Lucene search
K

28 matches found

OSV
OSV
added 2025/12/03 5:15 p.m.1 views

CVE-2025-65843

Aquarius Desktop 3.0.069 for macOS contains an insecure file handling vulnerability in its support data archive generation feature. The application follows symbolic links placed inside the /Library/Logs/Aquarius directory and treats them as regular files. When building the support ZIP, Aquarius...

7.7CVSS5.9AI score0.00029EPSS
Exploits1References1
Cvelist
Cvelist
added 2025/12/03 12:0 a.m.10 views

CVE-2025-65843

Aquarius Desktop 3.0.069 for macOS contains an insecure file handling vulnerability in its support data archive generation feature. The application follows symbolic links placed inside the /Library/Logs/Aquarius directory and treats them as regular files. When building the support ZIP, Aquarius...

0.00029EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2021-10487

Malware in sbrugna...

9.8CVSS9.2AI score0.00738EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2021-10488

Malware in sbrugna...

7.8CVSS7.5AI score0.00076EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2002-2386

Malware in sbrugna...

7.5CVSS6.4AI score0.00172EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2021-23520

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The package juce-framework/juce before 6.1.5 are vulnerable to Arbitrary File Write via Archive Extraction Zip Slip via the ZipFile::uncompressEntry function in...

9.8CVSS7.7AI score0.00738EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2021-23521

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - This affects the package juce-framework/JUCE before 6.1.5. This vulnerability is triggered when a malicious archive is crafted with an entry containing a symbol...

7.8CVSS7.6AI score0.00076EPSS
Exploits1References3
NVD
NVD
added 2022/01/31 11:15 a.m.14 views

CVE-2021-23521

This affects the package juce-framework/JUCE before 6.1.5. This vulnerability is triggered when a malicious archive is crafted with an entry containing a symbolic link. When extracted, the symbolic link is followed outside of the target dir allowing writing arbitrary files on the target host. In...

7.8CVSS0.00076EPSS
Exploits1References2
OSV
OSV
added 2022/01/31 11:15 a.m.11 views

CVE-2021-23520

The package juce-framework/juce before 6.1.5 are vulnerable to Arbitrary File Write via Archive Extraction Zip Slip via the ZipFile::uncompressEntry function in juceZipFile.cpp. This vulnerability is triggered when the archive is extracted upon calling uncompressTo on a ZipFile object...

9.8CVSS7AI score
Exploits0References3
OSV
OSV
added 2022/01/31 11:15 a.m.1 views

DEBIAN-CVE-2021-23521

This affects the package juce-framework/JUCE before 6.1.5. This vulnerability is triggered when a malicious archive is crafted with an entry containing a symbolic link. When extracted, the symbolic link is followed outside of the target dir allowing writing arbitrary files on the target host. In...

7.8CVSS7.9AI score0.00076EPSS
Exploits1References1
NVD
NVD
added 2022/01/31 11:15 a.m.7 views

CVE-2021-23520

The package juce-framework/juce before 6.1.5 are vulnerable to Arbitrary File Write via Archive Extraction Zip Slip via the ZipFile::uncompressEntry function in juceZipFile.cpp. This vulnerability is triggered when the archive is extracted upon calling uncompressTo on a ZipFile object...

9.8CVSS0.00738EPSS
Exploits1References3
OSV
OSV
added 2022/01/31 11:15 a.m.1 views

DEBIAN-CVE-2021-23520

The package juce-framework/juce before 6.1.5 are vulnerable to Arbitrary File Write via Archive Extraction Zip Slip via the ZipFile::uncompressEntry function in juceZipFile.cpp. This vulnerability is triggered when the archive is extracted upon calling uncompressTo on a ZipFile object...

9.8CVSS8.5AI score0.00738EPSS
Exploits1References1
UbuntuCve
UbuntuCve
added 2022/01/31 11:15 a.m.30 views

CVE-2021-23521

This affects the package juce-framework/JUCE before 6.1.5. This vulnerability is triggered when a malicious archive is crafted with an entry containing a symbolic link. When extracted, the symbolic link is followed outside of the target dir allowing writing arbitrary files on the target host. In...

7.8CVSS7.3AI score0.00076EPSS
Exploits1References3
Prion
Prion
added 2022/01/31 11:15 a.m.17 views

Design/Logic Flaw

The package juce-framework/juce before 6.1.5 are vulnerable to Arbitrary File Write via Archive Extraction Zip Slip via the ZipFile::uncompressEntry function in juceZipFile.cpp. This vulnerability is triggered when the archive is extracted upon calling uncompressTo on a ZipFile object...

7.5CVSS9.3AI score0.00738EPSS
Exploits1References3Affected Software1
Prion
Prion
added 2022/01/31 11:15 a.m.234 views

Code injection

This affects the package juce-framework/JUCE before 6.1.5. This vulnerability is triggered when a malicious archive is crafted with an entry containing a symbolic link. When extracted, the symbolic link is followed outside of the target dir allowing writing arbitrary files on the target host. In...

4.6CVSS7.8AI score0.00076EPSS
Exploits1References2Affected Software1
OSV
OSV
added 2022/01/31 11:15 a.m.0 views

UBUNTU-CVE-2021-23520

The package juce-framework/juce before 6.1.5 are vulnerable to Arbitrary File Write via Archive Extraction Zip Slip via the ZipFile::uncompressEntry function in juceZipFile.cpp. This vulnerability is triggered when the archive is extracted upon calling uncompressTo on a ZipFile object...

9.8CVSS5.8AI score0.00738EPSS
Exploits1References5
OSV
OSV
added 2022/01/31 11:15 a.m.0 views

UBUNTU-CVE-2021-23521

This affects the package juce-framework/JUCE before 6.1.5. This vulnerability is triggered when a malicious archive is crafted with an entry containing a symbolic link. When extracted, the symbolic link is followed outside of the target dir allowing writing arbitrary files on the target host. In...

7.8CVSS6.1AI score0.00076EPSS
Exploits1References4
Debian CVE
Debian CVE
added 2022/01/31 10:56 a.m.16 views

CVE-2021-23520

The package juce-framework/juce before 6.1.5 are vulnerable to Arbitrary File Write via Archive Extraction Zip Slip via the ZipFile::uncompressEntry function in juceZipFile.cpp. This vulnerability is triggered when the archive is extracted upon calling uncompressTo on a ZipFile object...

9.8CVSS9.4AI score0.00738EPSS
Exploits1
CVE
CVE
added 2022/01/31 10:56 a.m.52 views

CVE-2021-23520

The CVE-2021-23520 entry concerns the juce-framework/juce project. Affected software: juce before version 6.1.5. Vulnerability: Arbitrary File Write via Archive Extraction (Zip Slip) in ZipFile::uncompressEntry within juce_ZipFile.cpp, triggered when uncompressTo() is called on a ZipFile object. ...

9.8CVSS7.3AI score0.00738EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2022/01/31 10:56 a.m.11 views

CVE-2021-23520 Arbitrary File Write via Archive Extraction (Zip Slip)

The package juce-framework/juce before 6.1.5 are vulnerable to Arbitrary File Write via Archive Extraction Zip Slip via the ZipFile::uncompressEntry function in juceZipFile.cpp. This vulnerability is triggered when the archive is extracted upon calling uncompressTo on a ZipFile object...

5.5CVSS9.6AI score0.00738EPSS
Exploits1References3
Rows per page
Query Builder