Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
852 results · page 12 of 18
Jun 1, 2018Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 37 of 46).CVE-2018-11179 · Other software · Quest · reported by MITREHigh 8.8
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 37 of 46).
- Product
- Disk Backup
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comseclists.org
Jun 1, 2018Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 36 of 46).CVE-2018-11178 · Other software · Quest · reported by MITREHigh 8.8
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 36 of 46).
- Product
- Disk Backup
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comseclists.org
Jun 1, 2018Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 35 of 46).CVE-2018-11177 · Other software · Quest · reported by MITREHigh 8.8
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 35 of 46).
- Product
- Disk Backup
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comseclists.org
Jun 1, 2018Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 34 of 46).CVE-2018-11176 · Other software · Quest · reported by MITREHigh 8.8
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 34 of 46).
- Product
- Disk Backup
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comseclists.org
Jun 1, 2018Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 33 of 46).CVE-2018-11175 · Other software · Quest · reported by MITREHigh 8.8
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 33 of 46).
- Product
- Disk Backup
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comseclists.org
Jun 1, 2018Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 32 of 46).CVE-2018-11174 · Other software · Quest · reported by MITREHigh 8.8
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 32 of 46).
- Product
- Disk Backup
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comseclists.org
Jun 1, 2018Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 31 of 46).CVE-2018-11173 · Other software · Quest · reported by MITREHigh 8.8
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 31 of 46).
- Product
- Disk Backup
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comseclists.org
Jun 1, 2018Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 30 of 46).CVE-2018-11172 · Other software · Quest · reported by MITREHigh 8.8
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 30 of 46).
- Product
- Disk Backup
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comseclists.org
Jun 1, 2018Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 29 of 46).CVE-2018-11171 · Other software · Quest · reported by MITREHigh 8.8
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 29 of 46).
- Product
- Disk Backup
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comseclists.org
Jun 1, 2018Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 28 of 46).CVE-2018-11170 · Other software · Quest · reported by MITREHigh 8.8
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 28 of 46).
- Product
- Disk Backup
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comseclists.org
Jun 1, 2018Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 27 of 46).CVE-2018-11169 · Other software · Quest · reported by MITREHigh 8.8
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 27 of 46).
- Product
- Disk Backup
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comseclists.org
Jun 1, 2018Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 26 of 46).CVE-2018-11168 · Other software · Quest · reported by MITREHigh 8.8
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 26 of 46).
- Product
- Disk Backup
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comseclists.org
Jun 1, 2018Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 25 of 46).CVE-2018-11167 · Other software · Quest · reported by MITREHigh 8.8
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 25 of 46).
- Product
- Disk Backup
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comseclists.org
Jun 1, 2018Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 24 of 46).CVE-2018-11166 · Other software · Quest · reported by MITREHigh 8.8
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 24 of 46).
- Product
- Disk Backup
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comseclists.org
Jun 1, 2018Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 23 of 46).CVE-2018-11165 · Other software · Quest · reported by MITREHigh 8.8
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 23 of 46).
- Product
- Disk Backup
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comseclists.org
Jun 1, 2018Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 22 of 46).CVE-2018-11164 · Other software · Quest · reported by MITREHigh 8.8
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 22 of 46).
- Product
- Disk Backup
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comseclists.org
Jun 1, 2018Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 21 of 46).CVE-2018-11163 · Other software · Quest · reported by MITREHigh 7.2
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 21 of 46).
- Product
- Disk Backup
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comseclists.org
Jun 1, 2018Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 20 of 46).CVE-2018-11162 · Other software · Quest · reported by MITREHigh 8.8
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 20 of 46).
- Product
- Disk Backup
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comseclists.org
Jun 1, 2018Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 19 of 46).CVE-2018-11161 · Other software · Quest · reported by MITREHigh 8.8
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 19 of 46).
- Product
- Disk Backup
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comseclists.org
Jun 1, 2018Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 18 of 46).CVE-2018-11160 · Other software · Quest · reported by MITREHigh 8.8
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 18 of 46).
- Product
- Disk Backup
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comseclists.org
Jun 1, 2018Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 17 of 46).CVE-2018-11159 · Other software · Quest · reported by MITREHigh 8.8
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 17 of 46).
- Product
- Disk Backup
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comseclists.org
Jun 1, 2018Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 16 of 46).CVE-2018-11158 · Other software · Quest · reported by MITREHigh 8.8
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 16 of 46).
- Product
- Disk Backup
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comseclists.org
Jun 1, 2018Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 15 of 46).CVE-2018-11157 · Other software · Quest · reported by MITREHigh 8.8
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 15 of 46).
- Product
- Disk Backup
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comseclists.org
Jun 1, 2018Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 14 of 46).CVE-2018-11156 · Other software · Quest · reported by MITREHigh 8.8
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 14 of 46).
- Product
- Disk Backup
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comseclists.org
Jun 1, 2018Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 13 of 46).CVE-2018-11155 · Other software · Quest · reported by MITREHigh 8.8
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 13 of 46).
- Product
- Disk Backup
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comseclists.org
Jun 1, 2018Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 12 of 46).CVE-2018-11154 · Other software · Quest · reported by MITREHigh 8.8
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 12 of 46).
- Product
- Disk Backup
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comseclists.org
Jun 1, 2018Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 11 of 46).CVE-2018-11153 · Other software · Quest · reported by MITREHigh 8.8
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 11 of 46).
- Product
- Disk Backup
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comseclists.org
Jun 1, 2018Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 10 of 46).CVE-2018-11152 · Other software · Quest · reported by MITREHigh 8.8
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 10 of 46).
- Product
- Disk Backup
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comseclists.org
Jun 1, 2018Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 9 of 46).CVE-2018-11151 · Other software · Quest · reported by MITREHigh 7.2
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 9 of 46).
- Product
- Disk Backup
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comseclists.org
Jun 1, 2018Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 8 of 46).CVE-2018-11150 · Other software · Quest · reported by MITREHigh 8.8
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 8 of 46).
- Product
- Disk Backup
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comseclists.org
Jun 1, 2018Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 7 of 46).CVE-2018-11149 · Other software · Quest · reported by MITREHigh 8.8
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 7 of 46).
- Product
- Disk Backup
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comseclists.org
Jun 1, 2018Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 6 of 46).CVE-2018-11148 · Other software · Quest · reported by MITREHigh 8.8
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 6 of 46).
- Product
- Disk Backup
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comseclists.org
Jun 1, 2018Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 5 of 46).CVE-2018-11147 · Other software · Quest · reported by MITREHigh 8.8
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 5 of 46).
- Product
- Disk Backup
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comseclists.org
Jun 1, 2018Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 4 of 46).CVE-2018-11146 · Other software · Quest · reported by MITREHigh 8.8
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 4 of 46).
- Product
- Disk Backup
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comseclists.org
Jun 1, 2018Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 3 of 46).CVE-2018-11145 · Other software · Quest · reported by MITREHigh 8.8
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 3 of 46).
- Product
- Disk Backup
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comseclists.org
Jun 1, 2018Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 2 of 46).CVE-2018-11144 · Other software · Quest · reported by MITREHigh 8.8
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 2 of 46).
- Product
- Disk Backup
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comseclists.org
Jun 1, 2018Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 1 of 46).CVE-2018-11143 · Other software · Quest · reported by MITRECritical 9.8
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 1 of 46).
- Product
- Disk Backup
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comseclists.org
May 11, 2018The stub component of Absolute Computrace Agent V70.785 executes code from a disk's inter-partition space without requiring a digital signature for that code, wCVE-2009-5151 · Other software · Absolute · reported by MITREMedium 6.7
The stub component of Absolute Computrace Agent V70.785 executes code from a disk's inter-partition space without requiring a digital signature for that code, which allows attackers to execute code on the BIOS. This allows a privileged local user to achieve persistent control of BIOS behavior, independent of later disk changes.
- Product
- Computrace Agent
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcoresecurity.comcoresecurity.com
May 2, 2018XSS exists in Flexense DiskSorter Enterprise from v9.5.12 to v10.7.CVE-2018-10568 · Other software · Flexense · reported by MITREMedium 6.1
XSS exists in Flexense DiskSorter Enterprise from v9.5.12 to v10.7.
- Product
- Disksorter
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordblog.n0ipr0cs.ioseclists.org
May 2, 2018XSS exists in Flexense DiskSavvy Enterprise from v10.4 to v10.7.CVE-2018-10565 · Other software · Flexense · reported by MITREMedium 6.1
XSS exists in Flexense DiskSavvy Enterprise from v10.4 to v10.7.
- Product
- Disksavvy
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordblog.n0ipr0cs.ioseclists.org
May 2, 2018XSS exists in Flexense DiskPulse Enterprise from v10.4 to v10.7.CVE-2018-10564 · Other software · Flexense · reported by MITREMedium 6.1
XSS exists in Flexense DiskPulse Enterprise from v10.4 to v10.7.
- Product
- Diskpulse
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordblog.n0ipr0cs.ioseclists.org
May 2, 2018Flexense DiskBoss Enterprise v7.4.28 to v9.1.16 has XSS.CVE-2018-10294 · Other software · Flexense · reported by MITREMedium 6.1
Flexense DiskBoss Enterprise v7.4.28 to v9.1.16 has XSS.
- Product
- Diskboss
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordblog.n0ipr0cs.ioseclists.org
Apr 18, 2018In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 400 and SD 800, when writing the Full Disk Encryption key to cryptCVE-2014-10047 · Computers, phones & browsers · Qualcomm, Inc. · reported by product-security@qualcomm.comHigh 7.5
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 400 and SD 800, when writing the Full Disk Encryption key to crypto engine, information leak could occur.
- Product
- Snapdragon Mobile
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsource.android.com
Apr 13, 2018diffoscope before 77 writes to arbitrary locations on disk based on the contents of an untrusted archive.CVE-2017-0359 · Other software · Debian · reported by security@debian.orgCritical 9.8
diffoscope before 77 writes to arbitrary locations on disk based on the contents of an untrusted archive.
- Product
- diffoscope
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordbugs.debian.orgsecurity-tracker.debian.org
Mar 11, 2018The Password Manager Extension in Abine Blur 7.8.242* before 7.8.2428 allows attackers to bypass the Multi-Factor Authentication and macOS disk-encryption proteCVE-2018-7213 · Other software · Abine · reported by MITRECritical 9.8
The Password Manager Extension in Abine Blur 7.8.242* before 7.8.2428 allows attackers to bypass the Multi-Factor Authentication and macOS disk-encryption protection mechanisms, and consequently exfiltrate secured data, because the right-click context menu is not secured.
- Product
- Blur
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comseclists.org
Mar 6, 2018A vulnerability was discovered in oVirt 4.1.x before 4.1.9, where the combination of Enable Discard and Wipe After Delete flags for VM disks managed by oVirt, cCVE-2018-1062 · Other software · oVirt · reported by Red HatMedium 5.3
A vulnerability was discovered in oVirt 4.1.x before 4.1.9, where the combination of Enable Discard and Wipe After Delete flags for VM disks managed by oVirt, could cause a disk to be incompletely zeroed when removed from a VM. If the same storage blocks happen to be later allocated to a new disk attached to another VM, potentially sensitive data could be revealed to privileged users of that VM.
- Product
- oVirt
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comaccess.redhat.com
Feb 27, 2018A buffer overflow vulnerability in the control protocol of Disk Savvy Enterprise v10.4.18 allows remote attackers to execute arbitrary code by sending a craftedCVE-2018-6481 · Other software · Flexense · reported by MITRECritical 9.8
A buffer overflow vulnerability in the control protocol of Disk Savvy Enterprise v10.4.18 allows remote attackers to execute arbitrary code by sending a crafted packet to TCP port 9124.
- Product
- Disksavvy
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comgist.github.com
Feb 2, 2018An issue was discovered in Flexense DiskBoss 8.8.16 and earlier.CVE-2018-5261 · Other software · Flexense · reported by MITREHigh 8.1
An issue was discovered in Flexense DiskBoss 8.8.16 and earlier. Due to the usage of plaintext information from the handshake as input for the encryption key used for the encryption of the rest of the session, the server and client disclose sensitive information, such as the authentication credentials, to any man-in-the-middle (MiTM) listener.
- Product
- Diskboss
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 2, 2018In ZZIPlib 0.13.67, there is a bus error (when handling a disk64_trailer seek value) caused by loading of a misaligned address in the zzip_disk_findfirst functiCVE-2018-6542 · Other software · Gdraheim · reported by MITREMedium 6.5
In ZZIPlib 0.13.67, there is a bus error (when handling a disk64_trailer seek value) caused by loading of a misaligned address in the zzip_disk_findfirst function of zzip/mmapped.c.
- Product
- Zziplib
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 2, 2018In ZZIPlib 0.13.67, there is a bus error caused by loading of a misaligned address (when handling disk64_trailer local entries) in __zzip_fetch_disk_trailer (zzCVE-2018-6541 · Other software · Gdraheim · reported by MITREMedium 6.5
In ZZIPlib 0.13.67, there is a bus error caused by loading of a misaligned address (when handling disk64_trailer local entries) in __zzip_fetch_disk_trailer (zzip/zip.c). Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file.
- Product
- Zziplib
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordaccess.redhat.comgithub.com
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.