12449 matches found
CVE-2023-39137
An issue in Archive v3.3.7 allows attackers to spoof zip filenames which can lead to inconsistent filename parsing...
CVE-2023-39138
An issue in ZIPFoundation v0.9.16 allows attackers to execute a path traversal via extracting a crafted zip file...
CVE-2023-39137
An issue in Archive v3.3.7 allows attackers to spoof zip filenames which can lead to inconsistent filename parsing...
CVE-2023-39135
An issue in Zip Swift v2.1.2 allows attackers to execute a path traversal attack via a crafted zip entry...
CVE-2023-39136
An unhandled edge case in the component sanitizedPath of ZipArchive v2.5.4 allows attackers to cause a Denial of Service DoS via a crafted zip file...
CVE-2023-39135
An issue in Zip Swift v2.1.2 allows attackers to execute a path traversal attack via a crafted zip entry...
CVE-2023-39136
An unhandled edge case in the component sanitizedPath of ZipArchive v2.5.4 allows attackers to cause a Denial of Service DoS via a crafted zip file...
Path traversal
An issue in ZIPFoundation v0.9.16 allows attackers to execute a path traversal via extracting a crafted zip file...
Path traversal
An issue in Zip Swift v2.1.2 allows attackers to execute a path traversal attack via a crafted zip entry...
Design/Logic Flaw
An unhandled edge case in the component sanitizedPath of ZipArchive v2.5.4 allows attackers to cause a Denial of Service DoS via a crafted zip file...
Path traversal
An issue in Archive v3.3.7 allows attackers to execute a path traversal via extracting a crafted zip file...
Exploit for Insufficient Verification of Data Authenticity in Rarlab Winrar
CVE-2023-38831 Winrar Exploit Generator POC This is a basic...
USN-6263-2 openjdk-lts, openjdk-17 regression
USN-6263-1 fixed vulnerabilities in OpenJDK. Unfortunately, that update introduced a regression when opening APK, ZIP or JAR files in OpenJDK 11 and OpenJDK 17. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Motoyasu Saburi discovered that OpenJDK...
CVE-2023-39139
An issue in Archive v3.3.7 allows attackers to execute a path traversal via extracting a crafted zip file...
PT-2023-26800 · Unknown · Zipfoundation
Name of the Vulnerable Software and Affected Versions: ZIPFoundation version 0.9.16 Description: An issue in ZIPFoundation allows attackers to execute a path traversal via extracting a crafted zip file. Recommendations: For ZIPFoundation version 0.9.16, update to a version that fixes this issue, ...
PT-2023-26797 · Zip Swift · Zip Swift
Name of the Vulnerable Software and Affected Versions: Zip Swift version 2.1.2 Description: The issue allows attackers to execute a path traversal attack via a crafted zip entry. This enables attackers to potentially access or modify files outside the intended directory, posing a security risk...
Zip Swift 路径遍历漏洞
Zip Swift is a Swift framework for compressing and decompressing files by individual developer Roy Marmelstein in Sweden. A security vulnerability exists in Zip Swift version v2.1.2, which stems from a vulnerability that allows an attacker to perform a path traversal attack via a crafted zip entr...
CVE-2023-39135
An issue in Zip Swift v2.1.2 allows attackers to execute a path traversal attack via a crafted zip entry...
PT-2023-26799 · Archive · Archive
Name of the Vulnerable Software and Affected Versions: Archive version 3.3.7 Description: The issue allows attackers to spoof zip filenames, leading to inconsistent filename parsing. Recommendations: For Archive version 3.3.7, consider restricting the parsing of zip filenames to minimize the risk...