Lucene search
+L

12569 matches found

CNVD
CNVD
added 2018/07/26 12:00 a.m.15 views

sharplibzip directory traversal vulnerability

sharplibzip is a library for compression/decompression. A directory traversal vulnerability exists in sharplibzip versions prior to 1.0 RC1. The vulnerability can be exploited to write arbitrary files using a specially crafted zip archive with a directory traversal name...

5.5CVSS5.6AI score0.10191EPSS
SaveExploits1References1
CNVD
CNVD
added 2018/07/26 12:00 a.m.8 views

SharpCompress Directory Traversal Vulnerability

SharpCompress is a library for compression/decompression. A directory traversal vulnerability exists in SharpCompress versions prior to 0.21.0. The vulnerability can be exploited to write arbitrary files with a specially crafted zip archive file with a directory traversal name...

5.5CVSS5.9AI score0.10132EPSS
SaveExploits1References1
CNVD
CNVD
added 2018/07/26 12:00 a.m.12 views

zt-zip directory traversal vulnerability

zt-zip is a library for compression/decompression. A directory traversal vulnerability exists in zt-zip versions prior to 1.13. An attacker can exploit this vulnerability by writing arbitrary files with a specially crafted zip archive file with a directory traversal name...

5.8CVSS6.3AI score0.1035EPSS
SaveExploits2References1
OSV
OSV
added 2018/07/26 12:00 a.m.9 views

UBUNTU-CVE-2015-9261

huftbuild in archival/libarchive/decompressgunzip.c in BusyBox before 1.27.2 misuses a pointer, causing segfaults and an application crash during an unzip operation on a specially crafted ZIP file...

5.5CVSS6.8AI score0.02368EPSS
SaveExploits6References4
CNVD
CNVD
added 2018/07/26 12:00 a.m.5 views

plexus-archiver directory traversal vulnerability

plexus-archiver is a library for compression/decompression. A directory traversal vulnerability exists in plexus-archiver versions prior to 3.6.0. An attacker can exploit this vulnerability by writing to a file with a specially crafted zip archive file with a directory traversal name...

5.5CVSS5.7AI score0.13179EPSS
SaveExploits1References1
CNVD
CNVD
added 2018/07/26 12:00 a.m.11 views

QuaZIP Directory Traversal Vulnerability

QuaZIP is a C++ wrapper for accessing ZIP archives. A directory traversal vulnerability exists in QuaZIP versions prior to 0.7.6. The vulnerability can be exploited to write arbitrary files with the help of a specially crafted zip archive file with a directory traversal name...

5.5CVSS5.6AI score0.0595EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/07/26 12:00 a.m.16 views

ADM-ZIP Directory Traversal Vulnerability

adm-zip npm library is a Node.js-based JavaScript implementation that allows users to create, extract zip files in memory or on disk. A directory traversal vulnerability exists in versions of adm-zip npm library prior to 0.4.9. An attacker can exploit this vulnerability to write arbitrary files...

5.5CVSS5.8AI score0.15359EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
added 2018/07/26 12:00 a.m.54 views

CVE-2015-9261

huftbuild in archival/libarchive/decompressgunzip.c in BusyBox before 1.27.2 misuses a pointer, causing segfaults and an application crash during an unzip operation on a specially crafted ZIP file...

5.5CVSS6.8AI score0.02368EPSS
SaveExploits6References3
NVD
NVD
added 2018/07/25 5:29 p.m.22 views

CVE-2018-1002207

mholt/archiver golang package before e4ef56d48eb029648b0e895bb0b6a393ef0829c3 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ dot dot slash in an archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'...

5.5CVSS5.5AI score0.0253EPSS
SaveExploits1References5
OSV
OSV
added 2018/07/25 5:29 p.m.26 views

CVE-2018-1002207

mholt/archiver golang package before e4ef56d48eb029648b0e895bb0b6a393ef0829c3 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ dot dot slash in an archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'...

5.5CVSS6.7AI score
SaveExploits0References5
OSV
OSV
added 2018/07/25 5:29 p.m.11 views

DEBIAN-CVE-2018-1002209

QuaZIP before 0.7.6 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ dot dot slash in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'...

5.5CVSS7AI score0.0595EPSS
SaveExploits0References1
NVD
NVD
added 2018/07/25 5:29 p.m.21 views

CVE-2018-1002208

SharpZipLib before 1.0 RC1 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ dot dot slash in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'...

5.5CVSS5.4AI score0.10191EPSS
SaveExploits1References5
NVD
NVD
added 2018/07/25 5:29 p.m.26 views

CVE-2018-1002209

QuaZIP before 0.7.6 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ dot dot slash in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'...

5.5CVSS5.4AI score0.0595EPSS
SaveExploits0References4
OSV
OSV
added 2018/07/25 5:29 p.m.25 views

CVE-2018-1002208

SharpZipLib before 1.0 RC1 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ dot dot slash in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'...

5.5CVSS6.6AI score
SaveExploits0References5
OSV
OSV
added 2018/07/25 5:29 p.m.4 views

DEBIAN-CVE-2018-1002208

SharpZipLib before 1.0 RC1 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ dot dot slash in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'...

5.5CVSS5.5AI score0.10191EPSS
SaveExploits1References1
NVD
NVD
added 2018/07/25 5:29 p.m.23 views

CVE-2018-1002204

adm-zip npm library before 0.4.9 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ dot dot slash in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'...

5.5CVSS6.4AI score0.15359EPSS
SaveExploits1References6
OSV
OSV
added 2018/07/25 5:29 p.m.26 views

CVE-2018-1002206

SharpCompress before 0.21.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ dot dot slash in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'...

5.5CVSS6.7AI score
SaveExploits0References5
NVD
NVD
added 2018/07/25 5:29 p.m.27 views

CVE-2018-1002205

DotNetZip.Semvered before 1.11.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ dot dot slash in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'...

5.5CVSS5.8AI score0.10395EPSS
SaveExploits0References5
NVD
NVD
added 2018/07/25 5:29 p.m.27 views

CVE-2018-1002206

SharpCompress before 0.21.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ dot dot slash in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'...

5.5CVSS5.5AI score0.10132EPSS
SaveExploits1References5
NVD
NVD
added 2018/07/25 5:29 p.m.35 views

CVE-2018-1002203

unzipper npm library before 0.8.13 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ dot dot slash in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'...

5.5CVSS5.4AI score0.11917EPSS
SaveExploits1References5
Rows per page
Query Builder