218 matches found
CLEANSTART-2026-HJ66405 Info-ZIP UnZip 6
Security vulnerability affects the unzip package. Info-ZIP UnZip 6...
CLEANSTART-2026-UB42257 Heap-based buffer overflow in the getZip64Data function in Info-ZIP UnZip 6
Security vulnerability affects the unzip package. Heap-based buffer overflow in the getZip64Data function in Info-ZIP UnZip 6...
CLEANSTART-2026-PW81515 Heap-based buffer overflow in the test_compr_eb function in Info-ZIP UnZip 6
Security vulnerability affects the unzip package. Heap-based buffer overflow in the testcompreb function in Info-ZIP UnZip 6...
CLEANSTART-2026-RT55512 Heap-based buffer overflow in the CRC32 verification in Info-ZIP UnZip 6
Security vulnerability affects the unzip package. Heap-based buffer overflow in the CRC32 verification in Info-ZIP UnZip 6...
CLEANSTART-2026-QO65180 Info-ZIP UnZip 6
Security vulnerability affects the unzip package. Info-ZIP UnZip 6...
CLEANSTART-2026-BT52726 Info-ZIP UnZip 6
Security vulnerability affects the unzip package. Info-ZIP UnZip 6...
Updated unzip packages fix security vulnerabilities
Vulnerabilities were discovered in the Info-ZIP unzip program, which could result in the execution of arbitrary code if a specially crafted file is processed...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: unzip (UTSA-2025-002255)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-002255 advisory. Info-ZIP UnZip 6.0 has a buffer overflow in list.c, when a ZIP archive has a crafted relationship between the compressed-size value and the uncompressed-size value,...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: unzip (UTSA-2025-002254)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-002254 advisory. Buffer overflow in the zishort function in zipinfo.c in Info-Zip UnZip 6.0 allows remote attackers to cause a denial of service crash via a large compression method...
CVE-2026-59311
A local unprivileged user on the same host can redirect all Zip/UnZip transformer output into a directory of their choosing by pre-creating /tmp/ziptransformer as a symlink before the application starts. Spring Integration 7.1.0 Spring Integration 7.0.0 - 7.0.5 Spring Integration 6.5.0 - 6.5.10...
EUVD-2026-67195
A local unprivileged user on the same host can redirect all Zip/UnZip transformer output into a directory of their choosing by pre-creating /tmp/ziptransformer as a symlink before the application starts. Spring Integration 7.1.0 Spring Integration 7.0.0 - 7.0.5 Spring Integration 6.5.0 - 6.5.10...
CVE-2026-47078 Relative path traversal in zip:unzip/zip:extract via check_dir_level depth-counter bypass
Relative Path Traversal vulnerability in Erlang OTP stdlib zip module allows writing files outside the intended extraction directory via a crafted zip archive. zip:unzip/1,2 and zip:extract/1,2 validate entry paths using zip:checkdirlevel/2, which tracks directory depth as a running integer...
CVE-2026-47078 Relative path traversal in zip:unzip/zip:extract via check_dir_level depth-counter bypass
Relative Path Traversal vulnerability in Erlang OTP stdlib zip module allows writing files outside the intended extraction directory via a crafted zip archive. zip:unzip/1,2 and zip:extract/1,2 validate entry paths using zip:checkdirlevel/2, which tracks directory depth as a running integer...
Important: perl-IO-Compress
Issue Overview: IO::Uncompress::Unzip versions before 2.220 for Perl allow CPU exhaustion via per-byte read loop in fastForward. fastForward compares length $offset the digit count of the offset, 1 to 19 against the chunk size $c instead of $offset itself, so $c shrinks from 16 KiB to 1-19 bytes...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: erlang (UTSA-2026-006245)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006245 advisory. Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Erlang OTP stdlib modules allows Absolute Path Traversal, File...
SiYuan importSY/importZipMd: path traversal via multipart filename enables arbitrary file write
Summary POST /api/import/importSY and POST /api/import/importZipMd write uploaded archives to a path derived from the multipart filename field without sanitization, allowing an admin to write files to arbitrary locations outside the temp directory - including system paths that enable RCE. Details...
EUVD-2018-1793
Malware in sbrugna...
EUVD-2014-9718
Malware in sbrugna...