cabextract project kayıtları
cabextract project üreticisine ait 9 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-193 Off-by-one Error2
- CWE-787 Out-of-bounds Write2
- CWE-189 Numeric Errors1
- CWE-20 Improper Input Validation1
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-399 Resource Management Errors1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
9 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
36İzleyin | CVE-2018-14682İstismar yok | An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha.cabextract · libmspack · CWE-193 | Yüksek8,8 | — | %3,7 | 28 Tem 2018 |
36İzleyin | CVE-2018-14681İstismar yok | An issue was discovered in kwajd_read_headers in mspack/kwajd.c in libmspack before 0.7alpha.cabextract · libmspack · CWE-787 | Yüksek8,8 | — | %3,7 | 28 Tem 2018 |
27İzleyin | CVE-2018-14680İstismar yok | An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha.cabextract · libmspack · CWE-20 | Orta6,5 | — | %3,7 | 28 Tem 2018 |
27İzleyin | CVE-2018-14679İstismar yok | An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha.cabextract · libmspack · CWE-193 | Orta6,5 | — | %3,2 | 28 Tem 2018 |
27İzleyin | CVE-2018-18584İstismar yok | In mspack/cab.h in libmspack before 0.8alpha and cabextract before 1.8, the CAB block input buffer is one byte too small for the maximal Quacabextract project · cabextract · CWE-787 | Orta6,5 | — | %3,0 | 22 Eki 2018 |
22İzleyin | CVE-2015-2060İstismar yok | cabextract before 1.6 does not properly check for leading slashes when extracting files, which allows remote attackers to conduct absolute dcabextract project · cabextract · CWE-22 | Orta5,3 | — | %2,3 | 29 Kas 2019 |
21İzleyin | CVE-2010-2801İstismar yok | Integer signedness error in the Quantum decompressor in cabextract before 1.3, when archive test mode is used, allows user-assisted remote acabextract project · cabextract · CWE-189 | Orta5,1 | — | %4,0 | 9 Ağu 2010 |
21İzleyin | CVE-2004-0916İstismar yok | Directory traversal vulnerability in cabextract before 1.1 allows remote attackers to overwrite arbitrary files via a cabinet file containincabextract project · cabextract | Orta5,0 | — | %3,5 | 27 Oca 2005 |
18İzleyin | CVE-2010-2800İstismar yok | The MS-ZIP decompressor in cabextract before 1.3 allows remote attackers to cause a denial of service (infinite loop) via a malformed MSZIP cabextract project · cabextract · CWE-399 | Orta4,3 | — | %2,2 | 9 Ağu 2010 |
- CVE-2018-1468236İzleyin
An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha.
YüksekCVSS 8,8İstismar yokEPSS %3cabextract · libmspack28 Tem 2018
- CVE-2018-1468136İzleyin
An issue was discovered in kwajd_read_headers in mspack/kwajd.c in libmspack before 0.7alpha.
YüksekCVSS 8,8İstismar yokEPSS %3cabextract · libmspack28 Tem 2018
- CVE-2018-1468027İzleyin
An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha.
OrtaCVSS 6,5İstismar yokEPSS %3cabextract · libmspack28 Tem 2018
- CVE-2018-1467927İzleyin
An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha.
OrtaCVSS 6,5İstismar yokEPSS %3cabextract · libmspack28 Tem 2018
- CVE-2018-1858427İzleyin
In mspack/cab.h in libmspack before 0.8alpha and cabextract before 1.8, the CAB block input buffer is one byte too small for the maximal Qua
OrtaCVSS 6,5İstismar yokEPSS %3cabextract project · cabextract22 Eki 2018
- CVE-2015-206022İzleyin
cabextract before 1.6 does not properly check for leading slashes when extracting files, which allows remote attackers to conduct absolute d
OrtaCVSS 5,3İstismar yokEPSS %2cabextract project · cabextract29 Kas 2019
- CVE-2010-280121İzleyin
Integer signedness error in the Quantum decompressor in cabextract before 1.3, when archive test mode is used, allows user-assisted remote a
OrtaCVSS 5,1İstismar yokEPSS %4cabextract project · cabextract9 Ağu 2010
- CVE-2004-091621İzleyin
Directory traversal vulnerability in cabextract before 1.1 allows remote attackers to overwrite arbitrary files via a cabinet file containin
OrtaCVSS 5,0İstismar yokEPSS %3cabextract project · cabextract27 Oca 2005
- CVE-2010-280018İzleyin
The MS-ZIP decompressor in cabextract before 1.3 allows remote attackers to cause a denial of service (infinite loop) via a malformed MSZIP
OrtaCVSS 4,3İstismar yokEPSS %2cabextract project · cabextract9 Ağu 2010