https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 18 Oct 2026 21:25:36 +0000 https://cve.radiocsirt.org/vuln/cnvd-2018-12105 cnvd-2018-12105 https://cve.radiocsirt.org/vuln/cnvd-2018-12105 https://cve.radiocsirt.org/vuln/euvd-2026-181782 EUVD-2026-181782 https://cve.radiocsirt.org/vuln/euvd-2026-181782 https://cve.radiocsirt.org/vuln/fkie_cve-2018-1265 <p>Cloud Foundry Diego, release versions prior to 2.8.0, does not properly sanitize file paths in tar and zip files headers. A remote attacker with CF admin privileges can upload a malicious buildpack that will allow a complete takeover of a Diego Cell VM and access to all apps running on that Diego Cell.</p> <p>Cloud Foundry Diego, release versions prior to 2.8.0, does not properly sanitize file paths in tar and zip files headers. A remote attacker with CF admin privileges can upload a malicious buildpack that will allow a complete takeover of a Diego Cell VM and access to all apps running on that Diego Cell.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-1265 https://cve.radiocsirt.org/vuln/ghsa-q4p6-fc6x-phmp <p>Cloud Foundry Diego, release versions prior to 2.8.0, does not properly sanitize file paths in tar and zip files headers. A remote attacker with CF admin privileges can upload a malicious buildpack that will allow a complete takeover of a Diego Cell VM and access to all apps running on that Diego Cell.</p> <p>Cloud Foundry Diego, release versions prior to 2.8.0, does not properly sanitize file paths in tar and zip files headers. A remote attacker with CF admin privileges can upload a malicious buildpack that will allow a complete takeover of a Diego Cell VM and access to all apps running on that Diego Cell.</p> https://cve.radiocsirt.org/vuln/ghsa-q4p6-fc6x-phmp https://cve.radiocsirt.org/vuln/gsd-2018-1265 gsd-2018-1265 https://cve.radiocsirt.org/vuln/gsd-2018-1265