Lucene search
K

38 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-0378

Malicious code in bioql PyPI...

7.5CVSS4.7AI score0.00427EPSS
Exploits1References8
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-10908

Malicious code in bioql PyPI...

8.1CVSS5.8AI score0.00135EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2025/04/16 2:38 a.m.2 views

SUSE CVE-2025-3445

A Path Traversal "Zip Slip" vulnerability has been identified in mholt/archiver in Go. This vulnerability allows using a crafted ZIP file containing path traversal symlinks to create or overwrite files with the user's privileges or application utilizing the library. When using the...

8.1CVSS6AI score0.00135EPSS
Exploits0References4
OSV
OSV
added 2025/04/14 12:30 a.m.11 views

GHSA-7VPP-9CXJ-Q8GV mholt/archiver Vulnerable to Path Traversal via Crafted ZIP File

A Path Traversal "Zip Slip" vulnerability has been identified in mholt/archiver in Go. This vulnerability allows using a crafted ZIP file containing path traversal symlinks to create or overwrite files with the user's privileges or application utilizing the library. When using the...

8.1CVSS6.3AI score0.00135EPSS
Exploits0References4
Github Security Blog
Github Security Blog
added 2025/04/14 12:30 a.m.30 views

mholt/archiver Vulnerable to Path Traversal via Crafted ZIP File

A Path Traversal "Zip Slip" vulnerability has been identified in mholt/archiver in Go. This vulnerability allows using a crafted ZIP file containing path traversal symlinks to create or overwrite files with the user's privileges or application utilizing the library. When using the...

8.1CVSS6.7AI score0.00135EPSS
Exploits0References4Affected Software2
OSV
OSV
added 2025/04/13 10:15 p.m.1 views

CVE-2025-3445

A Path Traversal "Zip Slip" vulnerability has been identified in mholt/archiver in Go. This vulnerability allows using a crafted ZIP file containing path traversal symlinks to create or overwrite files with the user's privileges or application utilizing the library. When using the...

8.1CVSS5.7AI score
Exploits0References1
NVD
NVD
added 2025/04/13 10:15 p.m.17 views

CVE-2025-3445

A Path Traversal "Zip Slip" vulnerability has been identified in mholt/archiver in Go. This vulnerability allows using a crafted ZIP file containing path traversal symlinks to create or overwrite files with the user's privileges or application utilizing the library. When using the...

8.1CVSS0.00135EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/04/13 10:10 p.m.19 views

CVE-2025-3445

A Path Traversal "Zip Slip" vulnerability has been identified in mholt/archiver in Go. This vulnerability allows using a crafted ZIP file containing path traversal symlinks to create or overwrite files with the user's privileges or application utilizing the library. When using the...

8.1CVSS6.8AI score0.00135EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/04/13 10:10 p.m.37 views

CVE-2025-3445

A Path Traversal "Zip Slip" vulnerability has been identified in mholt/archiver in Go. This vulnerability allows using a crafted ZIP file containing path traversal symlinks to create or overwrite files with the user's privileges or application utilizing the library. When using the...

8.1CVSS0.00135EPSS
Exploits0References1
CVE
CVE
added 2025/04/13 10:10 p.m.240 views

CVE-2025-3445

CVE-2025-3445 (Zip Slip in mholt/archiver, Go) : A crafted ZIP can cause path traversal during archiver.Unarchive(zipFile, outputDir), permitting write/overwrite of files with the app’s privileges. This can lead to privilege escalation or code execution in affected setups. The advisory notes a TA...

8.1CVSS8AI score0.00135EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/04/13 12:0 a.m.1 views

PT-2025-16188 · Unknown · Mholt/Archiver

Name of the Vulnerable Software and Affected Versions: mholt/archiver versions affected versions not specified Description: A Path Traversal "Zip Slip" vulnerability has been identified in the mholt/archiver library in Go. This issue allows an attacker to use a crafted ZIP file containing path...

8.1CVSS7.8AI score0.00135EPSS
Exploits0References18
OSV
OSV
added 2024/08/21 3:29 p.m.9 views

GO-2022-0799 Arbitrary File Write via Archive Extraction in mholt/archiver in github.com/mholt/archiver

Arbitrary File Write via Archive Extraction in mholt/archiver in github.com/mholt/archiver...

5.5CVSS5.4AI score0.02615EPSS
Exploits1References7
OSV
OSV
added 2024/04/06 6:31 p.m.23 views

GHSA-RHH4-RH7C-7R5V Archiver Path Traversal vulnerability

A flaw was discovered in the mholt/archiver package. This flaw allows an attacker to create a specially crafted tar file, which, when unpacked, may allow access to restricted files or directories. This issue can allow the creation or overwriting of files with the user's or application's privilege...

6.1CVSS6.1AI score0.22062EPSS
Exploits1References6
OSV
OSV
added 2024/04/06 5:15 p.m.4 views

CVE-2024-0406

A flaw was discovered in the mholt/archiver package. This flaw allows an attacker to create a specially crafted tar file, which, when unpacked, may allow access to restricted files or directories. This issue can allow the creation or overwriting of files with the user's or application's privilege...

7.8CVSS7.4AI score0.22062EPSS
Exploits1References3
NVD
NVD
added 2024/04/06 5:15 p.m.10 views

CVE-2024-0406

A flaw was discovered in the mholt/archiver package. This flaw allows an attacker to create a specially crafted tar file, which, when unpacked, may allow access to restricted files or directories. This issue can allow the creation or overwriting of files with the user's or application's privilege...

7.8CVSS6.1AI score0.22062EPSS
Exploits1References3
Cvelist
Cvelist
added 2024/04/06 4:11 p.m.24 views

CVE-2024-0406 Mholt/archiver: path traversal vulnerability

A flaw was discovered in the mholt/archiver package. This flaw allows an attacker to create a specially crafted tar file, which, when unpacked, may allow access to restricted files or directories. This issue can allow the creation or overwriting of files with the user's or application's privilege...

6.1CVSS6.3AI score0.22062EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2024/04/06 4:11 p.m.37 views

CVE-2024-0406 Mholt/archiver: path traversal vulnerability

A flaw was discovered in the mholt/archiver package. This flaw allows an attacker to create a specially crafted tar file, which, when unpacked, may allow access to restricted files or directories. This issue can allow the creation or overwriting of files with the user's or application's privilege...

6.1CVSS7AI score0.22062EPSS
Exploits1References3
CVE
CVE
added 2024/04/06 4:11 p.m.444 views

CVE-2024-0406

CVE-2024-0406 concerns the mholt/archiver package. The connected Nessus/SUSE entries confirm a path-traversal flaw in tar unpacking that can cause writing to restricted files or directories when extracting archives. The remediation path shown in the connected docs includes upgrading the affected ...

7.8CVSS5.9AI score0.22062EPSS
Exploits1References3Affected Software1
RedhatCVE
RedhatCVE
added 2024/02/01 5:49 p.m.26 views

CVE-2024-0406

A flaw was discovered in the mholt/archiver package. This flaw allows an attacker to create a specially crafted tar file, which, when unpacked, may allow access to restricted files or directories. This issue can allow the creation or overwriting of files with the user's or application's privilege...

6.1CVSS7AI score0.22062EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2024/02/01 12:0 a.m.2 views

PT-2024-15532 · Unknown · Mholt/Archiver

Name of the Vulnerable Software and Affected Versions: mholt/archiver affected versions not specified Description: A flaw was discovered in the mholt/archiver package, allowing an attacker to create a specially crafted tar file. When unpacked, this file may allow access to restricted files or...

7.8CVSS8.6AI score0.22062EPSS
Exploits1References28
Rows per page
Query Builder