3061 matches found
CVE-2021-35958
TensorFlow through 2.5.0 allows attackers to overwrite arbitrary files via a crafted archive when tf.keras.utils.getfile is used with extract=True. NOTE: the vendor's position is that tf.keras.utils.getfile is not intended for untrusted archives...
CVE-2005-2524
Safari after 2.0 in Apple Mac OS X 10.3.9 allows remote attackers to bypass domain restrictions via crafted web archives that cause Safari to render them as if they came from a different site...
WordPress Simple Nav Archives plugin <= 2.1.3 - Settings Update via CSRF vulnerability
Settings Update via CSRF vulnerability discovered by Daniel Ruf in WordPress Plugin Simple Nav Archives versions = 2.1.3...
CVE-2024-8398
The Simple Nav Archives WordPress plugin through 2.1.3 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...
CVE-2024-8398
The Simple Nav Archives WordPress plugin through 2.1.3 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...
CVE-2024-8398 Simple Nav Archives <= 2.1.3 - Settings Update via CSRF
The Simple Nav Archives WordPress plugin through 2.1.3 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...
CVE-2024-8398
Summary: CVE-2024-8398 affects the WordPress plugin Simple Nav Archives, versions
WordPress plugin Simple Nav Archives 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A security...
PT-2025-21520 · WordPress · Simple Nav Archives
Name of the Vulnerable Software and Affected Versions: Simple Nav Archives versions 2.1.3 and earlier Description: The issue concerns the lack of a CSRF check when updating settings in the Simple Nav Archives WordPress plugin. This could allow attackers to make a logged-in admin change the settin...
ROS-2-542
2.542 Apache Ant utility vulnerability CVE-2021-36374, CVE-2021-36373 1. Vulnerability Description: CVE-2021-36374 A vulnerability in the Apache Ant utility, is related to the application improperly controlling internal resource consumption when processing ZIP archives. Exploitation of the...
ROS-2-678
2.678 Apache Ant utility vulnerability CVE-2021-36374, CVE-2021-36373 1. Vulnerability Description: CVE-2021-36374 A vulnerability in the Apache Ant utility, is related to the application improperly controlling internal resource consumption when processing ZIP archives. Exploitation of the...
ROS-2-631
2.631 Apache Ant utility vulnerability CVE-2021-36374, CVE-2021-36373 1. Vulnerability Description: CVE-2021-36374 A vulnerability in the Apache Ant utility, is related to the application improperly controlling internal resource consumption when processing ZIP archives. Exploitation of the...
The vulnerability of the Mark-of-the-Web protection mechanism in the 7-Zip archive viewer allows a hacker to execute arbitrary code.
The vulnerability of the Mark-of-the-Web protection mechanism in the 7-Zip archive extractor is related to a breach of the data protection mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary code during the decompression of the archive by the user, where the archive...
ROS-20250430-06
A vulnerability in the vim text editor function is related to the execution of shell commands via specially crafted tar archives. created tar archives. Exploitation of the vulnerability could allow an attacker to execute arbitrary commands A vulnerability in the vim text editor function is relate...
Missing Authorization
Overview Affected versions of this package are vulnerable to Missing Authorization through the archives API endpoint. Site backups can be initiated and subsequently downloaded without any authentication. Since these archives are generated with easily guessable filenames, an unauthenticated attack...
CVE-2025-32985
NETSCOUT nGeniusONE before 6.4.0 b2350 has Hardcoded Credentials that can be obtained from JAR files...
Allocation of Resources Without Limits or Throttling
Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling due to improper handling of large archives. By creating a malicious archive with very large amounts of padding an attacker can cause the application to consume excessive memory...
The vulnerability of the NCompress::NRar3::CDecoder::Code method in p7zip and 7-Zip archivers allows a hacker to trigger a service failure or execute arbitrary code.
The vulnerability of the NCompress::NRar3::CDecoder::Code method in p7zip and 7-Zip archivers is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure or execute arbitrary code through the...