12473 matches found
Driver Disk for Microsemi smartpqi 2.1.20-035 - For Citrix Hypervisor 8.2 LTSR
Who Should Install this Driver Disk? Customers running the Citrix Hypervisor 8.2 LTSR release who use Microsemi's smartpqi driver and wish to use the latest version of the following: Driver Module| Version ---|--- smartpqi| 2.1.20-035 Issues Resolved In this Driver Disk Includes general...
CVE-2022-4494
The CVE-2022-4494 entry affects bspkrs MCPMappingViewer, specifically the ZIP File Handler’s RemoteZipHandler.extractZip function. The root cause is a path traversal vulnerability in the extraction logic, which could be exploited remotely. The issue is documented with a patch identifier (6e602746...
PT-2022-27340 · Unknown · Bspkrs Mcpmappingviewer
Name of the Vulnerable Software and Affected Versions: bspkrs MCPMappingViewer affected versions not specified Description: A critical issue has been found in the extractZip function of the RemoteZipHandler.java file, part of the ZIP File Handler component. This issue leads to path traversal and...
PT-2022-27334 · Scifio · Scifio
Name of the Vulnerable Software and Affected Versions: scifio affected versions not specified Description: A critical vulnerability was found in scifio, affecting the function downloadAndUnpackResource of the file src/test/java/io/scif/util/DefaultSampleFilesService.java of the component ZIP File...
CVE-2022-4493 scifio ZIP File DefaultSampleFilesService.java downloadAndUnpackResource path traversal
A vulnerability classified as critical was found in scifio. Affected by this vulnerability is the function downloadAndUnpackResource of the file src/test/java/io/scif/util/DefaultSampleFilesService.java of the component ZIP File Handler. The manipulation leads to path traversal. The attack can be...
CVE-2022-4493
SCIFIO vulnerability CVE-2022-4493 affects the ZIP File Handler’s downloadAndUnpackResource in src/test/java/io/scif/util/DefaultSampleFilesService.java, enabling path traversal. The issue is remotely exploitable and tied to a patch identified by commit fcb0dbca0ec72b22fe0c9ddc8abc9cb188a0ff31. M...
CVE-2022-4493 scifio ZIP File DefaultSampleFilesService.java downloadAndUnpackResource path traversal
A vulnerability classified as critical was found in scifio. Affected by this vulnerability is the function downloadAndUnpackResource of the file src/test/java/io/scif/util/DefaultSampleFilesService.java of the component ZIP File Handler. The manipulation leads to path traversal. The attack can be...
CVE-2022-46140
Affected devices use a weak encryption scheme to encrypt the debug zip file. This could allow an authenticated attacker to decrypt the contents of the file and retrieve debug information about the system...
CVE-2022-46140
Affected devices use a weak encryption scheme to encrypt the debug zip file. This could allow an authenticated attacker to decrypt the contents of the file and retrieve debug information about the system...
Information disclosure
Affected devices use a weak encryption scheme to encrypt the debug zip file. This could allow an authenticated attacker to decrypt the contents of the file and retrieve debug information about the system...
PT-2022-27759 · Siemens · Ruggedcom Rm1224 Lte(4G) Eu +151
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns the use of a weak encryption scheme to encrypt the debug zip file. This weakness could allow an authenticated attacker to decrypt the...
CVE-2022-46140
CVE-2022-46140 affects Siemens RUGGEDCOM and SCALANCE devices. The vulnerability arises from using a weak encryption scheme to encrypt the debug zip file, which could allow an authenticated attacker to decrypt the file and retrieve debug information about the system. According to the sources, thi...
Arbitrary File Write via Archive Extraction (Zip Slip)
Overview github.com/snapcore/snapd/overlord/snapshotstate/backend is a The snapd and snap tools enable systems to work with .snap files. Affected versions of this package are vulnerable to Arbitrary File Write via Archive Extraction Zip Slip. When importing a snapshot...
CVE-2022-4402
A vulnerability classified as critical has been found in RainyGao DocSys 2.02.37. This affects an unknown part of the component ZIP File Decompression Handler. The manipulation leads to path traversal: '../filedir'. It is possible to initiate the attack remotely. The exploit has been disclosed to...
Path traversal
A vulnerability classified as critical has been found in RainyGao DocSys 2.02.37. This affects an unknown part of the component ZIP File Decompression Handler. The manipulation leads to path traversal: '../filedir'. It is possible to initiate the attack remotely. The exploit has been disclosed to...
CVE-2022-4402 RainyGao DocSys ZIP File Decompression path traversal
A vulnerability classified as critical has been found in RainyGao DocSys 2.02.37. This affects an unknown part of the component ZIP File Decompression Handler. The manipulation leads to path traversal: '../filedir'. It is possible to initiate the attack remotely. The exploit has been disclosed to...
CVE-2022-4402 RainyGao DocSys ZIP File Decompression path traversal
A vulnerability classified as critical has been found in RainyGao DocSys 2.02.37. This affects an unknown part of the component ZIP File Decompression Handler. The manipulation leads to path traversal: '../filedir'. It is possible to initiate the attack remotely. The exploit has been disclosed to...
SUSE SLED12: gnome-shell-search-provider-nautilus / libnautilus-extension1 / etc (SUSE-SU-2022:4394-1)
The remote SUSE Linux SLED12 / SLEDSAP12 / SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:4394-1 advisory. - CVE-2022-37290: Fixed a denial of service caused by pasted ZIP archives bsc1205418. Tenable has extracted the precedi...