Lucene search
+L

12512 matches found

Veracode
Veracode
added 2021/07/15 12:46 a.m.39 views

Denial Of Service (DoS)

apache-ant:edge is vulnerable to denial of service. When reading a specially crafted ZIP archive, or a derived formats, an Apache Ant build can be made to allocate large amounts of memory that leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache...

5.5CVSS2.4AI score0.02642EPSS
SaveExploits0References16Affected Software2
RedhatCVE
RedhatCVE
added 2021/07/14 6:22 p.m.73 views

CVE-2021-36374

When reading a specially crafted ZIP archive, or a derived formats, an Apache Ant build can be made to allocate large amounts of memory that leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Commonly used derived formats from ZIP archives...

5.5CVSS2.2AI score0.02642EPSS
SaveExploits0References3
NVD
NVD
added 2021/07/14 2:15 p.m.34 views

CVE-2021-33211

A Directory Traversal vulnerability in the Unzip feature in Elements-IT HTTP Commander 5.3.3 allows remote authenticated users to write files to arbitrary directories via relative paths in ZIP archives...

6.5CVSS0.01705EPSS
SaveExploits1References2
OSV
OSV
added 2021/07/14 2:15 p.m.9 views

CVE-2021-33211

A Directory Traversal vulnerability in the Unzip feature in Elements-IT HTTP Commander 5.3.3 allows remote authenticated users to write files to arbitrary directories via relative paths in ZIP archives...

6.5CVSS5.9AI score0.01705EPSS
SaveExploits1References2
Prion
Prion
added 2021/07/14 2:15 p.m.27 views

Directory traversal

A Directory Traversal vulnerability in the Unzip feature in Elements-IT HTTP Commander 5.3.3 allows remote authenticated users to write files to arbitrary directories via relative paths in ZIP archives...

4CVSS6.3AI score0.01705EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2021/07/14 1:48 p.m.39 views

CVE-2021-33211

A Directory Traversal vulnerability in the Unzip feature in Elements-IT HTTP Commander 5.3.3 allows remote authenticated users to write files to arbitrary directories via relative paths in ZIP archives...

6.5AI score0.01705EPSS
SaveExploits1References2
CVE
CVE
added 2021/07/14 1:48 p.m.60 views

CVE-2021-33211

CVE-2021-33211 affects Elements-IT HTTP Commander 5.3.3, due to a path traversal flaw in the Unzip feature. The vulnerability allows remote authenticated users to write files to arbitrary directories by supplying relative paths inside ZIP archives, enabling potential data impact beyond the intend...

6.5CVSS6.2AI score0.01705EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2021/07/14 7:15 a.m.4 views

DEBIAN-CVE-2021-36374

When reading a specially crafted ZIP archive, or a derived formats, an Apache Ant build can be made to allocate large amounts of memory that leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Commonly used derived formats from ZIP archives...

5.5CVSS6.2AI score0.02642EPSS
SaveExploits0References1
OSV
OSV
added 2021/07/14 7:15 a.m.42 views

CVE-2021-36374

When reading a specially crafted ZIP archive, or a derived formats, an Apache Ant build can be made to allocate large amounts of memory that leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Commonly used derived formats from ZIP archives...

5.5CVSS6.6AI score
SaveExploits0References11
NVD
NVD
added 2021/07/14 7:15 a.m.27 views

CVE-2021-36374

When reading a specially crafted ZIP archive, or a derived formats, an Apache Ant build can be made to allocate large amounts of memory that leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Commonly used derived formats from ZIP archives...

5.5CVSS0.02642EPSS
SaveExploits0References11
OSV
OSV
added 2021/07/14 7:15 a.m.13 views

AZL-25954 CVE-2021-36374 affecting package javapackages-bootstrap for versions less than 1.5.0-6

When reading a specially crafted ZIP archive, or a derived formats, an Apache Ant build can be made to allocate large amounts of memory that leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Commonly used derived formats from ZIP archives...

5.5CVSS6.4AI score0.02642EPSS
SaveExploits0References1
Prion
Prion
added 2021/07/14 7:15 a.m.34 views

Design/Logic Flaw

When reading a specially crafted ZIP archive, or a derived formats, an Apache Ant build can be made to allocate large amounts of memory that leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Commonly used derived formats from ZIP archives...

4.3CVSS5.5AI score0.02642EPSS
SaveExploits0References11Affected Software36
UbuntuCve
UbuntuCve
added 2021/07/14 7:15 a.m.42 views

CVE-2021-36374

When reading a specially crafted ZIP archive, or a derived formats, an Apache Ant build can be made to allocate large amounts of memory that leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Commonly used derived formats from ZIP archives...

5.5CVSS6.5AI score0.02642EPSS
SaveExploits0References4
OSV
OSV
added 2021/07/14 7:15 a.m.10 views

UBUNTU-CVE-2021-36374

When reading a specially crafted ZIP archive, or a derived formats, an Apache Ant build can be made to allocate large amounts of memory that leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Commonly used derived formats from ZIP archives...

5.5CVSS6.9AI score0.02642EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2021/07/14 7:15 a.m.5 views

CVE-2021-36374

When reading a specially crafted ZIP archive, or a derived formats, an Apache Ant build can be made to allocate large amounts of memory that leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Commonly used derived formats from ZIP archives...

5.5CVSS6.5AI score0.02642EPSS
SaveExploits0References16Affected Software1
Debian CVE
Debian CVE
added 2021/07/14 6:20 a.m.37 views

CVE-2021-36374

When reading a specially crafted ZIP archive, or a derived formats, an Apache Ant build can be made to allocate large amounts of memory that leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Commonly used derived formats from ZIP archives...

5.5CVSS6.2AI score0.02642EPSS
SaveExploits0
CVE
CVE
added 2021/07/14 6:20 a.m.599 views

CVE-2021-36374

CVE-2021-36374 affects Apache Ant and causes denial of service via memory allocation when parsing specially crafted ZIP-based archives (and derived formats such as JARs and certain Office files). The vulnerability stems from how Ant reads these archives, enabling large memory use and out-of-memor...

5.5CVSS6.2AI score0.02642EPSS
SaveExploits0References11Affected Software1
Cvelist
Cvelist
added 2021/07/14 6:20 a.m.29 views

CVE-2021-36374 Apache Ant ZIP, and ZIP based, archive denial of service vulerability

When reading a specially crafted ZIP archive, or a derived formats, an Apache Ant build can be made to allocate large amounts of memory that leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Commonly used derived formats from ZIP archives...

6AI score0.02642EPSS
SaveExploits0References11
AlpineLinux
AlpineLinux
added 2021/07/14 6:20 a.m.74 views

CVE-2021-36374

When reading a specially crafted ZIP archive, or a derived formats, an Apache Ant build can be made to allocate large amounts of memory that leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Commonly used derived formats from ZIP archives...

5.5CVSS6.4AI score0.02642EPSS
SaveExploits0
CNNVD
CNNVD
added 2021/07/14 12:00 a.m.10 views

Elements-IT HTTP Commander 路径遍历漏洞

Elements-IT HTTP Commander is a server-hosted, web-based file management solution from Elements-IT Germany. It provides basic functionality for working with files creating, copying, deleting, etc. and many other additional features, such as integration with cloud services, online editing of Offic...

6.5CVSS6.8AI score0.01705EPSS
SaveExploits1References2
Rows per page
Query Builder