https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 17:10:41 +0000 https://cve.radiocsirt.org/vuln/cnvd-2020-52393 cnvd-2020-52393 https://cve.radiocsirt.org/vuln/cnvd-2020-52393 https://cve.radiocsirt.org/vuln/euvd-2026-42382 EUVD-2026-42382 https://cve.radiocsirt.org/vuln/euvd-2026-42382 https://cve.radiocsirt.org/vuln/fkie_cve-2020-14352 <p>A flaw was found in librepo in versions before 1.12.1. A directory traversal vulnerability was found where it failed to sanitize paths in remote repository metadata. An attacker controlling a remote repository may be able to copy files outside of the destination directory on the targeted system via path traversal. This flaw could potentially result in system compromise via the overwriting of critical system files. The highest threat from this flaw is to users that make use of untrusted third-party repositories.</p> <p>A flaw was found in librepo in versions before 1.12.1. A directory traversal vulnerability was found where it failed to sanitize paths in remote repository metadata. An attacker controlling a remote repository may be able to copy files outside of the destination directory on the targeted system via path traversal. This flaw could potentially result in system compromise via the overwriting of critical system files. The highest threat from this flaw is to users that make use of untrusted third-party repositories.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-14352 https://cve.radiocsirt.org/vuln/ghsa-2fcv-8cvq-hmxh <p>A flaw was found in librepo in versions before 1.12.1. A directory traversal vulnerability was found where it failed to sanitize paths in remote repository metadata. An attacker controlling a remote repository may be able to copy files outside of the destination directory on the targeted system via path traversal. This flaw could potentially result in system compromise via the overwriting of critical system files. The highest threat from this flaw is to users that make use of untrusted third-party repositories.</p> <p>A flaw was found in librepo in versions before 1.12.1. A directory traversal vulnerability was found where it failed to sanitize paths in remote repository metadata. An attacker controlling a remote repository may be able to copy files outside of the destination directory on the targeted system via path traversal. This flaw could potentially result in system compromise via the overwriting of critical system files. The highest threat from this flaw is to users that make use of untrusted third-party repositories.</p> https://cve.radiocsirt.org/vuln/ghsa-2fcv-8cvq-hmxh https://cve.radiocsirt.org/vuln/gsd-2020-14352 gsd-2020-14352 https://cve.radiocsirt.org/vuln/gsd-2020-14352 https://cve.radiocsirt.org/vuln/msrc_cve-2020-14352 msrc_CVE-2020-14352 https://cve.radiocsirt.org/vuln/msrc_cve-2020-14352 https://cve.radiocsirt.org/vuln/oesa-2021-1055 <p><strong>Affected:</strong> openEuler:20.03-LTS: librepo, openEuler:20.03-LTS-SP1: librepo</p> <p>A library providing C and Python (libcURL like) API to downloading repository metadata. Security Fix(es): A flaw was found in librepo in versions before 1.12.1. A directory traversal vulnerability was found where it failed to sanitize paths in remote repository metadata. An attacker controlling a remote repository may be able to copy files outside of the destination directory on the targeted system via path traversal. This flaw could potentially result in system compromise via the overwriting of critical system files. The highest threat from this flaw is to users that make use of untrusted third-party repositories.(CVE-2020-14352)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS: librepo, openEuler:20.03-LTS-SP1: librepo</p> <p>A library providing C and Python (libcURL like) API to downloading repository metadata. Security Fix(es): A flaw was found in librepo in versions before 1.12.1. A directory traversal vulnerability was found where it failed to sanitize paths in remote repository metadata. An attacker controlling a remote repository may be able to copy files outside of the destination directory on the targeted system via path traversal. This flaw could potentially result in system compromise via the overwriting of critical system files. The highest threat from this flaw is to users that make use of untrusted third-party repositories.(CVE-2020-14352)</p> https://cve.radiocsirt.org/vuln/oesa-2021-1055 https://cve.radiocsirt.org/vuln/opensuse-su-2020:1289-1 <p>Security update for librepo</p> <p>Security update for librepo</p> https://cve.radiocsirt.org/vuln/opensuse-su-2020:1289-1 https://cve.radiocsirt.org/vuln/rhsa-2020:3749 <p>librepo: missing path validation in repomd.xml may lead to directory traversal</p> <p>librepo: missing path validation in repomd.xml may lead to directory traversal</p> https://cve.radiocsirt.org/vuln/rhsa-2020:3749 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0227 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in IBM QRadar SIEM ausnutzen, um seine Privilegien zu erweitern, Administratorrechte zu erlangen, beliebigen Programmcode auszuführen, Informationen offenzulegen, Dateien zu manipulieren oder Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in IBM QRadar SIEM ausnutzen, um seine Privilegien zu erweitern, Administratorrechte zu erlangen, beliebigen Programmcode auszuführen, Informationen offenzulegen, Dateien zu manipulieren oder Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0227