Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: NIH Component: Libzip Clear all filters
TI-2015-02056 CVE-2015-2331 · GHSA-wfcw-88hm-m2xm

Integer overflow in the _zip_cdir_new function in zip_dirent.c in libzip 0.11.2 and…

Priority MEDIUM 55

Integer overflow in the _zip_cdir_new function in zip_dirent.c in libzip 0.11.2 and earlier, as used in the ZIP extension in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 and other products, allows remot…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.27393 Published 2015-03-30 No fix listed CWE-189
TI-2012-01069 CVE-2012-1163 · GHSA-29xg-c3jw-cp68

Integer overflow in the _zip_readcdir function in zip_open.c in libzip 0.10 allows remote…

Priority LOW 35

Integer overflow in the _zip_readcdir function in zip_open.c in libzip 0.10 allows remote attackers to execute arbitrary code via the size and offset values for the central directory in a zip archive, which triggers "imp…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02578 Published 2012-07-12 No fix listed CWE-189