Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2026-85396

rubyzip before 3.4.0 Path Traversal in Zip::Entry#extract via Sibling-Directory Prefix

rubyzip versions before 3.4.0 contain a path traversal vulnerability in Zip::Entry#extract that fails to properly validate extraction paths using prefix comparison without trailing separators. Attackers can craft archive entries with names like ../upload_backup/owned.sh to write files outside the intended extraction directory into sibling paths sharing the destination prefix.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Rubyzip Rubyzip Project
Products
Rubyzip Rubyzip
CVE-2017-5946

rubygem-rubyzip: Directory traversal in the Zip::File component

The Zip::File component in the rubyzip gem before 1.2.1 for Ruby has a directory traversal vulnerability. If a site allows uploading of .zip files, an attacker can upload a malicious file that uses "../" pathname substrings to write arbitrary files to the filesystem.

CVSS 3.1 · 9.8 Critical EPSS 3.4% KEV · Not listed
Vendors
Debian Rubyzip Project
Products
Debian Linux Rubyzip
CVE-2018-1000544

rubyzip: arbitrary file write vulnerability / arbitrary code execution using a specially crafted zip file

rubyzip gem rubyzip version 1.2.1 and earlier contains a Directory Traversal vulnerability in Zip::File component that can result in write arbitrary files to the filesystem. This attack appear to be exploitable via If a site allows uploading of .zip files , an attacker can upload a malicious file that contains symlinks or files with absolute pathnames "../" to write arbitrary files to the filesystem..

CVSS 3.1 · 9.8 Critical EPSS 4.3% KEV · Not listed
Vendors
Debian Redhat Rubyzip Project
Products
Debian Linux Cloudforms Cloudforms Managementengine and 1 more