Lucene search
K

11 matches found

Tenable Nessus
Tenable Nessus
added 2025/09/29 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2025-10995

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security vulnerability has been detected in Open Babel up to 3.1.1. This vulnerability affects the function zlibstream::basicunzipstreambuf::underflow in the...

7.8CVSS5.6AI score0.0004EPSS
Exploits1References3
SUSE CVE
SUSE CVE
added 2025/09/26 11:35 p.m.1 views

SUSE CVE-2025-10995

A security vulnerability has been detected in Open Babel up to 3.1.1. This vulnerability affects the function zlibstream::basicunzipstreambuf::underflow in the library /src/zipstreamimpl.h. Such manipulation leads to memory corruption. Local access is required to approach this attack. The exploit...

7.8CVSS5.1AI score0.0004EPSS
Exploits1References3
NVD
NVD
added 2025/09/26 2:15 a.m.2 views

CVE-2025-10995

A security vulnerability has been detected in Open Babel up to 3.1.1. This vulnerability affects the function zlibstream::basicunzipstreambuf::underflow in the library /src/zipstreamimpl.h. Such manipulation leads to memory corruption. Local access is required to approach this attack. The exploit...

7.8CVSS0.0004EPSS
Exploits1References5
OSV
OSV
added 2025/09/26 2:15 a.m.1 views

DEBIAN-CVE-2025-10995

A security vulnerability has been detected in Open Babel up to 3.1.1. This vulnerability affects the function zlibstream::basicunzipstreambuf::underflow in the library /src/zipstreamimpl.h. Such manipulation leads to memory corruption. Local access is required to approach this attack. The exploit...

7.8CVSS5AI score0.0004EPSS
Exploits1References1
Debian CVE
Debian CVE
added 2025/09/26 2:2 a.m.8 views

CVE-2025-10995

A security vulnerability has been detected in Open Babel up to 3.1.1. This vulnerability affects the function zlibstream::basicunzipstreambuf::underflow in the library /src/zipstreamimpl.h. Such manipulation leads to memory corruption. Local access is required to approach this attack. The exploit...

7.8CVSS5AI score0.0004EPSS
Exploits1
Vulnrichment
Vulnrichment
added 2025/09/26 2:2 a.m.1 views

CVE-2025-10995 Open Babel zipstreamimpl.h underflow memory corruption

A security vulnerability has been detected in Open Babel up to 3.1.1. This vulnerability affects the function zlibstream::basicunzipstreambuf::underflow in the library /src/zipstreamimpl.h. Such manipulation leads to memory corruption. Local access is required to approach this attack. The exploit...

5.3CVSS6.3AI score0.0004EPSS
Exploits1References5
Exploit DB
Exploit DB
added 2025/04/30 12:0 a.m.283 views

unzip-stream 0.3.1 - Arbitrary File Write

Exploit Title: unzip-stream 0.3.1 - Arbitrary File Write Date: 18th April, 2024 Exploit Author: Ardayfio Samuel Nii Aryee Software link: https://github.com/mhr3/unzip-stream Version: unzip-stream 0.3.1 Tested on: Ubuntu CVE: CVE-2024-42471 NB: Python's built-in zipfile module has limitations on t...

7.5CVSS7.4AI score0.0771EPSS
Exploits4
Packet Storm
Packet Storm
added 2025/04/30 12:0 a.m.80 views

📄 unzip-stream 0.3.1 Arbitrary File Write

unzip-stream version 0.3.1 suffers from an arbitrary file write vulnerability. Exploit Title: unzip-stream 0.3.1 - Arbitrary File Write Date: 18th April, 2024 Exploit Author: Ardayfio Samuel Nii Aryee Software link: https://github.com/mhr3/unzip-stream Version: unzip-stream 0.3.1 Tested on: Ubunt...

7.5CVSS9.5AI score0.0771EPSS
Exploits4
OSV
OSV
added 2024/08/26 3:17 p.m.0 views

GHSA-6JRJ-VC65-C983 unzip-stream allows Arbitrary File Write via artifact extraction

Impact When using the Extract method of unzip-stream, malicious zip files were able to write to paths they shouldn't be allowed to. Patches Fixed in 0.3.2 References - https://snyk.io/research/zip-slip-vulnerability - https://github.com/mhr3/unzip-stream/compare/v0.3.1...v0.3.2 Credits Justin Taf...

8.7CVSS5.9AI score
Exploits0References5
vulnersOsv
vulnersOsv
added 2024/08/26 3:17 p.m.2 views

@c8y/application (>=1019.0.3 <=1019.24.6), @c8y/cli (>=10.0.7 <=1018.510.4) +99 more potentially affected by unknown CVE via unzip-stream (>=0.1.2 <=0.3.1)

unzip-stream NPM version =0.1.2, =1019.0.3, =10.0.7, =1019.0.3, =1019.0.3, =1019.4.8, =1019.4.8, =0.1.0, =0.1.0, =0.6.0, =0.2.0, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =0.0.8 and more Source cves: unknown CVE Source advisory: OSV:GHSA-6JRJ-VC65-C983...

5.8AI score
Exploits0
Positive Technologies
Positive Technologies
added 2024/08/26 12:0 a.m.2 views

PT-2024-40128 · Unknown · Unzip-Stream

Name of the Vulnerable Software and Affected Versions: unzip-stream versions prior to 0.3.2 Description: The issue allows malicious zip files to write to unauthorized paths when using the Extract method of unzip-stream. A researcher from Google, Justin Taft, discovered this issue. Recommendations...

8.7CVSS7.2AI score
Exploits0References6
Rows per page
Query Builder