https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 20:52:13 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-13871 bdu:2025-13871 https://cve.radiocsirt.org/vuln/bdu:2025-13871 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0621 certfr-2025-avi-0621 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0621 https://cve.radiocsirt.org/vuln/euvd-2026-340576 EUVD-2026-340576 https://cve.radiocsirt.org/vuln/euvd-2026-340576 https://cve.radiocsirt.org/vuln/fkie_cve-2025-4748 <p>Improper Limitation of a Pathname to a Restricted Directory (&#39;Path Traversal&#39;) vulnerability in Erlang OTP (stdlib modules) allows Absolute Path Traversal, File Manipulation. This vulnerability is associated with program files lib/stdlib/src/zip.erl and program routines zip:unzip/1, zip:unzip/2, zip:extract/1, zip:extract/2 unless the memory option is passed.</p> <p>This issue affects OTP from OTP 17.0 before OTP 28.0.1, OTP 27.3.4.1 and OTP 26.2.5.13, corresponding to stdlib from 2.0 before 7.0.1, 6.2.2.1 and 5.2.3.4.</p> <p>Improper Limitation of a Pathname to a Restricted Directory (&#39;Path Traversal&#39;) vulnerability in Erlang OTP (stdlib modules) allows Absolute Path Traversal, File Manipulation. This vulnerability is associated with program files lib/stdlib/src/zip.erl and program routines zip:unzip/1, zip:unzip/2, zip:extract/1, zip:extract/2 unless the memory option is passed.</p> <p>This issue affects OTP from OTP 17.0 before OTP 28.0.1, OTP 27.3.4.1 and OTP 26.2.5.13, corresponding to stdlib from 2.0 before 7.0.1, 6.2.2.1 and 5.2.3.4.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-4748 https://cve.radiocsirt.org/vuln/msrc_cve-2025-4748 msrc_CVE-2025-4748 https://cve.radiocsirt.org/vuln/msrc_cve-2025-4748 https://cve.radiocsirt.org/vuln/oesa-2025-1767 <p><strong>Affected:</strong> openEuler:24.03-LTS-SP1: erlang, openEuler:24.03-LTS-SP2: erlang, openEuler:20.03-LTS-SP4: erlang, openEuler:22.03-LTS-SP3: erlang, openEuler:22.03-LTS-SP4: erlang, openEuler:24.03-LTS: erlang</p> <p>Erlang is a general-purpose programming language and runtime environment. Erlang has built-in support for concurrency, distribution and fault tolerance. Erlang is used in several large telecommunication systems from Ericsson. Security Fix(es):</p> <p>Improper Limitation of a Pathname to a Restricted Directory (&amp;apos;Path Traversal&amp;apos;) vulnerability in Erlang OTP (stdlib modules) allows Absolute Path Traversal, File Manipulation. This vulnerability is associated with program files lib/stdlib/src/zip.erl and program routines zip:unzip/1, zip:unzip/2, zip:extract/1, zip:extract/2 unless the memory option is passed.</p> <p>This issue affects OTP from OTP 17.0 until OTP 28.0.1, OTP 27.3.4.1 and OTP 26.2.5.13, corresponding to stdlib from 2.0 until 7.0.1, 6.2.2.1 and 5.2.3.4.(CVE-2025-4748)</p> <p><strong>Affected:</strong> openEuler:24.03-LTS-SP1: erlang, openEuler:24.03-LTS-SP2: erlang, openEuler:20.03-LTS-SP4: erlang, openEuler:22.03-LTS-SP3: erlang, openEuler:22.03-LTS-SP4: erlang, openEuler:24.03-LTS: erlang</p> <p>Erlang is a general-purpose programming language and runtime environment. Erlang has built-in support for concurrency, distribution and fault tolerance. Erlang is used in several large telecommunication systems from Ericsson. Security Fix(es):</p> <p>Improper Limitation of a Pathname to a Restricted Directory (&amp;apos;Path Traversal&amp;apos;) vulnerability in Erlang OTP (stdlib modules) allows Absolute Path Traversal, File Manipulation. This vulnerability is associated with program files lib/stdlib/src/zip.erl and program routines zip:unzip/1, zip:unzip/2, zip:extract/1, zip:extract/2 unless the memory option is passed.</p> <p>This issue affects OTP from OTP 17.0 until OTP 28.0.1, OTP 27.3.4.1 and OTP 26.2.5.13, corresponding to stdlib from 2.0 until 7.0.1, 6.2.2.1 and 5.2.3.4.(CVE-2025-4748)</p> https://cve.radiocsirt.org/vuln/oesa-2025-1767 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10947-1 <p>erlang27-27.1.3-2.1 on GA media</p> <p>erlang27-27.1.3-2.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:10947-1 https://cve.radiocsirt.org/vuln/suse-su-2026:22082-1 <p>Security update for erlang</p> <p>Security update for erlang</p> https://cve.radiocsirt.org/vuln/suse-su-2026:22082-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-4748 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: erlang, Ubuntu:Pro:16.04:LTS: erlang, Ubuntu:Pro:18.04:LTS: erlang, Ubuntu:Pro:20.04:LTS: erlang, Ubuntu:22.04:LTS: erlang, Ubuntu:24.04:LTS: erlang, Ubuntu:25.10: erlang</p> <p>Improper Limitation of a Pathname to a Restricted Directory (&#39;Path Traversal&#39;) vulnerability in Erlang OTP (stdlib modules) allows Absolute Path Traversal, File Manipulation. This vulnerability is associated with program files lib/stdlib/src/zip.erl and program routines zip:unzip/1, zip:unzip/2, zip:extract/1, zip:extract/2 unless the memory option is passed. This issue affects OTP from OTP 17.0 before OTP 28.0.1, OTP 27.3.4.1 and OTP 26.2.5.13, corresponding to stdlib from 2.0 before 7.0.1, 6.2.2.1 and 5.2.3.4.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: erlang, Ubuntu:Pro:16.04:LTS: erlang, Ubuntu:Pro:18.04:LTS: erlang, Ubuntu:Pro:20.04:LTS: erlang, Ubuntu:22.04:LTS: erlang, Ubuntu:24.04:LTS: erlang, Ubuntu:25.10: erlang</p> <p>Improper Limitation of a Pathname to a Restricted Directory (&#39;Path Traversal&#39;) vulnerability in Erlang OTP (stdlib modules) allows Absolute Path Traversal, File Manipulation. This vulnerability is associated with program files lib/stdlib/src/zip.erl and program routines zip:unzip/1, zip:unzip/2, zip:extract/1, zip:extract/2 unless the memory option is passed. This issue affects OTP from OTP 17.0 before OTP 28.0.1, OTP 27.3.4.1 and OTP 26.2.5.13, corresponding to stdlib from 2.0 before 7.0.1, 6.2.2.1 and 5.2.3.4.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-4748 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1333 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Erlang/OTP ausnutzen, um Dateien zu manipulieren.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Erlang/OTP ausnutzen, um Dateien zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1333