https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 01:09:55 +0000 https://cve.radiocsirt.org/vuln/alsa-2020:1653 <p><strong>Affected:</strong> AlmaLinux:8: zziplib-devel</p> <p>The zziplib is a lightweight library to easily extract data from zip files.</p> <p>Security Fix(es):</p> <p>* zziplib: directory traversal in unzzip_cat in the bins/unzzipcat-mem.c (CVE-2018-17828)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> <p><strong>Affected:</strong> AlmaLinux:8: zziplib-devel</p> <p>The zziplib is a lightweight library to easily extract data from zip files.</p> <p>Security Fix(es):</p> <p>* zziplib: directory traversal in unzzip_cat in the bins/unzzipcat-mem.c (CVE-2018-17828)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2020:1653 https://cve.radiocsirt.org/vuln/euvd-2026-68914 EUVD-2026-68914 https://cve.radiocsirt.org/vuln/euvd-2026-68914 https://cve.radiocsirt.org/vuln/fkie_cve-2018-17828 <p>Directory traversal vulnerability in ZZIPlib 0.13.69 allows attackers to overwrite arbitrary files via a .. (dot dot) in a zip file, because of the function unzzip_cat in the bins/unzzipcat-mem.c file.</p> <p>Directory traversal vulnerability in ZZIPlib 0.13.69 allows attackers to overwrite arbitrary files via a .. (dot dot) in a zip file, because of the function unzzip_cat in the bins/unzzipcat-mem.c file.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-17828 https://cve.radiocsirt.org/vuln/ghsa-g8rp-fvg9-52vv <p>Directory traversal vulnerability in ZZIPlib 0.13.69 allows attackers to overwrite arbitrary files via a .. (dot dot) in a zip file, because of the function unzzip_cat in the bins/unzzipcat-mem.c file.</p> <p>Directory traversal vulnerability in ZZIPlib 0.13.69 allows attackers to overwrite arbitrary files via a .. (dot dot) in a zip file, because of the function unzzip_cat in the bins/unzzipcat-mem.c file.</p> https://cve.radiocsirt.org/vuln/ghsa-g8rp-fvg9-52vv https://cve.radiocsirt.org/vuln/gsd-2018-17828 gsd-2018-17828 https://cve.radiocsirt.org/vuln/gsd-2018-17828 https://cve.radiocsirt.org/vuln/msrc_cve-2018-17828 msrc_CVE-2018-17828 https://cve.radiocsirt.org/vuln/msrc_cve-2018-17828 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11546-1 <p>libzzip-0-13-0.13.72-1.4 on GA media</p> <p>libzzip-0-13-0.13.72-1.4 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:11546-1 https://cve.radiocsirt.org/vuln/suse-su-2018:3220-1 <p>Security update for zziplib</p> <p>Security update for zziplib</p> https://cve.radiocsirt.org/vuln/suse-su-2018:3220-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-17828 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: zziplib, Ubuntu:Pro:18.04:LTS: zziplib, Ubuntu:20.04:LTS: zziplib, Ubuntu:22.04:LTS: zziplib, Ubuntu:24.04:LTS: zziplib, Ubuntu:25.10: zziplib, Ubuntu:26.04:LTS: zziplib</p> <p>Directory traversal vulnerability in ZZIPlib 0.13.69 allows attackers to overwrite arbitrary files via a .. (dot dot) in a zip file, because of the function unzzip_cat in the bins/unzzipcat-mem.c file.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: zziplib, Ubuntu:Pro:18.04:LTS: zziplib, Ubuntu:20.04:LTS: zziplib, Ubuntu:22.04:LTS: zziplib, Ubuntu:24.04:LTS: zziplib, Ubuntu:25.10: zziplib, Ubuntu:26.04:LTS: zziplib</p> <p>Directory traversal vulnerability in ZZIPlib 0.13.69 allows attackers to overwrite arbitrary files via a .. (dot dot) in a zip file, because of the function unzzip_cat in the bins/unzzipcat-mem.c file.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-17828 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2548 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um beliebigen Programmcode auszuführen, einen Denial of Service Zustand herbeizuführen, einen Cross-Site-Scripting-Angriff durchzuführen, Informationen offenzulegen, Dateien zu manipulieren oder Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um beliebigen Programmcode auszuführen, einen Denial of Service Zustand herbeizuführen, einen Cross-Site-Scripting-Angriff durchzuführen, Informationen offenzulegen, Dateien zu manipulieren oder Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2548