Поиск уязвимостей
Количество 5
Количество 5
CVE-2015-2060
cabextract before 1.6 does not properly check for leading slashes when extracting files, which allows remote attackers to conduct absolute directory traversal attacks via a malformed UTF-8 character that is changed to a UTF-8 encoded slash.
CVE-2015-2060
cabextract before 1.6 does not properly check for leading slashes when extracting files, which allows remote attackers to conduct absolute directory traversal attacks via a malformed UTF-8 character that is changed to a UTF-8 encoded slash.
CVE-2015-2060
cabextract before 1.6 does not properly check for leading slashes when ...
GHSA-frjv-h9wg-233r
cabextract before 1.6 does not properly check for leading slashes when extracting files, which allows remote attackers to conduct absolute directory traversal attacks via a malformed UTF-8 character that is changed to a UTF-8 encoded slash.
ALT-PU-2016-1082
ALT-PU-2016-1082: package `cabextract` update to version 1.6-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2015-2060 cabextract before 1.6 does not properly check for leading slashes when extracting files, which allows remote attackers to conduct absolute directory traversal attacks via a malformed UTF-8 character that is changed to a UTF-8 encoded slash. | CVSS3: 5.3 | 2% Низкий | почти 7 лет назад |
 | CVE-2015-2060 cabextract before 1.6 does not properly check for leading slashes when extracting files, which allows remote attackers to conduct absolute directory traversal attacks via a malformed UTF-8 character that is changed to a UTF-8 encoded slash. | CVSS3: 5.3 | 2% Низкий | почти 7 лет назад |
| CVE-2015-2060 cabextract before 1.6 does not properly check for leading slashes when ... | CVSS3: 5.3 | 2% Низкий | почти 7 лет назад |
| GHSA-frjv-h9wg-233r cabextract before 1.6 does not properly check for leading slashes when extracting files, which allows remote attackers to conduct absolute directory traversal attacks via a malformed UTF-8 character that is changed to a UTF-8 encoded slash. | 2% Низкий | больше 4 лет назад | |
| ALT-PU-2016-1082 ALT-PU-2016-1082: package `cabextract` update to version 1.6-alt1 | CVSS3: 8.8 | почти 11 лет назад |
Уязвимостей на страницу