Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5

Export CSV
CVE-2024-57966

libarchiveplugin.cpp in KDE ark before 24.12.0 can extract to an absolute path from an archive.

CVSS 3.1 · 5 Medium EPSS < 1% KEV · Not listed
Vendors
Kde
Products
Ark
CVE-2017-5330

ark: Unintended execution of scripts and executable files

ark before 16.12.1 might allow remote attackers to execute arbitrary code via an executable in an archive, related to associated applications.

CVSS 3.0 · 7.8 High EPSS 3.1% KEV · Not listed
Vendors
Fedoraproject Kde
Products
Fedora Ark
CVE-2011-2725

kdeutils: Ark path traversal

Directory traversal vulnerability in Ark 4.7.x and earlier allows remote attackers to delete and force the display of arbitrary files via .. (dot dot) sequences in a zip file.

CVSS 2.0 · 6.8 Medium EPSS 3.0% KEV · Not listed
Vendors
Canonical Kde Opensuse
Products
Ubuntu Linux Ark Kde Sc and 1 more
CVE-2020-24654

ark: crafted TAR archive with symlinks can install files outside the extraction directory

In KDE Ark before 20.08.1, a crafted TAR archive with symlinks can install files outside the extraction directory, as demonstrated by a write operation to a user's home directory.

CVSS 3.1 · 3.3 Low EPSS 1.5% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 2 more
Products
Ubuntu Linux Debian Linux Fedora and 2 more
CVE-2020-16116

ark: maliciously crafted archive can install files anywhere in the user's home directory

In kerfuffle/jobs.cpp in KDE Ark before 20.08.0, a crafted archive can install files outside the extraction directory via ../ directory traversal.

CVSS 3.1 · 3.3 Low EPSS 1.7% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 2 more
Products
Ubuntu Linux Debian Linux Fedora and 2 more