Export limit exceeded: 425850 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2008-5374

bash: Insecure temporary file use in aliasconv.sh, aliasconv.bash, cshtobash (symlink attack)

bash-doc 3.2 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/cb#####.? temporary file, related to the (1) aliasconv.sh, (2) aliasconv.bash, and (3) cshtobash scripts.

CVSS 2.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Matthias Klose Redhat
Products
Bash-doc Enterprise Linux
CVE-2010-0831

fastjar: directory traversal vulnerabilities

Directory traversal vulnerability in the extract_jar function in jartool.c in FastJar 0.98 allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in a non-initial pathname component in a filename within a .jar archive, a related issue to CVE-2005-1080. NOTE: this vulnerability exists because of an incomplete fix for CVE-2006-3619.

CVSS 2.0 · 5.8 Medium EPSS 3.7% KEV · Not listed
Vendors
Matthias Klose Redhat
Products
Fastjar Enterprise Linux
CVE-2010-2322

fastjar: directory traversal vulnerabilities

Absolute path traversal vulnerability in the extract_jar function in jartool.c in FastJar 0.98 allows remote attackers to create or overwrite arbitrary files via a full pathname for a file within a .jar archive, a related issue to CVE-2010-0831. NOTE: this vulnerability exists because of an incomplete fix for CVE-2006-3619.

CVSS 2.0 · 2.6 Low EPSS 3.2% KEV · Not listed
Vendors
Matthias Klose Redhat
Products
Fastjar Enterprise Linux