Skip to content
OpenAdvisories

Archive

25 July 2018

Vulnerabilities first published on this day (UTC), newest first.

← June 2018 2018 / July /25 August 2018 →
  1. 18
  2. 266
  3. 3113
  4. 416
  5. 5133
  6. 696
  7. 78
  8. 89
  9. 9431
  10. 1087
  11. 1198
  12. 1235
  13. 1386
  14. 14 
  15. 1512
  16. 1644
  17. 1732
  18. 18253
  19. 1956
  20. 20157
  21. 211
  22. 223
  23. 2361
  24. 2449
  25. 2533
  26. 2644
  27. 2777
  28. 289
  29. 2910
  30. 3014
  31. 31129
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Medium 5.5
    CVE-2018-1002208

    Improper Limitation of a Pathname to a Restricted Directory in SharpZipLib

    SharpZipLib before 1.0 RC1 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'.

    SharpZipLib SharpZipLib mono mono Debian Ubuntu NuGet
  • Medium 5.5
    CVE-2018-1002203 EPSS 11%

    Arbitrary File Write via Archive Extraction in unzipper

    unzipper npm library before 0.8.13 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'.

    Node.js unzipper unzipper npm
  • Medium 5.5
    CVE-2018-1002201 Public exploit EPSS 10%

    Improper Limitation of a Pathname to a Restricted Directory in zt-zip

    zt-zip before 1.13 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'.

    zeroturnaround zt-zip org.zeroturnaround:zt-zip Maven
  • Medium 6.5
    CVE-2018-1002202 Public exploit EPSS 13%

    Improper Limitation of a Pathname to a Restricted Directory in Zip4j

    zip4j before 1.3.3 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'.

    zip4j zip4j net.lingala.zip4j:zip4j Maven
  • Medium 5.5
    CVE-2018-1002200 Public exploit EPSS 12%

    Improper Limitation of a Pathname to a Restricted Directory in plexus-archiver

    plexus-archiver before 3.6.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in an archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'.

    Codehaus plexus-archiver org.codehaus.plexus:plexus-archiver plexus-archiver Debian Ubuntu Maven
  • Medium 5.5
    CVE-2018-1002205 EPSS 10%

    DotNetZip Zip-Slip Vulnerability

    DotNetZip.Semvered before 1.11.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'.

    DotNetZip DotNetZip.Semvered DotNetZip NuGet
  • Medium 5.5
    CVE-2018-1002207

    Arbitrary File Write via Archive Extraction in mholt/archiver

    mholt/archiver golang package before e4ef56d48eb029648b0e895bb0b6a393ef0829c3 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in an archive entry that is mishandled during extraction. This vulnera…

    golang archiver github.com/mholt/archiver Go
  • Medium 5.5
    CVE-2018-1002206

    Directory Traversal in SharpCompress

    SharpCompress before 0.21.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'.

    SharpCompress SharpCompress SharpCompress NuGet
  • Medium 5.5
    CVE-2018-1002204 EPSS 13%

    Arbitrary File Write in adm-zip

    adm-zip npm library before 0.4.9 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'.

    Node.js adm-zip adm-zip npm
  • Medium 5.5
    CVE-2018-10880

    Linux kernel is vulnerable to a stack-out-of-bounds write in the ext4 filesystem code when mounting and writing to a cr…

    [UNKNOWN] kernel: linux-raspi2 linux-hwe Debian Ubuntu