https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 15:14:44 +0000 https://cve.radiocsirt.org/vuln/cnvd-2018-25377 cnvd-2018-25377 https://cve.radiocsirt.org/vuln/cnvd-2018-25377 https://cve.radiocsirt.org/vuln/euvd-2026-181524 EUVD-2026-181524 https://cve.radiocsirt.org/vuln/euvd-2026-181524 https://cve.radiocsirt.org/vuln/fkie_cve-2018-1797 <p>IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 using Enterprise bundle Archives (EBA) could allow a local attacker to traverse directories on the system. By persuading a victim to extract a specially-crafted ZIP archive containing &#34;dot dot slash&#34; sequences (../), an attacker could exploit this vulnerability to write to arbitrary files on the system. Note: This vulnerability is known as &#34;Zip-Slip&#34;. IBM X-Force ID: 149427.</p> <p>IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 using Enterprise bundle Archives (EBA) could allow a local attacker to traverse directories on the system. By persuading a victim to extract a specially-crafted ZIP archive containing &#34;dot dot slash&#34; sequences (../), an attacker could exploit this vulnerability to write to arbitrary files on the system. Note: This vulnerability is known as &#34;Zip-Slip&#34;. IBM X-Force ID: 149427.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-1797 https://cve.radiocsirt.org/vuln/ghsa-vm68-xcc6-2f3g <p>IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 using Enterprise bundle Archives (EBA) could allow a local attacker to traverse directories on the system. By persuading a victim to extract a specially-crafted ZIP archive containing &#34;dot dot slash&#34; sequences (../), an attacker could exploit this vulnerability to write to arbitrary files on the system. Note: This vulnerability is known as &#34;Zip-Slip&#34;. IBM X-Force ID: 149427.</p> <p>IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 using Enterprise bundle Archives (EBA) could allow a local attacker to traverse directories on the system. By persuading a victim to extract a specially-crafted ZIP archive containing &#34;dot dot slash&#34; sequences (../), an attacker could exploit this vulnerability to write to arbitrary files on the system. Note: This vulnerability is known as &#34;Zip-Slip&#34;. IBM X-Force ID: 149427.</p> https://cve.radiocsirt.org/vuln/ghsa-vm68-xcc6-2f3g https://cve.radiocsirt.org/vuln/gsd-2018-1797 gsd-2018-1797 https://cve.radiocsirt.org/vuln/gsd-2018-1797 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1594 <p>Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in IBM Tivoli Network Manager ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuführen.</p> <p>Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in IBM Tivoli Network Manager ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1594