82 matches found
zip4j
zip4j This repository contains decompiled source code for the zip4j library versions 1.3.2 vulnerable and 1.3.3 fixed for CVE-2018-1002202, for the CWE-Bench-Java dataset. The original zip4j repository on Github doesn't include code from these versions. Versions Version 1.3.2 Vulnerable Tag : 1.3...
srikanth-lingala__zip4j_CVE-2018-1002202_1-3-2
zip4j This repository contains decompiled source code for the zip4j library versions 1.3.2 vulnerable and 1.3.3 fixed for CVE-2018-1002202, for the CWE-Bench-Java dataset. The original zip4j repository on Github doesn't include code from these versions. Versions Version 1.3.2 Vulnerable Tag : 1.3...
EUVD-2022-2044
Malicious code in bioql PyPI...
EUVD-2022-1146
Malicious code in bioql PyPI...
EUVD-2023-0309
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2023-22899
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Zip4j through 2.11.2, as used in Threema and other products, does not always check the MAC when decrypting a ZIP archive. CVE-2023-22899 Note that Nessus relies...
Linux Distros Unpatched Vulnerability : CVE-2022-24615
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - zip4j up to v2.10.0 can throw various uncaught exceptions while parsing a specially crafted ZIP file, which could result in an application crash. This could be...
Important: Red Hat Security Advisory: Migration Toolkit for Applications security and bug fix update
Migration Toolkit for Applications 6.2.0 release Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the...
zip4j: does not always check the MAC when decrypting a ZIP archive
A flaw was found in Zip4j. In this issue, it does not always check the MAC when decrypting a ZIP archive...
Oracle Access Manager Multiple Vulnerabilities (Apr 2023 CPU)
The version of Oracle Access Manager installed on the remote host is missing a security patch from the April 2023 CPU Advisory. It is, therefore, affected by multiple vulnerabilities: - Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Third Party Jython. T...
CVE-2023-22899
A flaw was found in Zip4j. In this issue, it does not always check the MAC when decrypting a ZIP archive...
K64709522: Multiple Zip Slip vulnerabilities
Security Advisory Description CVE-2018-1002200 plexus-archiver before 3.6.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ dot dot slash in an archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'...
Improper Signature Validation
Zip4j is vulnerable to Improper Signature Validation. The vulnerability is due to improper AES Message Authentication Code MAC validation when the MAC signature got corrupted in an encrypted ZIP archive. This flaw can result in an attacker modifying the archive without the library detecting the...
Security Bulletin: IBM App Connect Enterprise is affected by a remote attacker due to the zip4j library [CVE-2023-22899]
Summary IBM App Connect Enterprise Transformation Advisor tool is affected by a remote attacker due to the zip4j library CVE-2023-22899. The resolving ifix includes zip4j v2.11.3. Vulnerability Details CVEID:CVE-2023-22899 DESCRIPTION: Zip4j could provide weaker than expected security, caused by...
org.devopology:org.devopology.tools (>=1.0.0, <=2.2.0), org.devopology:tools (1.0.0) potentially affected by CVE-2023-22899 via net.lingala.zip4j:zip4j (1.2.9)
net.lingala.zip4j:zip4j MAVEN version 1.2.9 is affected by a known vulnerability. The following packages have a transitive dependency on net.lingala.zip4j:zip4j and may be impacted: - org.devopology:org.devopology.tools =1.0.0, =2.2.0 - org.devopology:tools 1.0.0 Source cves: CVE-2023-22899 Sourc...
ai.grakn:grakn-test (>=0.13.0, <=0.15.0), ai.grakn:test-integration (>=v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, <=1.4.3) +734 more potentially affected by CVE-2023-22899 via net.lingala.zip4j:zip4j (1.3.2)
net.lingala.zip4j:zip4j MAVEN version 1.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on net.lingala.zip4j:zip4j and may be impacted: - ai.grakn:grakn-test =0.13.0, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =1.11.0, =1.0.0, =1.0.1,...
cn.eova:eova (>=1.5.0, <=1.6.0), com.github.bogdanlivadariu:commons-reporting-handlebars (1.0.0) +67 more potentially affected by CVE-2023-22899 via net.lingala.zip4j:zip4j (1.3.1)
net.lingala.zip4j:zip4j MAVEN version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on net.lingala.zip4j:zip4j and may be impacted: - cn.eova:eova =1.5.0, =1.0, =0.4.3, =1.0.1, =0.7, =1.3.1, =1.2.2, =1.0.0.alpha3, =0.0.3, =2.0.0-rc1, =2.0.0-rc1,...
br.com.thiagomoreira.b3:b34j (1.1.0), cn.aotcloud:commons-tool (>=1.1, <=1.4.5) +553 more potentially affected by CVE-2023-22899 via net.lingala.zip4j:zip4j (>=2.0.2, <=2.11.2)
net.lingala.zip4j:zip4j MAVEN version =2.0.2, =1.1, =1.9.1, =1.5.1.beta, =1.5.1.beta, =1.5.1.beta, =1.5.1.beta, =1.0.0, =1.1.0, =0.1.40, =0.2.4 - cn.dev8:ktflux 1.4 and more Source cves: CVE-2023-22899 Source advisory: OSV:GHSA-2PJ2-GCHF-WMW7...
com.checkmarx.maven:checkmarx-maven-plugin (>=9.00.3, <=2022.2.3), com.checkmarx:cx-client-common (>=2021.1.135, <=2022.4.4) +55 more potentially affected by CVE-2023-22899 via net.lingala.zip4j:zip4j (1.3.3)
net.lingala.zip4j:zip4j MAVEN version 1.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on net.lingala.zip4j:zip4j and may be impacted: - com.checkmarx.maven:checkmarx-maven-plugin =9.00.3, =2021.1.135, =20.0.10, =0.4.65, =0.0.5, =2.6, =1.8.0, =1.8.0,...
br.com.thiagomoreira.b3:b34j (1.1.0), cn.aotcloud:commons-tool (>=1.1, <=1.4.5) +553 more potentially affected by CVE-2023-22899 via net.lingala.zip4j:zip4j (>=2.0.2, <=2.11.2)
net.lingala.zip4j:zip4j MAVEN version =2.0.2, =1.1, =1.9.1, =1.5.1.beta, =1.5.1.beta, =1.5.1.beta, =1.5.1.beta, =1.0.0, =1.1.0, =0.1.40, =0.2.4 - cn.dev8:ktflux 1.4 and more Source cves: CVE-2023-22899 Source advisory: GHSA-2PJ2-GCHF-WMW7...