7 matches found
Rocky Linux 8 [CIQ] Security Update: git-lfs / git-lfs-debuginfo / git-lfs-debugsource (crlsa-2025_23745)
The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202523745 advisory. git-lfs: Git LFS may write to arbitrary files via crafted symlinks CVE-2025-26625 Tenable has extracted the preceding description block directly from the CIQ...
Improper Limitation of a Pathname to a Restricted Directory in Zip4j
zip4j before 1.3.3 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ dot dot slash in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'...
CVE-2014-5003: Improper Input Validation
chef/travis-cookbooks/cienvironment/perlbrew/recipes/default.rb in the ciborg gem 3.0.0 for Ruby allows local users to write to arbitrary files and gain privileges via a symlink attack on /tmp/perlbrew-installer...
CVE-2016-6321
Directory traversal vulnerability in the safernamesuffix function in GNU tar 1.14 through 1.29 might allow remote attackers to bypass an intended protection mechanism and write to arbitrary files via vectors related to improper sanitization of the filename parameter, aka POINTYFEATHER...
PT-2015-7437
Name of the Vulnerable Software and Affected Versions libarchive in Apple OS X versions prior to 10.11.1 Description The issue allows attackers to write to arbitrary files via a crafted app that conducts an unspecified symlink attack. Recommendations For libarchive in Apple OS X versions prior to...
PT-2015-7586
Name of the Vulnerable Software and Affected Versions NTP ntpd versions 4.2.x through 4.2.8p3 NTP ntpd versions 4.3.x through 4.3.76 Description The issue allows remote attackers with an IP address that is allowed to send configuration requests, and with knowledge of the remote configuration...
