Lucene search
K

22 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2022-3332

Malicious code in bioql PyPI...

7.5CVSS7.5AI score0.00159EPSS
Exploits0References6
OSV
OSV
added 2022/05/13 1:10 a.m.14 views

GHSA-98WX-CW86-C97X mixlib-archive Path Traversal vulnerability

Chef Software's mixlib-archive versions 0.3.0 and older are vulnerable to a directory traversal attack allowing attackers to overwrite arbitrary files by using .. in tar archive entries...

7.5CVSS7.3AI score0.00159EPSS
Exploits0References5
Snyk
Snyk
added 2022/05/13 1:10 a.m.2 views

Directory Traversal

Overview mixlib-archive is a simple interface to various archive formats Affected versions of this package are vulnerable to Directory Traversal allowing attackers to overwrite arbitrary files by supplying a filename for a tar archive involving ... Details A Directory Traversal attack also known ...

7.5CVSS7.6AI score0.00159EPSS
Exploits0References2
Github Security Blog
Github Security Blog
added 2022/05/13 1:10 a.m.28 views

mixlib-archive Path Traversal vulnerability

Chef Software's mixlib-archive versions 0.3.0 and older are vulnerable to a directory traversal attack allowing attackers to overwrite arbitrary files by using .. in tar archive entries...

7.5CVSS5.3AI score0.00159EPSS
Exploits0References5Affected Software1
RubySec
RubySec
added 2022/05/13 12:0 a.m.16 views

mixlib-archive Path Traversal vulnerability

Chef Software's mixlib-archive versions 0.3.0 and older are vulnerable to a directory traversal attack allowing attackers to overwrite arbitrary files by using .. in tar archive entries...

7.5CVSS5.3AI score0.00159EPSS
Exploits0References1Affected Software1
CNVD
CNVD
added 2017/09/22 12:0 a.m.2 views

Chef Software Directory Traversal Vulnerability

Chef Software is a set of server application configuration tools written in Ruty and Erlang by Chef Software. mixlib-archive is one of the gem extraction archive tools. A directory traversal vulnerability exists in Chef Software in versions 0.3.0 and earlier of mixlib-archive. A remote attacker c...

7.5CVSS7AI score0.00159EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2017/07/21 12:0 a.m.31 views

Debian DSA-3915-1 : ruby-mixlib-archive - security update

It was discovered that ruby-mixlib-archive, a Chef Software's library used to handle various archive formats, was vulnerable to a directory traversal attack. This allowed attackers to overwrite arbitrary files by using a malicious tar archive containing '..' in its entries. %NASLMINLEVEL 70300 C...

7.5CVSS7.5AI score0.00159EPSS
Exploits0References4
Debian
Debian
added 2017/07/20 3:5 p.m.25 views

[SECURITY] [DSA 3915-1] ruby-mixlib-archive security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3915-1 [email protected] https://www.debian.org/security/ Sebastien Delafond July 20, 2017 https://www.debian.org/security/faq -...

7.5CVSS7.3AI score0.00159EPSS
Exploits0
Debian
Debian
added 2017/07/20 3:5 p.m.18 views

[SECURITY] [DSA 3915-1] ruby-mixlib-archive security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3915-1 [email protected] https://www.debian.org/security/ Sebastien Delafond July 20, 2017 https://www.debian.org/security/faq -...

5CVSS2.3AI score0.00159EPSS
Exploits0
OSV
OSV
added 2017/07/20 12:0 a.m.12 views

DSA-3915-1 ruby-mixlib-archive - security update

Bulletin has no description...

7.5CVSS7.4AI score0.00159EPSS
Exploits0
OpenVAS
OpenVAS
added 2017/07/20 12:0 a.m.15 views

Debian Security Advisory DSA 3915-1 (ruby-mixlib-archive - security update)

It was discovered that ruby-mixlib-archive, a Chef Software OpenVAS Vulnerability Test $Id: deb3915.nasl 6800 2017-07-26 06:58:22Z cfischer $ Auto-generated from advisory DSA 3915-1 using nvtgen 1.0 Script version: 1.0 Author: Greenbone Networks Copyright: Copyright c 2017 Greenbone Networks GmbH...

5CVSS0.4AI score0.00159EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2017/07/19 12:0 a.m.18 views

Debian: Security Advisory (DSA-3915-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.5AI score0.00159EPSS
Exploits0References3
Veracode
Veracode
added 2017/07/17 4:20 p.m.12 views

Directory Traversal

mixlib-archive is vulnerable to directory traversal attacks. Attackers can overwrite other files by using .. in tar archive entries...

7.5CVSS7.3AI score0.00159EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2017/07/17 1:18 p.m.11 views

CVE-2017-1000026

Chef Software's mixlib-archive versions 0.3.0 and older are vulnerable to a directory traversal attack allowing attackers to overwrite arbitrary files by using ".." in tar archive entries...

7.5CVSS7.5AI score
Exploits0References1
OSV
OSV
added 2017/07/17 1:18 p.m.2 views

DEBIAN-CVE-2017-1000026

Chef Software's mixlib-archive versions 0.3.0 and older are vulnerable to a directory traversal attack allowing attackers to overwrite arbitrary files by using ".." in tar archive entries...

7.5CVSS7AI score0.00159EPSS
Exploits0References1
NVD
NVD
added 2017/07/17 1:18 p.m.22 views

CVE-2017-1000026

Chef Software's mixlib-archive versions 0.3.0 and older are vulnerable to a directory traversal attack allowing attackers to overwrite arbitrary files by using ".." in tar archive entries...

7.5CVSS7.5AI score0.00159EPSS
Exploits0References1
Prion
Prion
added 2017/07/17 1:18 p.m.12 views

Directory traversal

Chef Software's mixlib-archive versions 0.3.0 and older are vulnerable to a directory traversal attack allowing attackers to overwrite arbitrary files by using ".." in tar archive entries...

5CVSS7.4AI score0.00159EPSS
Exploits0References1Affected Software1
UbuntuCve
UbuntuCve
added 2017/07/17 1:18 p.m.14 views

CVE-2017-1000026

Chef Software's mixlib-archive versions 0.3.0 and older are vulnerable to a directory traversal attack allowing attackers to overwrite arbitrary files by using ".." in tar archive entries...

7.5CVSS7.2AI score0.00159EPSS
Exploits0References4
OSV
OSV
added 2017/07/17 1:18 p.m.0 views

UBUNTU-CVE-2017-1000026

Chef Software's mixlib-archive versions 0.3.0 and older are vulnerable to a directory traversal attack allowing attackers to overwrite arbitrary files by using ".." in tar archive entries...

7.5CVSS7.2AI score0.00159EPSS
Exploits0References5
Debian CVE
Debian CVE
added 2017/07/13 8:0 p.m.17 views

CVE-2017-1000026

Chef Software's mixlib-archive versions 0.3.0 and older are vulnerable to a directory traversal attack allowing attackers to overwrite arbitrary files by using ".." in tar archive entries...

7.5CVSS7.5AI score0.00159EPSS
Exploits0
Rows per page
Query Builder