Skip to content
OpenAdvisories

Archive

25 July 2018

Vulnerabilities first published on this day (UTC), newest first.

← June 2018 2018 / July /25 August 2018 →
  1. 18
  2. 266
  3. 3113
  4. 416
  5. 5133
  6. 696
  7. 78
  8. 89
  9. 9431
  10. 1087
  11. 1198
  12. 1235
  13. 1386
  14. 14 
  15. 1512
  16. 1644
  17. 1732
  18. 18253
  19. 1956
  20. 20157
  21. 211
  22. 223
  23. 2361
  24. 2449
  25. 2533
  26. 2644
  27. 2777
  28. 289
  29. 2910
  30. 3014
  31. 31129
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.5
    CVE-2018-1002201 Public exploit EPSS 10%

    Improper Limitation of a Pathname to a Restricted Directory in zt-zip

    zt-zip before 1.13 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'.

    zeroturnaround zt-zip org.zeroturnaround:zt-zip Maven
  • Medium 6.5
    CVE-2018-1002202 Public exploit EPSS 13%

    Improper Limitation of a Pathname to a Restricted Directory in Zip4j

    zip4j before 1.3.3 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'.

    zip4j zip4j net.lingala.zip4j:zip4j Maven
  • Medium 5.5
    CVE-2018-1002200 Public exploit EPSS 12%

    Improper Limitation of a Pathname to a Restricted Directory in plexus-archiver

    plexus-archiver before 3.6.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in an archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'.

    Codehaus plexus-archiver plexus-archiver org.codehaus.plexus:plexus-archiver Debian Ubuntu Maven