https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 18:40:12 +0000 https://cve.radiocsirt.org/vuln/bdu:2019-01302 bdu:2019-01302 https://cve.radiocsirt.org/vuln/bdu:2019-01302 https://cve.radiocsirt.org/vuln/euvd-2026-64899 EUVD-2026-64899 https://cve.radiocsirt.org/vuln/euvd-2026-64899 https://cve.radiocsirt.org/vuln/fkie_cve-2018-10916 <p>It has been discovered that lftp up to and including version 4.8.3 does not properly sanitize remote file names, leading to a loss of integrity on the local system when reverse mirroring is used. A remote attacker may trick a user to use reverse mirroring on an attacker controlled FTP server, resulting in the removal of all files in the current working directory of the victim&#39;s system.</p> <p>It has been discovered that lftp up to and including version 4.8.3 does not properly sanitize remote file names, leading to a loss of integrity on the local system when reverse mirroring is used. A remote attacker may trick a user to use reverse mirroring on an attacker controlled FTP server, resulting in the removal of all files in the current working directory of the victim&#39;s system.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-10916 https://cve.radiocsirt.org/vuln/ghsa-8mjf-52xq-g6h8 <p>It has been discovered that lftp up to and including version 4.8.3 does not properly sanitize remote file names, leading to a loss of integrity on the local system when reverse mirroring is used. A remote attacker may trick a user to use reverse mirroring on an attacker controlled FTP server, resulting in the removal of all files in the current working directory of the victim&#39;s system.</p> <p>It has been discovered that lftp up to and including version 4.8.3 does not properly sanitize remote file names, leading to a loss of integrity on the local system when reverse mirroring is used. A remote attacker may trick a user to use reverse mirroring on an attacker controlled FTP server, resulting in the removal of all files in the current working directory of the victim&#39;s system.</p> https://cve.radiocsirt.org/vuln/ghsa-8mjf-52xq-g6h8 https://cve.radiocsirt.org/vuln/gsd-2018-10916 gsd-2018-10916 https://cve.radiocsirt.org/vuln/gsd-2018-10916 https://cve.radiocsirt.org/vuln/opensuse-su-2019:1110-1 <p>Security update for lftp</p> <p>Security update for lftp</p> https://cve.radiocsirt.org/vuln/opensuse-su-2019:1110-1 https://cve.radiocsirt.org/vuln/suse-su-2019:0642-1 <p>Security update for lftp</p> <p>Security update for lftp</p> https://cve.radiocsirt.org/vuln/suse-su-2019:0642-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-10916 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: lftp, Ubuntu:16.04:LTS: lftp, Ubuntu:18.04:LTS: lftp</p> <p>It has been discovered that lftp up to and including version 4.8.3 does not properly sanitize remote file names, leading to a loss of integrity on the local system when reverse mirroring is used. A remote attacker may trick a user to use reverse mirroring on an attacker controlled FTP server, resulting in the removal of all files in the current working directory of the victim&#39;s system.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: lftp, Ubuntu:16.04:LTS: lftp, Ubuntu:18.04:LTS: lftp</p> <p>It has been discovered that lftp up to and including version 4.8.3 does not properly sanitize remote file names, leading to a loss of integrity on the local system when reverse mirroring is used. A remote attacker may trick a user to use reverse mirroring on an attacker controlled FTP server, resulting in the removal of all files in the current working directory of the victim&#39;s system.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-10916 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2548 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um beliebigen Programmcode auszuführen, einen Denial of Service Zustand herbeizuführen, einen Cross-Site-Scripting-Angriff durchzuführen, Informationen offenzulegen, Dateien zu manipulieren oder Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um beliebigen Programmcode auszuführen, einen Denial of Service Zustand herbeizuführen, einen Cross-Site-Scripting-Angriff durchzuführen, Informationen offenzulegen, Dateien zu manipulieren oder Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2548