https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T13:23:32.904521+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-02672 cnvd-2018-02672 2026-10-05T13:23:33.038094+00:00 cnvd-2018-02672 https://cve.radiocsirt.org/vuln/euvd-2026-80912 EUVD-2026-80912 2026-10-05T13:23:33.038139+00:00 EUVD-2026-80912 https://cve.radiocsirt.org/vuln/fkie_cve-2017-1000472 fkie_cve-2017-1000472 2026-10-05T13:23:33.038155+00:00

The ZipCommon::isValidPath() function in Zip/src/ZipCommon.cpp in POCO C++ Libraries before 1.8 does not properly restrict the filename value in the ZIP header, which allows attackers to conduct absolute path traversal attacks during the ZIP decompression, and possibly create or overwrite arbitrary files, via a crafted ZIP file, related to a "file path injection vulnerability".

 https://cve.radiocsirt.org/vuln/ghsa-46gc-5p3g-hwvg GHSA-46gc-5p3g-hwvg 2026-10-05T13:23:33.038188+00:00

The ZipCommon::isValidPath() function in Zip/src/ZipCommon.cpp in POCO C++ Libraries before 1.8 does not properly restrict the filename value in the ZIP header, which allows attackers to conduct absolute path traversal attacks during the ZIP decompression, and possibly create or overwrite arbitrary files, via a crafted ZIP file, related to a "file path injection vulnerability".

 https://cve.radiocsirt.org/vuln/gsd-2017-1000472 gsd-2017-1000472 2026-10-05T13:23:33.038208+00:00 gsd-2017-1000472 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-1000472 UBUNTU-CVE-2017-1000472 2026-10-05T13:23:33.038220+00:00

Affected: Ubuntu:14.04:LTS: poco, Ubuntu:16.04:LTS: poco

The ZipCommon::isValidPath() function in Zip/src/ZipCommon.cpp in POCO C++ Libraries before 1.8 does not properly restrict the filename value in the ZIP header, which allows attackers to conduct absolute path traversal attacks during the ZIP decompression, and possibly create or overwrite arbitrary files, via a crafted ZIP file, related to a "file path injection vulnerability".