Lucene search
K

45 matches found

OSV
OSV
added 2019/07/02 8:15 p.m.1 views

DEBIAN-CVE-2019-13173

fstream before 1.0.12 is vulnerable to Arbitrary File Overwrite. Extracting tarballs containing a hardlink to a file that already exists in the system, and a file that matches the hardlink, will overwrite the system's file with the contents of the extracted file. The fstream.DirWriter function is...

7.5CVSS8.3AI score0.02781EPSS
Exploits0References1
NVD
NVD
added 2019/07/02 8:15 p.m.17 views

CVE-2019-13173

fstream before 1.0.12 is vulnerable to Arbitrary File Overwrite. Extracting tarballs containing a hardlink to a file that already exists in the system, and a file that matches the hardlink, will overwrite the system's file with the contents of the extracted file. The fstream.DirWriter function is...

7.5CVSS7.3AI score0.02781EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2019/07/02 8:15 p.m.1 views

CVE-2019-13173

fstream before 1.0.12 is vulnerable to Arbitrary File Overwrite. Extracting tarballs containing a hardlink to a file that already exists in the system, and a file that matches the hardlink, will overwrite the system's file with the contents of the extracted file. The fstream.DirWriter function is...

7.5CVSS5.5AI score0.02781EPSS
Exploits0References7
Cvelist
Cvelist
added 2019/07/02 7:26 p.m.28 views

CVE-2019-13173

fstream before 1.0.12 is vulnerable to Arbitrary File Overwrite. Extracting tarballs containing a hardlink to a file that already exists in the system, and a file that matches the hardlink, will overwrite the system's file with the contents of the extracted file. The fstream.DirWriter function is...

7.3AI score0.02781EPSS
Exploits0References5
Debian CVE
Debian CVE
added 2019/07/02 7:26 p.m.11 views

CVE-2019-13173

fstream before 1.0.12 is vulnerable to Arbitrary File Overwrite. Extracting tarballs containing a hardlink to a file that already exists in the system, and a file that matches the hardlink, will overwrite the system's file with the contents of the extracted file. The fstream.DirWriter function is...

7.5CVSS7.5AI score0.02781EPSS
Exploits0
CVE
CVE
added 2019/07/02 7:26 p.m.457 views

CVE-2019-13173

CVE-2019-13173 affects the Node.js fstream module (pre-1.0.12). The vulnerability is in fstream.DirWriter and allows overwriting system files when extracting tarballs containing a hardlink to an existing file, overwriting the target with the extracted content. Impact is arbitrary file overwrite o...

7.5CVSS7.2AI score0.02781EPSS
Exploits0References5Affected Software1
UbuntuCve
UbuntuCve
added 2019/07/02 12:0 a.m.16 views

CVE-2019-13173

fstream before 1.0.12 is vulnerable to Arbitrary File Overwrite. Extracting tarballs containing a hardlink to a file that already exists in the system, and a file that matches the hardlink, will overwrite the system's file with the contents of the extracted file. The fstream.DirWriter function is...

7.5CVSS7.1AI score0.02781EPSS
Exploits0References5
OSV
OSV
added 2019/07/02 12:0 a.m.0 views

UBUNTU-CVE-2019-13173

fstream before 1.0.12 is vulnerable to Arbitrary File Overwrite. Extracting tarballs containing a hardlink to a file that already exists in the system, and a file that matches the hardlink, will overwrite the system's file with the contents of the extracted file. The fstream.DirWriter function is...

7.5CVSS7.2AI score0.02781EPSS
Exploits0References6
vulnersOsv
vulnersOsv
added 2019/05/30 5:19 p.m.4 views

1password-manager (>=0.1.0 <=0.1.2), 4front-cli (>=0.0.1 <=0.0.20) +4793 more potentially affected by CVE-2019-13173 via fstream (>=0.1.11 <=1.0.11)

fstream NPM version =0.1.11, =0.1.0, =0.0.1, =0.2.0, =0.5.0, =0.0.1, =0.1.0, =0.0.2, =0.0.2, =0.5.12, =1.1.0, =0.1.2, =0.0.1, =1.0.0, =1.0.9 and more Source cves: CVE-2019-13173 Source advisory: OSV:GHSA-XF7W-R453-M56C...

7.5CVSS7.2AI score0.02781EPSS
Exploits0
Github Security Blog
Github Security Blog
added 2019/05/30 5:19 p.m.26 views

Arbitrary File Overwrite in fstream

Versions of fstream prior to 1.0.12 are vulnerable to Arbitrary File Overwrite. Extracting tarballs containing a hardlink to a file that already exists in the system and a file that matches the hardlink will overwrite the system's file with the contents of the extracted file. The fstream.DirWrite...

7.5CVSS2.9AI score0.02781EPSS
Exploits0References7Affected Software1
OSV
OSV
added 2019/05/30 5:19 p.m.5 views

GHSA-XF7W-R453-M56C Arbitrary File Overwrite in fstream

Versions of fstream prior to 1.0.12 are vulnerable to Arbitrary File Overwrite. Extracting tarballs containing a hardlink to a file that already exists in the system and a file that matches the hardlink will overwrite the system's file with the contents of the extracted file. The fstream.DirWrite...

7.5CVSS7.1AI score0.02781EPSS
Exploits0References6
Veracode
Veracode
added 2019/05/16 12:34 a.m.22 views

Arbitrary File Overwrite

fstream is vulnerable to arbitrary file overwrite. The vulnerability exists as fstream allows overwriting an existing file on the system through extracting a hardlink...

7.5CVSS7.5AI score0.02781EPSS
Exploits0References5Affected Software1
Node.js
Node.js
added 2019/05/15 2:22 p.m.19 views

Arbitrary File Overwrite

Overview Versions of fstream prior to 1.0.12 are vulnerable to Arbitrary File Overwrite. Extracting tarballs containing a hardlink to a file that already exists in the system and a file that matches the hardlink will overwrite the system's file with the contents of the extracted file. The...

6.4CVSS3AI score0.02781EPSS
Exploits0Affected Software1
NVD
NVD
added 2018/10/30 6:29 p.m.19 views

CVE-2018-10710

The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1, A-Tuning before v3.0.210, F-Stream before v3.0.210, and RestartToUEFI before v1.0.6.2 expose functionality to read and write arbitrary physical memory. This could be leveraged by a local attacker to elevate...

7.2CVSS6.6AI score0.00982EPSS
Exploits5References2
OpenVAS
OpenVAS
added 2013/08/20 12:0 a.m.10 views

Fedora Update for nodejs-fstream FEDORA-2013-12908

Check for the Version of nodejs-fstream OpenVAS Vulnerability Test Fedora Update for nodejs-fstream FEDORA-2013-12908 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...

3.3CVSS6.7AI score0.00372EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2013/08/20 12:0 a.m.14 views

Fedora Update for nodejs-fstream FEDORA-2013-12908

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

3.3CVSS6.8AI score0.00372EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2013/08/01 12:0 a.m.16 views

Fedora Update for nodejs-fstream-ignore FEDORA-2013-11780

Check for the Version of nodejs-fstream-ignore OpenVAS Vulnerability Test Fedora Update for nodejs-fstream-ignore FEDORA-2013-11780 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

3.3CVSS0.00372EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2013/08/01 12:0 a.m.11 views

Fedora Update for nodejs-fstream-npm FEDORA-2013-11780

Check for the Version of nodejs-fstream-npm OpenVAS Vulnerability Test Fedora Update for nodejs-fstream-npm FEDORA-2013-11780 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

3.3CVSS0.00372EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2013/08/01 12:0 a.m.21 views

Fedora Update for nodejs-fstream FEDORA-2013-11780

Check for the Version of nodejs-fstream OpenVAS Vulnerability Test Fedora Update for nodejs-fstream FEDORA-2013-11780 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...

3.3CVSS6.7AI score0.00372EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2013/08/01 12:0 a.m.10 views

Fedora Update for nodejs-fstream-ignore FEDORA-2013-11780

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

3.3CVSS6.8AI score0.00372EPSS
Exploits0References2
Rows per page
Query Builder