Lucene search
+L

7 matches found

OSV
OSV
•added 2024/02/27 2:15 a.m.•4 views

DEBIAN-CVE-2024-25711

diffoscope before 256 allows directory traversal via an embedded filename in a GPG file. Contents of any file, such as ../.ssh/idrsa, may be disclosed to an attacker. This occurs because the value of the gpg --use-embedded-filenames option is trusted...

7.5CVSS7.2AI score0.00987EPSS
SaveExploits0References1
PyPA
PyPA
•added 2024/02/27 2:15 a.m.•13 views

PYSEC-2024-41

diffoscope before 256 allows directory traversal via an embedded filename in a GPG file. Contents of any file, such as ../.ssh/idrsa, may be disclosed to an attacker. This occurs because the value of the gpg --use-embedded-filenames option is trusted...

7.5CVSS7.2AI score0.00987EPSS
SaveExploits0References4Affected Software1
Prion
Prion
•added 2024/02/27 2:15 a.m.•34 views

Directory traversal

diffoscope before 256 allows directory traversal via an embedded filename in a GPG file. Contents of any file, such as ../.ssh/idrsa, may be disclosed to an attacker. This occurs because the value of the gpg --use-embedded-filenames option is trusted...

7AI score0.00987EPSS
SaveExploits0References3
OSV
OSV
•added 2024/02/27 2:15 a.m.•10 views

UBUNTU-CVE-2024-25711

diffoscope before 256 allows directory traversal via an embedded filename in a GPG file. Contents of any file, such as ../.ssh/idrsa, may be disclosed to an attacker. This occurs because the value of the gpg --use-embedded-filenames option is trusted...

7.5CVSS7.2AI score0.00987EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2024/02/27 12:00 a.m.•29 views

Fedora 39 : diffoscope (2024-3383326db4)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-3383326db4 advisory. Small bugfix update incl. a CVE fix. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has n...

7.5CVSS7.2AI score0.00987EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2024/02/22 3:05 a.m.•12 views

SUSE CVE-2024-25711

diffoscope before 256 allows directory traversal via an embedded filename in a GPG file. Contents of any file, such as ../.ssh/idrsa, may be disclosed to an attacker. This occurs because the value of the gpg --use-embedded-filenames option is trusted...

7.5CVSS7.2AI score0.00987EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/11 12:00 a.m.•2 views

CVE-2024-25711: Improper Limitation of a Pathname to a Restricted Directory

diffoscope before 256 allows directory traversal via an embedded filename in a GPG file. Contents of any file, such as ../.ssh/idrsa, may be disclosed to an attacker. This occurs because the value of the gpg --use-embedded-filenames option is trusted...

7.5CVSS7.2AI score0.00987EPSS
SaveExploits0References3
Rows per page
Query Builder