AlmaLinux 9.2 [TuxCare] Security Update: python3.11-pip / python3.11-pip-wheel (ALMALINUX9.2:CLSA-2025:1765376235)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1765376235 advisory. - Directory traversal vulnerability in the 1 extract and 2 extractall functions in the tarfile module in Python allows user-assisted remote...

EUVD-2026-89568

Image Scanner Driver for Linux contains a link following vulnerability. An attacker who can log in to a Linux system where the product is installed may overwrite arbitrary files by using a special method in advance...

CVE-2026-35177

Vim is an open source, command line text editor. Prior to 9.2.0280, a path traversal bypass in Vim's zip.vim plugin allows overwriting of arbitrary files when opening specially crafted zip archives, circumventing the previous fix for CVE-2025-53906. This vulnerability is fixed in 9.2.0280...

CVE-2025-53906

Vim is an open source, command line text editor. Prior to version 9.1.1551, a path traversal issue in Vim’s zip.vim plugin can allow overwriting of arbitrary files when opening specially crafted zip archives. Impact is low because this exploit requires direct user interaction. However, successful...

CVE-2024-2914

A TarSlip vulnerability exists in the deepjavalibrary/djl, affecting version 0.26.0 and fixed in version 0.27.0. This vulnerability allows an attacker to manipulate file paths within tar archives to overwrite arbitrary files on the target system. Exploitation of this vulnerability could lead to...

CVE-2024-30254

MesonLSP is an unofficial, unendorsed language server for meson written in C++. A vulnerability in versions prior to 4.1.4 allows overwriting arbitrary files if the attacker can make the victim either run the language server within a specific crafted project or "mesonlsp --full". Version 4.1.4...

CVE-2023-22726

act is a project which allows for local running of github actions. The artifact server that stores artifacts from Github Action runs does not sanitize path inputs. This allows an attacker to download and overwrite arbitrary files on the host from a Github Action. This issue may lead to privilege...

CVE-2022-32807

This issue was addressed with improved file handling. This issue is fixed in Security Update 2022-005 Catalina, macOS Big Sur 11.6.8, macOS Monterey 12.5. An app may be able to overwrite arbitrary files...

PT-2020-5079

Name of the Vulnerable Software and Affected Versions Cisco Nexus Data Broker affected versions not specified Description The issue is related to insufficient validation of configuration backup files in the configuration restore feature. This could allow a remote attacker to perform a directory...

PT-2020-18810

Name of the Vulnerable Software and Affected Versions BIG-IP versions 11.6.1 through 11.6.5.1 BIG-IP versions 12.1.0 through 12.1.5.1 BIG-IP versions 13.1.0 through 13.1.3.3 BIG-IP versions 14.1.0 through 14.1.2.3 BIG-IP versions 15.0.0 through 15.0.1.3 BIG-IP versions 15.1.0 through 15.1.0.4...

PT-2020-18401

Name of the Vulnerable Software and Affected Versions Dell Client Consumer and Commercial Platforms affected versions not specified Description The issue allows a locally authenticated low-privileged malicious user to exploit the Dell Firmware Update Utility by tricking an administrator into...

PT-2019-6666

Name of the Vulnerable Software and Affected Versions openvas-scanner versions prior to 2011-09-11 Description The issue allows a local attacker to conduct symlink attacks, potentially overwriting arbitrary files on the system. This is due to the insecure creation of a temporary file when...

CVE-2016-9595

A flaw was found in katello-debug before 3.4.0 where certain scripts and log files used insecure temporary files. A local user could exploit this flaw to conduct a symbolic-link attack, allowing them to overwrite the contents of arbitrary files...

PT-2017-10736

Name of the Vulnerable Software and Affected Versions mixlib-archive versions 0.3.0 and older Description The issue allows attackers to perform a directory traversal attack, enabling them to overwrite arbitrary files by using .. in tar archive entries. This can lead to unauthorized modifications ...

PT-2011-2796

Name of the Vulnerable Software and Affected Versions pure-ftpd version 1.0.22 Description The issue allows local users to gain privileges by overwriting arbitrary files due to the creation of a world-writeable directory when running OES Netware extensions. Recommendations For pure-ftpd version...