Export limit exceeded: 26253 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2020-7669

Arbitrary File Write via Archive Extraction (Zip Slip)

This affects all versions of package github.com/u-root/u-root/pkg/tarutil. It is vulnerable to both leading and non-leading relative path traversal attacks in tar file extraction.

CVSS 3.1 · 7.5 High EPSS 1.8% KEV · Not listed
Vendors
U-root
Products
U-root
CVE-2020-7666

Arbitrary File Write via Archive Extraction (Zip Slip)

This affects all versions of package github.com/u-root/u-root/pkg/cpio. It is vulnerable to leading, non-leading relative path traversal attacks and symlink based (relative and absolute) path traversal attacks in cpio file extraction.

CVSS 3.1 · 7.5 High EPSS 1.5% KEV · Not listed
Vendors
U-root
Products
U-root
CVE-2020-7665

Arbitrary File Write via Archive Extraction (Zip Slip)

This affects all versions of package github.com/u-root/u-root/pkg/uzip. It is vulnerable to both leading and non-leading relative path traversal attacks in zip file extraction.

CVSS 3.1 · 7.5 High EPSS 1.8% KEV · Not listed
Vendors
U-root
Products
U-root