GSD-2022-1007054 crypto: hisilicon/zip - fix mismatch in get/set sgl_sge_nr

crypto: hisilicon/zip - fix mismatch in get/set sglsgenr This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.75 by commit...

CVE-2022-37290

GNOME Nautilus 42.2 allows a NULL pointer dereference and getbasename application crash via a pasted ZIP archive...

DEBIAN-CVE-2022-37290

GNOME Nautilus 42.2 allows a NULL pointer dereference and getbasename application crash via a pasted ZIP archive...

CVE-2022-37290

GNOME Nautilus 42.2 allows a NULL pointer dereference and getbasename application crash via a pasted ZIP archive...

CVE-2022-37290

GNOME Nautilus 42.2 allows a NULL pointer dereference and getbasename application crash via a pasted ZIP archive...

UBUNTU-CVE-2022-37290

GNOME Nautilus 42.2 allows a NULL pointer dereference and getbasename application crash via a pasted ZIP archive...

Null pointer dereference

GNOME Nautilus 42.2 allows a NULL pointer dereference and getbasename application crash via a pasted ZIP archive...

Liferay Portal和Liferay DXP 路径遍历漏洞

Liferay Portal and Liferay DXP are both products of Liferay Inc.Liferay Portal is a J2EE-based portal solution. The solution uses technologies such as EJB as well as JMS and can be used as a Web publishing and sharing workspace, enterprise collaboration platform, social network, etc. Liferay DXP ...

CVE-2022-37290

GNOME Nautilus 42.2 allows a NULL pointer dereference and getbasename application crash via a pasted ZIP archive...

PT-2022-23908 · Gnome +4 · Gnome Nautilus +4

Name of the Vulnerable Software and Affected Versions: GNOME Nautilus version 42.2 Description: The issue allows a NULL pointer dereference and get basename application crash via a pasted ZIP archive. Recommendations: For GNOME Nautilus version 42.2, consider avoiding the use of pasted ZIP archiv...

CVE-2022-37290

CVE-2022-37290 affects GNOME Nautilus (GNOME Nautilus 42.2) and is triggered by pasting a crafted ZIP archive, causing a NULL pointer dereference and an application crash. The vulnerability is exploitable locally with low privileges and no user interaction required, per the CVSS data. Several con...

PT-2022-35512 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.150 Description: The issue is related to a mismatch in get/set sgl sge nr in the hisilicon/zip crypto module. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

GNOME Nautilus 代码问题漏洞

GNOME Nautilus is a file manager for use in the GNOME desktop environment. A security vulnerability exists in GNOME Nautilus version 42.2, which allows an attacker to implement a null pointer reference and cause the getbasename application to crash by pasting a ZIP archive...

CVE-2022-37290

GNOME Nautilus 42.2 allows a NULL pointer dereference and getbasename application crash via a pasted ZIP archive...

CVE-2022-37290

GNOME Nautilus 42.2 allows a NULL pointer dereference and getbasename application crash via a pasted ZIP archive...

Liferay Portal和Liferay DXP 路径遍历漏洞

Liferay Portal and Liferay DXP are both products of Liferay Inc.Liferay Portal is a J2EE-based portal solution. The solution uses technologies such as EJB as well as JMS and can be used as a Web publishing and sharing workspace, enterprise collaboration platform, social network, etc. Liferay DXP ...

CVE-2022-37290

GNOME Nautilus 42.2 allows a NULL pointer dereference and getbasename application crash via a pasted ZIP archive...

PT-2022-5440

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to a security feature bypass vulnerability in the Windows Mark of the Web mechanism, which is associated with errors in security settings. This vulnerability can be...

GHSA-94RR-4JR5-9H2P Apache Ivy does not verify target path when extracting the archive

With Apache Ivy 2.4.0 an optional packaging attribute has been introduced that allows artifacts to be unpacked on the fly if they used pack200 or zip packaging. For artifacts using the "zip", "jar" or "war" packaging Ivy prior to version 2.5.1 doesn't verify the target path when extracting the...

CVE-2022-2711

The Import any XML or CSV File to WordPress plugin before 3.6.9 is not validating the paths of files contained in uploaded zip archives, allowing highly privileged users, such as admins, to write arbitrary files to any part of the file system accessible by the web server via a path traversal vect...