https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 21:50:39 +0000 https://cve.radiocsirt.org/vuln/cnvd-2017-02553 cnvd-2017-02553 https://cve.radiocsirt.org/vuln/cnvd-2017-02553 https://cve.radiocsirt.org/vuln/euvd-2026-73695 EUVD-2026-73695 https://cve.radiocsirt.org/vuln/euvd-2026-73695 https://cve.radiocsirt.org/vuln/fkie_cve-2017-5946 <p>The Zip::File component in the rubyzip gem before 1.2.1 for Ruby has a directory traversal vulnerability. If a site allows uploading of .zip files, an attacker can upload a malicious file that uses &#34;../&#34; pathname substrings to write arbitrary files to the filesystem.</p> <p>The Zip::File component in the rubyzip gem before 1.2.1 for Ruby has a directory traversal vulnerability. If a site allows uploading of .zip files, an attacker can upload a malicious file that uses &#34;../&#34; pathname substrings to write arbitrary files to the filesystem.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-5946 https://cve.radiocsirt.org/vuln/ghsa-gcqq-w6gr-h9j9 <p><strong>Affected:</strong> RubyGems: rubyzip</p> <p>The `Zip::File` component in the rubyzip gem before 1.2.1 for Ruby has a directory traversal vulnerability. If a site allows uploading of .zip files, an attacker can upload a malicious file that uses `../` pathname substrings to write arbitrary files to the filesystem.</p> <p><strong>Affected:</strong> RubyGems: rubyzip</p> <p>The `Zip::File` component in the rubyzip gem before 1.2.1 for Ruby has a directory traversal vulnerability. If a site allows uploading of .zip files, an attacker can upload a malicious file that uses `../` pathname substrings to write arbitrary files to the filesystem.</p> https://cve.radiocsirt.org/vuln/ghsa-gcqq-w6gr-h9j9 https://cve.radiocsirt.org/vuln/gsd-2017-5946 gsd-2017-5946 https://cve.radiocsirt.org/vuln/gsd-2017-5946 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11352-1 <p>ruby2.7-rubygem-rubyzip-2.3.2-1.2 on GA media</p> <p>ruby2.7-rubygem-rubyzip-2.3.2-1.2 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:11352-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-5946 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: ruby-zip</p> <p>The Zip::File component in the rubyzip gem before 1.2.1 for Ruby has a directory traversal vulnerability. If a site allows uploading of .zip files, an attacker can upload a malicious file that uses &#34;../&#34; pathname substrings to write arbitrary files to the filesystem.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: ruby-zip</p> <p>The Zip::File component in the rubyzip gem before 1.2.1 for Ruby has a directory traversal vulnerability. If a site allows uploading of .zip files, an attacker can upload a malicious file that uses &#34;../&#34; pathname substrings to write arbitrary files to the filesystem.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-5946