Lucene search
+L

822 matches found

Veracode
Veracode
added 2023/01/25 9:12 a.m.21 views

Path Traversal

github.com/uber/kraken is vulnerable to Path Traversal. The vulnerability exists because the downloadHandler parameter in the server.go does not properly sanitize the relative file paths and user inputs, allowing an attacker to write arbitrary files outside the expected directory...

7.5CVSS7.3AI score0.00799EPSS
SaveExploits1References2Affected Software1
Veracode
Veracode
added 2023/01/24 7:19 a.m.19 views

Path Traversal

web-node-server is vulnerable to Path Traversal. The vulnerability is due to to a lack of sanitization of relative file paths in the start function of nodeserver.js which allows an attacker to write arbitrary files outside the expected directory...

7.5CVSS7.3AI score0.00889EPSS
SaveExploits1References4Affected Software1
Positive Technologies
Positive Technologies
added 2023/01/24 12:00 a.m.8 views

PT-2023-19615 · Jenkins · Jenkins Visualexpert Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins visualexpert Plugin versions 1.3 and earlier Description: The issue allows attackers with Item/Configure permission to check for the existence of an attacker-specified file path on the Jenkins controller file system, due to a lack of...

4.3CVSS4.3AI score0.01187EPSS
SaveExploits0References3
Veracode
Veracode
added 2023/01/16 4:30 p.m.19 views

Path Traversal

github.com/whyrusleeping/tar-utils is vulnerable to Path Traversal. The vulnerability exists because the elems parameter in the Sanitize function of extractor.go does not properly sanitize the relative file paths, allowing an attacker to write arbitrary files outside the expected directory...

9.1CVSS8.8AI score0.01023EPSS
SaveExploits0References3Affected Software1
Veracode
Veracode
added 2023/01/12 8:22 a.m.33 views

Remote Code Execution

git is vulnerable to Remote Code Execution RCE. The vulnerability is due to lsfiles in lib.rb not un-escaping file paths when using eval, which allows an attacker to execute remote code...

8CVSS8.2AI score0.01351EPSS
SaveExploits0References7Affected Software2
RedhatCVE
RedhatCVE
added 2023/01/03 8:04 a.m.27 views

CVE-2018-25046

A flaw was found in the cloudfoundry/archiver package. In affected versions of this package, archives containing relative file paths can cause files to be written or overwritten outside of the target directory due to improper path sanitization...

9.1CVSS4.3AI score0.01188EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2022/12/28 12:30 a.m.28 views

Cloud Foundry Archiver vulnerable to path traversal

Due to improper path santization, archives containing relative file paths can cause files to be written or overwritten outside of the target directory...

9.1CVSS4AI score0.01188EPSS
SaveExploits0References5Affected Software2
OSV
OSV
added 2022/12/28 12:30 a.m.22 views

GHSA-JPF8-H7H7-3PPM tar-utils Path Traversal vulnerability

Due to improper path sanitization, archives containing relative file paths can cause files to be written or overwritten outside of the target directory...

9.1CVSS9.1AI score0.01023EPSS
SaveExploits0References5
OSV
OSV
added 2022/12/28 12:30 a.m.27 views

GHSA-F5C5-HMW9-V8HX Unzip vulnerable to path traversal

Due to improper path sanitization, archives containing relative file paths can cause files to be written or overwritten outside of the target directory...

9.1CVSS9.1AI score0.01325EPSS
SaveExploits1References6
Github Security Blog
Github Security Blog
added 2022/12/28 12:30 a.m.37 views

Unzip vulnerable to path traversal

Due to improper path sanitization, archives containing relative file paths can cause files to be written or overwritten outside of the target directory...

9.1CVSS8.7AI score0.01325EPSS
SaveExploits1References6Affected Software1
Github Security Blog
Github Security Blog
added 2022/12/28 12:30 a.m.27 views

tar-utils Path Traversal vulnerability

Due to improper path sanitization, archives containing relative file paths can cause files to be written or overwritten outside of the target directory...

9.1CVSS8.7AI score0.01023EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2022/12/28 12:30 a.m.17 views

GHSA-32QH-8VG6-9G43 Cloud Foundry Archiver vulnerable to path traversal

Due to improper path santization, archives containing relative file paths can cause files to be written or overwritten outside of the target directory...

9.1CVSS9.1AI score0.01188EPSS
SaveExploits0References5
OSV
OSV
added 2022/12/27 10:15 p.m.16 views

CVE-2018-25046

Due to improper path sanitization, archives containing relative file paths can cause files to be written or overwritten outside of the target directory...

9.1CVSS9.2AI score
SaveExploits0References3
NVD
NVD
added 2022/12/27 10:15 p.m.32 views

CVE-2020-36561

Due to improper path sanitization, archives containing relative file paths can cause files to be written or overwritten outside of the target directory...

9.1CVSS0.01325EPSS
SaveExploits1References4
Prion
Prion
added 2022/12/27 10:15 p.m.18 views

Input validation

Due to improper path sanitization, archives containing relative file paths can cause files to be written or overwritten outside of the target directory...

6.4CVSS9.1AI score0.01249EPSS
SaveExploits1References4Affected Software1
Prion
Prion
added 2022/12/27 10:15 p.m.15 views

Input validation

Due to improper path sanitization, archives containing relative file paths can cause files to be written or overwritten outside of the target directory...

6.4CVSS9.1AI score0.01188EPSS
SaveExploits0References3Affected Software1
Prion
Prion
added 2022/12/27 10:15 p.m.20 views

Input validation

Due to improper path sanitization, archives containing relative file paths can cause files to be written or overwritten outside of the target directory...

6.4CVSS9.1AI score0.01325EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2022/12/27 9:13 p.m.27 views

CVE-2020-36566 Path traversal in github.com/whyrusleeping/tar-utils

Due to improper path sanitization, archives containing relative file paths can cause files to be written or overwritten outside of the target directory...

9.2AI score0.01023EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2022/12/27 9:13 p.m.36 views

CVE-2020-36561 Path traversal in github.com/yi-ge/unzip

Due to improper path sanitization, archives containing relative file paths can cause files to be written or overwritten outside of the target directory...

9.2AI score0.01325EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2022/12/27 9:13 p.m.33 views

CVE-2020-36560 Path traversal in github.com/artdarek/go-unzip

Due to improper path sanitization, archives containing relative file paths can cause files to be written or overwritten outside of the target directory...

9.2AI score0.01249EPSS
SaveExploits1References4
Rows per page
Query Builder