https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 09:25:16 +0000 https://cve.radiocsirt.org/vuln/bdu:2018-00939 bdu:2018-00939 https://cve.radiocsirt.org/vuln/bdu:2018-00939 https://cve.radiocsirt.org/vuln/cnvd-2018-14225 cnvd-2018-14225 https://cve.radiocsirt.org/vuln/cnvd-2018-14225 https://cve.radiocsirt.org/vuln/euvd-2026-71268 EUVD-2026-71268 https://cve.radiocsirt.org/vuln/euvd-2026-71268 https://cve.radiocsirt.org/vuln/fkie_cve-2018-1002202 <p>zip4j before 1.3.3 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as &#39;Zip-Slip&#39;.</p> <p>zip4j before 1.3.3 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as &#39;Zip-Slip&#39;.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-1002202 https://cve.radiocsirt.org/vuln/ghsa-2rpm-4x8c-pvqg <p><strong>Affected:</strong> Maven: net.lingala.zip4j:zip4j</p> <p>zip4j before 1.3.3 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as &#39;Zip-Slip&#39;.</p> <p><strong>Affected:</strong> Maven: net.lingala.zip4j:zip4j</p> <p>zip4j before 1.3.3 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as &#39;Zip-Slip&#39;.</p> https://cve.radiocsirt.org/vuln/ghsa-2rpm-4x8c-pvqg https://cve.radiocsirt.org/vuln/gsd-2018-1002202 gsd-2018-1002202 https://cve.radiocsirt.org/vuln/gsd-2018-1002202 https://cve.radiocsirt.org/vuln/vde-2022-045 <p>PAS4000 is the software platform for the Automation System PSS 4000. PAS 4000 does not properly check pathnames contained in archives. An attacker can utilise this vulnerability to write arbitrary files, potentially leading to code execution.</p> <p>PAS4000 is the software platform for the Automation System PSS 4000. PAS 4000 does not properly check pathnames contained in archives. An attacker can utilise this vulnerability to write arbitrary files, potentially leading to code execution.</p> https://cve.radiocsirt.org/vuln/vde-2022-045