Read the docs

NIH

Records10All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

NIH records in CISA KEV

No NIH vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

3 records in Libzip · all components

Priority MEDIUM 55

Integer overflow in the _zip_cdir_new function in zip_dirent.c in libzip 0.11.2 and earlier, as used in the ZIP extension in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 and other products, allows remot…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.27393 Published 2015-03-30 No fix listed CWE-189
Priority LOW 35

Integer overflow in the _zip_readcdir function in zip_open.c in libzip 0.10 allows remote attackers to execute arbitrary code via the size and offset values for the central directory in a zip archive, which triggers "imp…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02578 Published 2012-07-12 No fix listed CWE-189
Open these records in search →