.84175EPSS
SaveExploits10References5Affected Software1
Cvelist
Cvelist
added 2022/07/07 7:38 p.m.45 views

CVE-2021-29281

File upload vulnerability in GFI Mail Archiver versions up to and including 15.1 via insecure implementation of Telerik Web UI plugin which is affected by CVE-2014-2217, and CVE-2017-11317...

9.6AI score0.02493EPSS
SaveExploits1References5
CVE
CVE
added 2022/07/07 7:38 p.m.176 views

CVE-2021-29281

CVE-2021-29281 is a file-upload vulnerability in GFI Mail Archiver prior to or up to v15.1 caused by insecure use of the Telerik Web UI plugin, tying to CVE-2014-2217 and CVE-2017-11317. The vulnerability enables arbitrary file uploads/execution via the Telerik UI for ASP.NET AJAX file upload iss...

9.8CVSS9.4AI score0.02493EPSS
SaveExploits1References5Affected Software1
CNNVD
CNNVD
added 2022/07/07 12:00 a.m.17 views

GFI Mail Archiver 代码问题漏洞

GFI Mail Archiver is used by GFI Malta to easily protect, store and retrieve electronic communications. A security vulnerability exists in GFI Mail Archiver version 15.1, which stems from the insecure use of the Telerik Web UI plugin affected by CVE-2014-2217 and CVE-2017-11317, which can be...

9.8CVSS8.4AI score0.02493EPSS
SaveExploits1References6
Rows per page
Query Builder