12551 matches found
Arbitrary File Write
Plexus Archiver Component is vulnerable to zip-slip vulnerability. The vulnerability exists when the attacker inputs a malicious zip archive with filenames including file traversal characters such as dot dot .., leading to concatenation of file path locating outside of the destination folder...
PHP 5.6.x < 5.6.19 Multiple Vulnerabilities
According to its banner, the version of PHP running on the remote web server is 5.6.x prior to 5.6.19. It is, therefore, affected by multiple vulnerabilities : - A use-after-free error exists in file ext/wddx/wddx.c in the phpwddxpopelement function when handling XML data. An unauthenticated,...
PHP 7.0.x < 7.0.4 Multiple Vulnerabilities
According to its banner, the version of PHP running on the remote web server is 7.0.x prior to 7.0.4. It is, therefore, affected by multiple vulnerabilities : - A type confusion error exists in file ext/soap/phphttp.c in the makehttpsoaprequest function when handling cookie data. An...
MGASA-2019-0005 Updated plexus-archiver packages fix security vulnerability
A path traversal vulnerability has been discovered in plexus-archiver when extracting a carefully crafted zip file which holds path traversal file names. A remote attacker could use this vulnerability to write files outside the target directory and overwrite existing files with malicious code or...
Updated plexus-archiver packages fix security vulnerability
A path traversal vulnerability has been discovered in plexus-archiver when extracting a carefully crafted zip file which holds path traversal file names. A remote attacker could use this vulnerability to write files outside the target directory and overwrite existing files with malicious code or...
MGASA-2019-0001 Updated pache-commons-compress packages fix security vulnerabilities
A flaw was found in Apache Commons Compress versions 1.11 to 1.15. A specially crafted ZIP archive can be used to cause an infinite loop inside of Apache Commons Compress' extra field parser used by the ZipFile and ZipArchiveInputStream classes in versions 1.11 to 1.15. This can be used to mount ...
Updated pache-commons-compress packages fix security vulnerabilities
A flaw was found in Apache Commons Compress versions 1.11 to 1.15. A specially crafted ZIP archive can be used to cause an infinite loop inside of Apache Commons Compress' extra field parser used by the ZipFile and ZipArchiveInputStream classes in versions 1.11 to 1.15. This can be used to mount ...
Fedora 28 : quazip (2018-0c586e5178)
2018-06-13 0.7.6 - Fixed the Zip Slip vulnerability in JlCompress - Renamed crypt.h to minizipcrypt.h to avoid conflicts - 2018-05-20 0.7.5 - Fixed targetlinklibraries call in CMakeLists - Worked around a Qt 4.6 bug QTBUG-15421 screwing up hidden files handling in JlCompress::compressDir -...
Fedora 28 : perl-Archive-Zip (2018-6abfa0012f)
This release fixes a directory and symbolic link traversal vulnerability in Archive::Zip::Archive Perl module that allows an attacker to writite into an arbitrary file accesible by a local user. Note that Tenable Network Security has extracted the preceding description block directly from the...
Fedora 28 : php (2018-9438795217)
PHP version 7.2.8 19 Jul 2018 Core: - Fixed bug php76534 PHP hangs on 'illegal string offset on string references with an error handler. Laruence - Fixed bug php76520 Object creation leaks memory when executed over HTTP. Nikita - Fixed bug php76502 Chain of mixed exceptions and errors does not...
Fedora 28 : plexus-archiver (2018-7a9a2f6ec0)
Security fix: arbitrary file write vulnerability / arbitrary code execution using a specially crafted zip file CVE-2018-1002200 A path traversal vulnerability has been discovered in plexus-archiver when extracting a carefully crafted zip file which holds path traversal file names. A remote attack...
The vulnerability of the EXTRACTOR_zip_extract_method() method in the GNU Libextractor library allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the EXTRACTORzipextractmethod method zipextractor.c in the GNU Libextractor library is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the...
LimeSurvey cross-site scripting vulnerability (CNVD-2018-26471)
LimeSurvey formerly known as PHPSurveyor is a set of open source online survey program developed by the LimeSurvey team, which supports survey program development, questionnaire distribution and data collection. A cross-site scripting vulnerability exists in LimeSurvey. A remote attacker can...
GHSA-6X48-J4X4-CQW3 Path Traversal in Hadoop
Apache Hadoop 3.1.0, 3.0.0-alpha to 3.0.2, 2.9.0 to 2.9.1, 2.8.0 to 2.8.4, 2.0.0-alpha to 2.7.6, 0.23.0 to 0.23.11 is exploitable via the zip slip vulnerability in places that accept a zip file...
Path Traversal in Hadoop
Apache Hadoop 3.1.0, 3.0.0-alpha to 3.0.2, 2.9.0 to 2.9.1, 2.8.0 to 2.8.4, 2.0.0-alpha to 2.7.6, 0.23.0 to 0.23.11 is exploitable via the zip slip vulnerability in places that accept a zip file...
The vulnerability of the list.c file in the Info-ZIP UnZip compressor allows a hacker to execute arbitrary code.
The vulnerability of the list.c file in the Info-ZIP UnZip compressor arises due to an overflow in the memory buffer. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Directory Traversal
rdf4j-util is vulnerable to directory traversal. An attacker is able to overwrite arbitrary files using the characters ../ as an entry in a ZIP archive. The overwrite occurs during decompressing of the ZIP file...
CVE-2018-20227
RDF4J 2.4.2 allows Directory Traversal via ../ in an entry in a ZIP archive...
