https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 11:44:55 +0000 https://cve.radiocsirt.org/vuln/cnvd-2018-13366 cnvd-2018-13366 https://cve.radiocsirt.org/vuln/cnvd-2018-13366 https://cve.radiocsirt.org/vuln/euvd-2026-71194 EUVD-2026-71194 https://cve.radiocsirt.org/vuln/euvd-2026-71194 https://cve.radiocsirt.org/vuln/fkie_cve-2018-1000544 <p>rubyzip gem rubyzip version 1.2.1 and earlier contains a Directory Traversal vulnerability in Zip::File component that can result in write arbitrary files to the filesystem. This attack appear to be exploitable via If a site allows uploading of .zip files , an attacker can upload a malicious file that contains symlinks or files with absolute pathnames &#34;../&#34; to write arbitrary files to the filesystem..</p> <p>rubyzip gem rubyzip version 1.2.1 and earlier contains a Directory Traversal vulnerability in Zip::File component that can result in write arbitrary files to the filesystem. This attack appear to be exploitable via If a site allows uploading of .zip files , an attacker can upload a malicious file that contains symlinks or files with absolute pathnames &#34;../&#34; to write arbitrary files to the filesystem..</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-1000544 https://cve.radiocsirt.org/vuln/ghsa-vqcq-mrmw-mcmg <p><strong>Affected:</strong> RubyGems: rubyzip</p> <p>rubyzip gem rubyzip version 1.2.1 and earlier contains a Directory Traversal vulnerability in Zip::File component that can result in write arbitrary files to the filesystem. This attack appear to be exploitable via If a site allows uploading of .zip files , an attacker can upload a malicious file that contains symlinks or files with absolute pathnames &#34;../&#34; to write arbitrary files to the filesystem..</p> <p>This is similar to CVE-2017-5946 which was patched in 1.2.1 but the fix in that case was incomplete.</p> <p><strong>Affected:</strong> RubyGems: rubyzip</p> <p>rubyzip gem rubyzip version 1.2.1 and earlier contains a Directory Traversal vulnerability in Zip::File component that can result in write arbitrary files to the filesystem. This attack appear to be exploitable via If a site allows uploading of .zip files , an attacker can upload a malicious file that contains symlinks or files with absolute pathnames &#34;../&#34; to write arbitrary files to the filesystem..</p> <p>This is similar to CVE-2017-5946 which was patched in 1.2.1 but the fix in that case was incomplete.</p> https://cve.radiocsirt.org/vuln/ghsa-vqcq-mrmw-mcmg https://cve.radiocsirt.org/vuln/gsd-2018-1000544 gsd-2018-1000544 https://cve.radiocsirt.org/vuln/gsd-2018-1000544 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11352-1 <p>ruby2.7-rubygem-rubyzip-2.3.2-1.2 on GA media</p> <p>ruby2.7-rubygem-rubyzip-2.3.2-1.2 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:11352-1 https://cve.radiocsirt.org/vuln/rhsa-2018:3466 <p>rubyzip: arbitrary file write vulnerability / arbitrary code execution using a specially crafted zip file</p> <p>rubyzip: arbitrary file write vulnerability / arbitrary code execution using a specially crafted zip file</p> https://cve.radiocsirt.org/vuln/rhsa-2018:3466 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-1000544 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: ruby-zip, Ubuntu:18.04:LTS: ruby-zip</p> <p>rubyzip gem rubyzip version 1.2.1 and earlier contains a Directory Traversal vulnerability in Zip::File component that can result in write arbitrary files to the filesystem. This attack appear to be exploitable via If a site allows uploading of .zip files , an attacker can upload a malicious file that contains symlinks or files with absolute pathnames &#34;../&#34; to write arbitrary files to the filesystem..</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: ruby-zip, Ubuntu:18.04:LTS: ruby-zip</p> <p>rubyzip gem rubyzip version 1.2.1 and earlier contains a Directory Traversal vulnerability in Zip::File component that can result in write arbitrary files to the filesystem. This attack appear to be exploitable via If a site allows uploading of .zip files , an attacker can upload a malicious file that contains symlinks or files with absolute pathnames &#34;../&#34; to write arbitrary files to the filesystem..</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-1000544