Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

1003 matches found

AlpineLinux
AlpineLinux•added 2024/02/05 3:15 p.m.•99 views

CVE-2023-52138

Engrampa is an archive manager for the MATE environment. Engrampa is found to be vulnerable to a Path Traversal vulnerability that can be leveraged to achieve full Remote Command Execution RCE on the target. While handling CPIO archives, the Engrampa Archive manager follows symlink, cpio by defau...

7.2AI score0.01652EPSS
SaveExploits1
NVD
NVD•added 2024/02/05 3:15 p.m.•32 views

CVE-2023-7216

A path traversal vulnerability was found in the CPIO utility. This issue could allow a remote unauthenticated attacker to trick a user into opening a specially crafted archive. During the extraction process, the archiver could follow symlinks outside of the intended directory, which allows files ...

5.3CVSS5.3AI score0.00899EPSS
SaveExploits1References2
NVD
NVD•added 2024/02/05 3:15 p.m.•15 views

CVE-2023-52138

Engrampa is an archive manager for the MATE environment. Engrampa is found to be vulnerable to a Path Traversal vulnerability that can be leveraged to achieve full Remote Command Execution RCE on the target. While handling CPIO archives, the Engrampa Archive manager follows symlink, cpio by defau...

9.6CVSS9AI score0.01652EPSS
SaveExploits1References4
OSV
OSV•added 2024/02/05 3:15 p.m.•11 views

CVE-2023-7216

A path traversal vulnerability was found in the CPIO utility. This issue could allow a remote unauthenticated attacker to trick a user into opening a specially crafted archive. During the extraction process, the archiver could follow symlinks outside of the intended directory, which allows files ...

5.3CVSS5.8AI score0.00899EPSS
SaveExploits1References2
OSV
OSV•added 2024/02/05 3:15 p.m.•5 views

DEBIAN-CVE-2023-52138

Engrampa is an archive manager for the MATE environment. Engrampa is found to be vulnerable to a Path Traversal vulnerability that can be leveraged to achieve full Remote Command Execution RCE on the target. While handling CPIO archives, the Engrampa Archive manager follows symlink, cpio by defau...

9.6CVSS8.6AI score0.01652EPSS
SaveExploits1References1
Prion
Prion•added 2024/02/05 3:15 p.m.•23 views

Path traversal

Engrampa is an archive manager for the MATE environment. Engrampa is found to be vulnerable to a Path Traversal vulnerability that can be leveraged to achieve full Remote Command Execution RCE on the target. While handling CPIO archives, the Engrampa Archive manager follows symlink, cpio by defau...

6.8CVSS7.3AI score0.01652EPSS
SaveExploits1References4Affected Software1
OSV
OSV•added 2024/02/05 3:15 p.m.•22 views

UBUNTU-CVE-2023-7216

A path traversal vulnerability was found in the CPIO utility. This issue could allow a remote unauthenticated attacker to trick a user into opening a specially crafted archive. During the extraction process, the archiver could follow symlinks outside of the intended directory, which allows files ...

5.3CVSS6.1AI score0.00899EPSS
SaveExploits1References4
Prion
Prion•added 2024/02/05 3:15 p.m.•19 views

Path traversal

A path traversal vulnerability was found in the CPIO utility. This issue could allow a remote unauthenticated attacker to trick a user into opening a specially crafted archive. During the extraction process, the archiver could follow symlinks outside of the intended directory, this allows writing...

4.4CVSS6.1AI score0.00899EPSS
SaveExploits1References2Affected Software1
UbuntuCve
UbuntuCve•added 2024/02/05 3:15 p.m.•412 views

CVE-2023-7216

A path traversal vulnerability was found in the CPIO utility. This issue could allow a remote unauthenticated attacker to trick a user into opening a specially crafted archive. During the extraction process, the archiver could follow symlinks outside of the intended directory, which allows files ...

5.3CVSS6.2AI score0.00899EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve•added 2024/02/05 3:15 p.m.•60 views

CVE-2023-52138

Engrampa is an archive manager for the MATE environment. Engrampa is found to be vulnerable to a Path Traversal vulnerability that can be leveraged to achieve full Remote Command Execution RCE on the target. While handling CPIO archives, the Engrampa Archive manager follows symlink, cpio by defau...

9.6CVSS7.2AI score0.01652EPSS
SaveExploits1References4
OSV
OSV•added 2024/02/05 3:15 p.m.•27 views

UBUNTU-CVE-2023-52138

Engrampa is an archive manager for the MATE environment. Engrampa is found to be vulnerable to a Path Traversal vulnerability that can be leveraged to achieve full Remote Command Execution RCE on the target. While handling CPIO archives, the Engrampa Archive manager follows symlink, cpio by defau...

9.6CVSS6AI score0.01652EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment•added 2024/02/05 3:12 p.m.•9 views

CVE-2023-7216 Cpio: extraction allows symlinks which enables remote command execution

A path traversal vulnerability was found in the CPIO utility. This issue could allow a remote unauthenticated attacker to trick a user into opening a specially crafted archive. During the extraction process, the archiver could follow symlinks outside of the intended directory, which allows files ...

5.3CVSS7.3AI score0.00899EPSS
SaveExploits1References2
Cvelist
Cvelist•added 2024/02/05 3:12 p.m.•150 views

CVE-2023-7216 Cpio: extraction allows symlinks which enables remote command execution

A path traversal vulnerability was found in the CPIO utility. This issue could allow a remote unauthenticated attacker to trick a user into opening a specially crafted archive. During the extraction process, the archiver could follow symlinks outside of the intended directory, which allows files ...

5.3CVSS5.6AI score0.00899EPSS
SaveExploits1References2
CVE
CVE•added 2024/02/05 3:12 p.m.•345 views

CVE-2023-7216

CVE-2023-7216 describes a path-traversal vulnerability in the CPIO utility where, during extraction of a crafted archive, a remote, unauthenticated attacker could cause the archiver to follow symlinks outside the target directory, enabling files to be written in arbitrary locations. Multiple sour...

5.3CVSS5.6AI score0.00899EPSS
SaveExploits1References2Affected Software1
Debian CVE
Debian CVE•added 2024/02/05 3:12 p.m.•539 views

CVE-2023-7216

Removed by vendor...

5.3CVSS5.4AI score0.00899EPSS
SaveExploits1
RedhatCVE
RedhatCVE•added 2024/02/05 3:11 p.m.•37 views

CVE-2023-7216

A path traversal vulnerability was found in the CPIO utility. This issue could allow a remote unauthenticated attacker to trick a user into opening a specially crafted archive. During the extraction process, the archiver could follow symlinks outside of the intended directory, which allows files ...

5.3CVSS5.7AI score0.00899EPSS
SaveExploits1References3
Cvelist
Cvelist•added 2024/02/05 2:51 p.m.•27 views

CVE-2023-52138 Path traversal via crafted cpio archives in Engrampa archivers

Engrampa is an archive manager for the MATE environment. Engrampa is found to be vulnerable to a Path Traversal vulnerability that can be leveraged to achieve full Remote Command Execution RCE on the target. While handling CPIO archives, the Engrampa Archive manager follows symlink, cpio by defau...

8.2CVSS9.6AI score0.01652EPSS
SaveExploits1References4
Debian CVE
Debian CVE•added 2024/02/05 2:51 p.m.•35 views

CVE-2023-52138

Engrampa is an archive manager for the MATE environment. Engrampa is found to be vulnerable to a Path Traversal vulnerability that can be leveraged to achieve full Remote Command Execution RCE on the target. While handling CPIO archives, the Engrampa Archive manager follows symlink, cpio by defau...

9.6CVSS9.5AI score0.01652EPSS
SaveExploits1
Vulnrichment
Vulnrichment•added 2024/02/05 2:51 p.m.•2 views

CVE-2023-52138 Path traversal via crafted cpio archives in Engrampa archivers

Engrampa is an archive manager for the MATE environment. Engrampa is found to be vulnerable to a Path Traversal vulnerability that can be leveraged to achieve full Remote Command Execution RCE on the target. While handling CPIO archives, the Engrampa Archive manager follows symlink, cpio by defau...

8.2CVSS8.9AI score0.01652EPSS
SaveExploits1References4
OSV
OSV•added 2024/02/05 2:51 p.m.•21 views

CVE-2023-52138 Path traversal via crafted cpio archives in Engrampa archivers

Engrampa is an archive manager for the MATE environment. Engrampa is found to be vulnerable to a Path Traversal vulnerability that can be leveraged to achieve full Remote Command Execution RCE on the target. While handling CPIO archives, the Engrampa Archive manager follows symlink, cpio by defau...

8.2CVSS9.1AI score
SaveExploits0References6
Rows per page
Query Builder