Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
Vulnerability Details :

CVE-2010-1000

Summary
Assigner-flexera
Assigner Org ID-44d08088-2bea-4760-83a6-1e9be26b15ab
Published At-17 May, 2010 | 20:42
Updated At-07 Aug, 2024 | 01:06
Rejected At-
Credits

Directory traversal vulnerability in KGet in KDE SC 4.0.0 through 4.4.3 allows remote attackers to create arbitrary files via directory traversal sequences in the name attribute of a file element in a metalink file.

Vendors
-
Not available
Products
-
Metrics (CVSS)
VersionBase scoreBase severityVector
Weaknesses
Attack Patterns
Solution/Workaround
References
HyperlinkResource Type
EPSS History
Score
Latest Score
-
N/A
No data available for selected date range
Percentile
Latest Percentile
-
N/A
No data available for selected date range
Stakeholder-Specific Vulnerability Categorization (SSVC)
â–¼Common Vulnerabilities and Exposures (CVE)
cve.org
Assigner:flexera
Assigner Org ID:44d08088-2bea-4760-83a6-1e9be26b15ab
Published At:17 May, 2010 | 20:42
Updated At:07 Aug, 2024 | 01:06
Rejected At:
â–¼CVE Numbering Authority (CNA)

Directory traversal vulnerability in KGet in KDE SC 4.0.0 through 4.4.3 allows remote attackers to create arbitrary files via directory traversal sequences in the name attribute of a file element in a metalink file.

Affected Products
Vendor
n/a
Product
n/a
Versions
Affected
  • n/a
Problem Types
TypeCWE IDDescription
textN/An/a
Type: text
CWE ID: N/A
Description: n/a
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
http://www.securityfocus.com/bid/40141
vdb-entry
x_refsource_BID
http://www.ubuntu.com/usn/USN-938-1
vendor-advisory
x_refsource_UBUNTU
http://www.vupen.com/english/advisories/2011/1101
vdb-entry
x_refsource_VUPEN
http://secunia.com/advisories/42423
third-party-advisory
x_refsource_SECUNIA
http://www.securityfocus.com/archive/1/511294/100/0/threaded
mailing-list
x_refsource_BUGTRAQ
http://www.vupen.com/english/advisories/2010/1144
vdb-entry
x_refsource_VUPEN
http://www.mandriva.com/security/advisories?name=MDVSA-2010:098
vendor-advisory
x_refsource_MANDRIVA
http://secunia.com/secunia_research/2010-69/
x_refsource_MISC
https://exchange.xforce.ibmcloud.com/vulnerabilities/58628
vdb-entry
x_refsource_XF
http://www.securityfocus.com/archive/1/511281/100/0/threaded
mailing-list
x_refsource_BUGTRAQ
http://www.kde.org/info/security/advisory-20100513-1.txt
x_refsource_CONFIRM
http://www.vupen.com/english/advisories/2010/3096
vdb-entry
x_refsource_VUPEN
http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051692.html
vendor-advisory
x_refsource_FEDORA
http://marc.info/?l=oss-security&m=127378789518426&w=2
mailing-list
x_refsource_MLIST
http://secunia.com/advisories/39528
third-party-advisory
x_refsource_SECUNIA
http://www.vupen.com/english/advisories/2010/1142
vdb-entry
x_refsource_VUPEN
http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058580.html
vendor-advisory
x_refsource_FEDORA
http://securitytracker.com/id?1023984
vdb-entry
x_refsource_SECTRACK
http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html
vendor-advisory
x_refsource_SUSE
http://osvdb.org/64690
vdb-entry
x_refsource_OSVDB
http://secunia.com/advisories/39787
third-party-advisory
x_refsource_SECUNIA
Hyperlink: http://www.securityfocus.com/bid/40141
Resource:
vdb-entry
x_refsource_BID
Hyperlink: http://www.ubuntu.com/usn/USN-938-1
Resource:
vendor-advisory
x_refsource_UBUNTU
Hyperlink: http://www.vupen.com/english/advisories/2011/1101
Resource:
vdb-entry
x_refsource_VUPEN
Hyperlink: http://secunia.com/advisories/42423
Resource:
third-party-advisory
x_refsource_SECUNIA
Hyperlink: http://www.securityfocus.com/archive/1/511294/100/0/threaded
Resource:
mailing-list
x_refsource_BUGTRAQ
Hyperlink: http://www.vupen.com/english/advisories/2010/1144
Resource:
vdb-entry
x_refsource_VUPEN
Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2010:098
Resource:
vendor-advisory
x_refsource_MANDRIVA
Hyperlink: http://secunia.com/secunia_research/2010-69/
Resource:
x_refsource_MISC
Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/58628
Resource:
vdb-entry
x_refsource_XF
Hyperlink: http://www.securityfocus.com/archive/1/511281/100/0/threaded
Resource:
mailing-list
x_refsource_BUGTRAQ
Hyperlink: http://www.kde.org/info/security/advisory-20100513-1.txt
Resource:
x_refsource_CONFIRM
Hyperlink: http://www.vupen.com/english/advisories/2010/3096
Resource:
vdb-entry
x_refsource_VUPEN
Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051692.html
Resource:
vendor-advisory
x_refsource_FEDORA
Hyperlink: http://marc.info/?l=oss-security&m=127378789518426&w=2
Resource:
mailing-list
x_refsource_MLIST
Hyperlink: http://secunia.com/advisories/39528
Resource:
third-party-advisory
x_refsource_SECUNIA
Hyperlink: http://www.vupen.com/english/advisories/2010/1142
Resource:
vdb-entry
x_refsource_VUPEN
Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058580.html
Resource:
vendor-advisory
x_refsource_FEDORA
Hyperlink: http://securitytracker.com/id?1023984
Resource:
vdb-entry
x_refsource_SECTRACK
Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html
Resource:
vendor-advisory
x_refsource_SUSE
Hyperlink: http://osvdb.org/64690
Resource:
vdb-entry
x_refsource_OSVDB
Hyperlink: http://secunia.com/advisories/39787
Resource:
third-party-advisory
x_refsource_SECUNIA
â–¼Authorized Data Publishers (ADP)
CVE Program Container
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
http://www.securityfocus.com/bid/40141
vdb-entry
x_refsource_BID
x_transferred
http://www.ubuntu.com/usn/USN-938-1
vendor-advisory
x_refsource_UBUNTU
x_transferred
http://www.vupen.com/english/advisories/2011/1101
vdb-entry
x_refsource_VUPEN
x_transferred
http://secunia.com/advisories/42423
third-party-advisory
x_refsource_SECUNIA
x_transferred
http://www.securityfocus.com/archive/1/511294/100/0/threaded
mailing-list
x_refsource_BUGTRAQ
x_transferred
http://www.vupen.com/english/advisories/2010/1144
vdb-entry
x_refsource_VUPEN
x_transferred
http://www.mandriva.com/security/advisories?name=MDVSA-2010:098
vendor-advisory
x_refsource_MANDRIVA
x_transferred
http://secunia.com/secunia_research/2010-69/
x_refsource_MISC
x_transferred
https://exchange.xforce.ibmcloud.com/vulnerabilities/58628
vdb-entry
x_refsource_XF
x_transferred
http://www.securityfocus.com/archive/1/511281/100/0/threaded
mailing-list
x_refsource_BUGTRAQ
x_transferred
http://www.kde.org/info/security/advisory-20100513-1.txt
x_refsource_CONFIRM
x_transferred
http://www.vupen.com/english/advisories/2010/3096
vdb-entry
x_refsource_VUPEN
x_transferred
http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051692.html
vendor-advisory
x_refsource_FEDORA
x_transferred
http://marc.info/?l=oss-security&m=127378789518426&w=2
mailing-list
x_refsource_MLIST
x_transferred
http://secunia.com/advisories/39528
third-party-advisory
x_refsource_SECUNIA
x_transferred
http://www.vupen.com/english/advisories/2010/1142
vdb-entry
x_refsource_VUPEN
x_transferred
http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058580.html
vendor-advisory
x_refsource_FEDORA
x_transferred
http://securitytracker.com/id?1023984
vdb-entry
x_refsource_SECTRACK
x_transferred
http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html
vendor-advisory
x_refsource_SUSE
x_transferred
http://osvdb.org/64690
vdb-entry
x_refsource_OSVDB
x_transferred
http://secunia.com/advisories/39787
third-party-advisory
x_refsource_SECUNIA
x_transferred
Hyperlink: http://www.securityfocus.com/bid/40141
Resource:
vdb-entry
x_refsource_BID
x_transferred
Hyperlink: http://www.ubuntu.com/usn/USN-938-1
Resource:
vendor-advisory
x_refsource_UBUNTU
x_transferred
Hyperlink: http://www.vupen.com/english/advisories/2011/1101
Resource:
vdb-entry
x_refsource_VUPEN
x_transferred
Hyperlink: http://secunia.com/advisories/42423
Resource:
third-party-advisory
x_refsource_SECUNIA
x_transferred
Hyperlink: http://www.securityfocus.com/archive/1/511294/100/0/threaded
Resource:
mailing-list
x_refsource_BUGTRAQ
x_transferred
Hyperlink: http://www.vupen.com/english/advisories/2010/1144
Resource:
vdb-entry
x_refsource_VUPEN
x_transferred
Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2010:098
Resource:
vendor-advisory
x_refsource_MANDRIVA
x_transferred
Hyperlink: http://secunia.com/secunia_research/2010-69/
Resource:
x_refsource_MISC
x_transferred
Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/58628
Resource:
vdb-entry
x_refsource_XF
x_transferred
Hyperlink: http://www.securityfocus.com/archive/1/511281/100/0/threaded
Resource:
mailing-list
x_refsource_BUGTRAQ
x_transferred
Hyperlink: http://www.kde.org/info/security/advisory-20100513-1.txt
Resource:
x_refsource_CONFIRM
x_transferred
Hyperlink: http://www.vupen.com/english/advisories/2010/3096
Resource:
vdb-entry
x_refsource_VUPEN
x_transferred
Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051692.html
Resource:
vendor-advisory
x_refsource_FEDORA
x_transferred
Hyperlink: http://marc.info/?l=oss-security&m=127378789518426&w=2
Resource:
mailing-list
x_refsource_MLIST
x_transferred
Hyperlink: http://secunia.com/advisories/39528
Resource:
third-party-advisory
x_refsource_SECUNIA
x_transferred
Hyperlink: http://www.vupen.com/english/advisories/2010/1142
Resource:
vdb-entry
x_refsource_VUPEN
x_transferred
Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058580.html
Resource:
vendor-advisory
x_refsource_FEDORA
x_transferred
Hyperlink: http://securitytracker.com/id?1023984
Resource:
vdb-entry
x_refsource_SECTRACK
x_transferred
Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html
Resource:
vendor-advisory
x_refsource_SUSE
x_transferred
Hyperlink: http://osvdb.org/64690
Resource:
vdb-entry
x_refsource_OSVDB
x_transferred
Hyperlink: http://secunia.com/advisories/39787
Resource:
third-party-advisory
x_refsource_SECUNIA
x_transferred
Information is not available yet
â–¼National Vulnerability Database (NVD)
nvd.nist.gov
Source:PSIRT-CNA@flexerasoftware.com
Published At:17 May, 2010 | 21:00
Updated At:29 Apr, 2026 | 01:13

Directory traversal vulnerability in KGet in KDE SC 4.0.0 through 4.4.3 allows remote attackers to create arbitrary files via directory traversal sequences in the name attribute of a file element in a metalink file.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
Primary2.05.8MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:P
Type: Primary
Version: 2.0
Base score: 5.8
Base severity: MEDIUM
Vector:
AV:N/AC:M/Au:N/C:N/I:P/A:P
CPE Matches
KDE
kde
>>kde_sc>>4.0.0
cpe:2.3:a:kde:kde_sc:4.0.0:*:*:*:*:*:*:*
KDE
kde
>>kde_sc>>4.0.0
cpe:2.3:a:kde:kde_sc:4.0.0:alpha1:*:*:*:*:*:*
KDE
kde
>>kde_sc>>4.0.0
cpe:2.3:a:kde:kde_sc:4.0.0:alpha2:*:*:*:*:*:*
KDE
kde
>>kde_sc>>4.0.0
cpe:2.3:a:kde:kde_sc:4.0.0:beta1:*:*:*:*:*:*
KDE
kde
>>kde_sc>>4.0.0
cpe:2.3:a:kde:kde_sc:4.0.0:beta2:*:*:*:*:*:*
KDE
kde
>>kde_sc>>4.0.0
cpe:2.3:a:kde:kde_sc:4.0.0:beta3:*:*:*:*:*:*
KDE
kde
>>kde_sc>>4.0.0
cpe:2.3:a:kde:kde_sc:4.0.0:beta4:*:*:*:*:*:*
KDE
kde
>>kde_sc>>4.0.0
cpe:2.3:a:kde:kde_sc:4.0.0:rc1:*:*:*:*:*:*
KDE
kde
>>kde_sc>>4.0.0
cpe:2.3:a:kde:kde_sc:4.0.0:rc2:*:*:*:*:*:*
KDE
kde
>>kde_sc>>4.0.1
cpe:2.3:a:kde:kde_sc:4.0.1:*:*:*:*:*:*:*
KDE
kde
>>kde_sc>>4.0.2
cpe:2.3:a:kde:kde_sc:4.0.2:*:*:*:*:*:*:*
KDE
kde
>>kde_sc>>4.0.3
cpe:2.3:a:kde:kde_sc:4.0.3:*:*:*:*:*:*:*
KDE
kde
>>kde_sc>>4.0.4
cpe:2.3:a:kde:kde_sc:4.0.4:*:*:*:*:*:*:*
KDE
kde
>>kde_sc>>4.0.5
cpe:2.3:a:kde:kde_sc:4.0.5:*:*:*:*:*:*:*
KDE
kde
>>kde_sc>>4.1.0
cpe:2.3:a:kde:kde_sc:4.1.0:*:*:*:*:*:*:*
KDE
kde
>>kde_sc>>4.1.0
cpe:2.3:a:kde:kde_sc:4.1.0:alpha1:*:*:*:*:*:*
KDE
kde
>>kde_sc>>4.1.0
cpe:2.3:a:kde:kde_sc:4.1.0:beta1:*:*:*:*:*:*
KDE
kde
>>kde_sc>>4.1.0
cpe:2.3:a:kde:kde_sc:4.1.0:beta2:*:*:*:*:*:*
KDE
kde
>>kde_sc>>4.1.0
cpe:2.3:a:kde:kde_sc:4.1.0:rc:*:*:*:*:*:*
KDE
kde
>>kde_sc>>4.1.1
cpe:2.3:a:kde:kde_sc:4.1.1:*:*:*:*:*:*:*
KDE
kde
>>kde_sc>>4.1.2
cpe:2.3:a:kde:kde_sc:4.1.2:*:*:*:*:*:*:*
KDE
kde
>>kde_sc>>4.1.3
cpe:2.3:a:kde:kde_sc:4.1.3:*:*:*:*:*:*:*
KDE
kde
>>kde_sc>>4.1.4
cpe:2.3:a:kde:kde_sc:4.1.4:*:*:*:*:*:*:*
KDE
kde
>>kde_sc>>4.1.80
cpe:2.3:a:kde:kde_sc:4.1.80:*:*:*:*:*:*:*
KDE
kde
>>kde_sc>>4.1.85
cpe:2.3:a:kde:kde_sc:4.1.85:*:*:*:*:*:*:*
KDE
kde
>>kde_sc>>4.1.96
cpe:2.3:a:kde:kde_sc:4.1.96:*:*:*:*:*:*:*
KDE
kde
>>kde_sc>>4.2
cpe:2.3:a:kde:kde_sc:4.2:beta2:*:*:*:*:*:*
KDE
kde
>>kde_sc>>4.2
cpe:2.3:a:kde:kde_sc:4.2:rc:*:*:*:*:*:*
KDE
kde
>>kde_sc>>4.2.0
cpe:2.3:a:kde:kde_sc:4.2.0:*:*:*:*:*:*:*
KDE
kde
>>kde_sc>>4.2.1
cpe:2.3:a:kde:kde_sc:4.2.1:*:*:*:*:*:*:*
KDE
kde
>>kde_sc>>4.2.2
cpe:2.3:a:kde:kde_sc:4.2.2:*:*:*:*:*:*:*
KDE
kde
>>kde_sc>>4.2.3
cpe:2.3:a:kde:kde_sc:4.2.3:*:*:*:*:*:*:*
KDE
kde
>>kde_sc>>4.2.4
cpe:2.3:a:kde:kde_sc:4.2.4:*:*:*:*:*:*:*
KDE
kde
>>kde_sc>>4.3.0
cpe:2.3:a:kde:kde_sc:4.3.0:*:*:*:*:*:*:*
KDE
kde
>>kde_sc>>4.3.0
cpe:2.3:a:kde:kde_sc:4.3.0:beta1:*:*:*:*:*:*
KDE
kde
>>kde_sc>>4.3.0
cpe:2.3:a:kde:kde_sc:4.3.0:beta3:*:*:*:*:*:*
KDE
kde
>>kde_sc>>4.3.0
cpe:2.3:a:kde:kde_sc:4.3.0:rc1:*:*:*:*:*:*
KDE
kde
>>kde_sc>>4.3.0
cpe:2.3:a:kde:kde_sc:4.3.0:rc2:*:*:*:*:*:*
KDE
kde
>>kde_sc>>4.3.0
cpe:2.3:a:kde:kde_sc:4.3.0:rc3:*:*:*:*:*:*
KDE
kde
>>kde_sc>>4.3.1
cpe:2.3:a:kde:kde_sc:4.3.1:*:*:*:*:*:*:*
KDE
kde
>>kde_sc>>4.3.2
cpe:2.3:a:kde:kde_sc:4.3.2:*:*:*:*:*:*:*
KDE
kde
>>kde_sc>>4.3.3
cpe:2.3:a:kde:kde_sc:4.3.3:*:*:*:*:*:*:*
KDE
kde
>>kde_sc>>4.3.4
cpe:2.3:a:kde:kde_sc:4.3.4:*:*:*:*:*:*:*
KDE
kde
>>kde_sc>>4.3.5
cpe:2.3:a:kde:kde_sc:4.3.5:*:*:*:*:*:*:*
KDE
kde
>>kde_sc>>4.4.0
cpe:2.3:a:kde:kde_sc:4.4.0:*:*:*:*:*:*:*
KDE
kde
>>kde_sc>>4.4.0
cpe:2.3:a:kde:kde_sc:4.4.0:beta1:*:*:*:*:*:*
KDE
kde
>>kde_sc>>4.4.0
cpe:2.3:a:kde:kde_sc:4.4.0:beta2:*:*:*:*:*:*
KDE
kde
>>kde_sc>>4.4.0
cpe:2.3:a:kde:kde_sc:4.4.0:rc1:*:*:*:*:*:*
KDE
kde
>>kde_sc>>4.4.0
cpe:2.3:a:kde:kde_sc:4.4.0:rc2:*:*:*:*:*:*
KDE
kde
>>kde_sc>>4.4.0
cpe:2.3:a:kde:kde_sc:4.4.0:rc3:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
CWE-22Primarynvd@nist.gov
CWE ID: CWE-22
Type: Primary
Source: nvd@nist.gov
Evaluator Description
Evaluator Impact

Evaluator Solution

Per: http://www.kde.org/info/security/advisory-20100513-1.txt 'Patches have been committed to the KDE Subversion repository in the following revision numbers: 4.3 branch: r1126227 4.4 branch: r1124974 Trunk: r1124976'

Vendor Statements
References
HyperlinkSourceResource
http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051692.htmlPSIRT-CNA@flexerasoftware.com
N/A
http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058580.htmlPSIRT-CNA@flexerasoftware.com
N/A
http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.htmlPSIRT-CNA@flexerasoftware.com
N/A
http://marc.info/?l=oss-security&m=127378789518426&w=2PSIRT-CNA@flexerasoftware.com
N/A
http://osvdb.org/64690PSIRT-CNA@flexerasoftware.com
N/A
http://secunia.com/advisories/39528PSIRT-CNA@flexerasoftware.com
Vendor Advisory
http://secunia.com/advisories/39787PSIRT-CNA@flexerasoftware.com
Vendor Advisory
http://secunia.com/advisories/42423PSIRT-CNA@flexerasoftware.com
Vendor Advisory
http://secunia.com/secunia_research/2010-69/PSIRT-CNA@flexerasoftware.com
Vendor Advisory
http://securitytracker.com/id?1023984PSIRT-CNA@flexerasoftware.com
N/A
http://www.kde.org/info/security/advisory-20100513-1.txtPSIRT-CNA@flexerasoftware.com
Vendor Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2010:098PSIRT-CNA@flexerasoftware.com
N/A
http://www.securityfocus.com/archive/1/511281/100/0/threadedPSIRT-CNA@flexerasoftware.com
N/A
http://www.securityfocus.com/archive/1/511294/100/0/threadedPSIRT-CNA@flexerasoftware.com
N/A
http://www.securityfocus.com/bid/40141PSIRT-CNA@flexerasoftware.com
N/A
http://www.ubuntu.com/usn/USN-938-1PSIRT-CNA@flexerasoftware.com
N/A
http://www.vupen.com/english/advisories/2010/1142PSIRT-CNA@flexerasoftware.com
Vendor Advisory
http://www.vupen.com/english/advisories/2010/1144PSIRT-CNA@flexerasoftware.com
Vendor Advisory
http://www.vupen.com/english/advisories/2010/3096PSIRT-CNA@flexerasoftware.com
Vendor Advisory
http://www.vupen.com/english/advisories/2011/1101PSIRT-CNA@flexerasoftware.com
N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/58628PSIRT-CNA@flexerasoftware.com
N/A
http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051692.htmlaf854a3a-2127-422b-91ae-364da2661108
N/A
http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058580.htmlaf854a3a-2127-422b-91ae-364da2661108
N/A
http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.htmlaf854a3a-2127-422b-91ae-364da2661108
N/A
http://marc.info/?l=oss-security&m=127378789518426&w=2af854a3a-2127-422b-91ae-364da2661108
N/A
http://osvdb.org/64690af854a3a-2127-422b-91ae-364da2661108
N/A
http://secunia.com/advisories/39528af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://secunia.com/advisories/39787af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://secunia.com/advisories/42423af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://secunia.com/secunia_research/2010-69/af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://securitytracker.com/id?1023984af854a3a-2127-422b-91ae-364da2661108
N/A
http://www.kde.org/info/security/advisory-20100513-1.txtaf854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2010:098af854a3a-2127-422b-91ae-364da2661108
N/A
http://www.securityfocus.com/archive/1/511281/100/0/threadedaf854a3a-2127-422b-91ae-364da2661108
N/A
http://www.securityfocus.com/archive/1/511294/100/0/threadedaf854a3a-2127-422b-91ae-364da2661108
N/A
http://www.securityfocus.com/bid/40141af854a3a-2127-422b-91ae-364da2661108
N/A
http://www.ubuntu.com/usn/USN-938-1af854a3a-2127-422b-91ae-364da2661108
N/A
http://www.vupen.com/english/advisories/2010/1142af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://www.vupen.com/english/advisories/2010/1144af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://www.vupen.com/english/advisories/2010/3096af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://www.vupen.com/english/advisories/2011/1101af854a3a-2127-422b-91ae-364da2661108
N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/58628af854a3a-2127-422b-91ae-364da2661108
N/A
Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051692.html
Source: PSIRT-CNA@flexerasoftware.com
Resource: N/A
Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058580.html
Source: PSIRT-CNA@flexerasoftware.com
Resource: N/A
Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html
Source: PSIRT-CNA@flexerasoftware.com
Resource: N/A
Hyperlink: http://marc.info/?l=oss-security&m=127378789518426&w=2
Source: PSIRT-CNA@flexerasoftware.com
Resource: N/A
Hyperlink: http://osvdb.org/64690
Source: PSIRT-CNA@flexerasoftware.com
Resource: N/A
Hyperlink: http://secunia.com/advisories/39528
Source: PSIRT-CNA@flexerasoftware.com
Resource:
Vendor Advisory
Hyperlink: http://secunia.com/advisories/39787
Source: PSIRT-CNA@flexerasoftware.com
Resource:
Vendor Advisory
Hyperlink: http://secunia.com/advisories/42423
Source: PSIRT-CNA@flexerasoftware.com
Resource:
Vendor Advisory
Hyperlink: http://secunia.com/secunia_research/2010-69/
Source: PSIRT-CNA@flexerasoftware.com
Resource:
Vendor Advisory
Hyperlink: http://securitytracker.com/id?1023984
Source: PSIRT-CNA@flexerasoftware.com
Resource: N/A
Hyperlink: http://www.kde.org/info/security/advisory-20100513-1.txt
Source: PSIRT-CNA@flexerasoftware.com
Resource:
Vendor Advisory
Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2010:098
Source: PSIRT-CNA@flexerasoftware.com
Resource: N/A
Hyperlink: http://www.securityfocus.com/archive/1/511281/100/0/threaded
Source: PSIRT-CNA@flexerasoftware.com
Resource: N/A
Hyperlink: http://www.securityfocus.com/archive/1/511294/100/0/threaded
Source: PSIRT-CNA@flexerasoftware.com
Resource: N/A
Hyperlink: http://www.securityfocus.com/bid/40141
Source: PSIRT-CNA@flexerasoftware.com
Resource: N/A
Hyperlink: http://www.ubuntu.com/usn/USN-938-1
Source: PSIRT-CNA@flexerasoftware.com
Resource: N/A
Hyperlink: http://www.vupen.com/english/advisories/2010/1142
Source: PSIRT-CNA@flexerasoftware.com
Resource:
Vendor Advisory
Hyperlink: http://www.vupen.com/english/advisories/2010/1144
Source: PSIRT-CNA@flexerasoftware.com
Resource:
Vendor Advisory
Hyperlink: http://www.vupen.com/english/advisories/2010/3096
Source: PSIRT-CNA@flexerasoftware.com
Resource:
Vendor Advisory
Hyperlink: http://www.vupen.com/english/advisories/2011/1101
Source: PSIRT-CNA@flexerasoftware.com
Resource: N/A
Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/58628
Source: PSIRT-CNA@flexerasoftware.com
Resource: N/A
Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051692.html
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058580.html
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://marc.info/?l=oss-security&m=127378789518426&w=2
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://osvdb.org/64690
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://secunia.com/advisories/39528
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Vendor Advisory
Hyperlink: http://secunia.com/advisories/39787
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Vendor Advisory
Hyperlink: http://secunia.com/advisories/42423
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Vendor Advisory
Hyperlink: http://secunia.com/secunia_research/2010-69/
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Vendor Advisory
Hyperlink: http://securitytracker.com/id?1023984
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://www.kde.org/info/security/advisory-20100513-1.txt
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Vendor Advisory
Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2010:098
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://www.securityfocus.com/archive/1/511281/100/0/threaded
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://www.securityfocus.com/archive/1/511294/100/0/threaded
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://www.securityfocus.com/bid/40141
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://www.ubuntu.com/usn/USN-938-1
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://www.vupen.com/english/advisories/2010/1142
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Vendor Advisory
Hyperlink: http://www.vupen.com/english/advisories/2010/1144
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Vendor Advisory
Hyperlink: http://www.vupen.com/english/advisories/2010/3096
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Vendor Advisory
Hyperlink: http://www.vupen.com/english/advisories/2011/1101
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/58628
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A

Change History

0
Information is not available yet

Similar CVEs

58Records found
CVE-2015-0557
Matching Score-4
Assigner-Debian GNU/Linux
ShareView Details
Matching Score-4
Assigner-Debian GNU/Linux
CVSS Score-5.8||MEDIUM
EPSS-2.10% / 84.18%
||
7 Day CHG~0.00%
Published-08 Apr, 2015 | 18:00
Updated-06 May, 2026 | 22:30
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Open-source ARJ archiver 3.10.22 does not properly remove leading slashes from paths, which allows remote attackers to conduct absolute path traversal attacks and write to arbitrary files via multiple leading slashes in a path in an ARJ archive.

Action-Not Available
Vendor-arj_softwaren/aFedora Project
Product-arj_archiverfedoran/a
CWE ID-CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-20692
Matching Score-4
Assigner-JPCERT/CC
ShareView Details
Matching Score-4
Assigner-JPCERT/CC
CVSS Score-7.1||HIGH
EPSS-0.28% / 51.10%
||
7 Day CHG~0.00%
Published-07 Apr, 2021 | 07:15
Updated-03 Aug, 2024 | 17:45
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Directory traversal vulnerability in Archive collectively operation utility Ver.2.10.1.0 and earlier allows an attacker to create or overwrite files by leading a user to expand a malicious ZIP archives.

Action-Not Available
Vendor-eikisoftEikiSoft
Product-archive_collectively_operation_utilityArchive collectively operation utility
CWE ID-CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2014-0804
Matching Score-4
Assigner-JPCERT/CC
ShareView Details
Matching Score-4
Assigner-JPCERT/CC
CVSS Score-5.8||MEDIUM
EPSS-0.34% / 56.99%
||
7 Day CHG~0.00%
Published-12 Jan, 2014 | 15:00
Updated-29 Apr, 2026 | 01:13
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Directory traversal vulnerability in the CGENE Security File Manager Pro application 1.0.6 and earlier, and Security File Manager Trial application 1.0.6 and earlier, for Android allows attackers to overwrite or create arbitrary files via unspecified vectors.

Action-Not Available
Vendor-cgenen/a
Product-security_file_managern/a
CWE ID-CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2014-0802
Matching Score-4
Assigner-JPCERT/CC
ShareView Details
Matching Score-4
Assigner-JPCERT/CC
CVSS Score-5.8||MEDIUM
EPSS-0.28% / 51.12%
||
7 Day CHG~0.00%
Published-12 Jan, 2014 | 15:00
Updated-29 Apr, 2026 | 01:13
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Directory traversal vulnerability in the aokitaka ZIP with Pass application 4.5.7 and earlier, and ZIP with Pass Pro application 6.3.8 and earlier, for Android allows attackers to overwrite or create arbitrary files via unspecified vectors.

Action-Not Available
Vendor-aokitakan/a
Product-zip_with_passzip_with_pass_pron/a
CWE ID-CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2018-1999020
Matching Score-4
Assigner-MITRE Corporation
ShareView Details
Matching Score-4
Assigner-MITRE Corporation
CVSS Score-5.5||MEDIUM
EPSS-0.84% / 74.83%
||
7 Day CHG~0.00%
Published-23 Jul, 2018 | 15:00
Updated-17 Sep, 2024 | 02:58
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Open Networking Foundation (ONF) ONOS version 1.13.2 and earlier version contains a Directory Traversal vulnerability in core/common/src/main/java/org/onosproject/common/app/ApplicationArchive.java line 35 that can result in arbitrary file deletion (overwrite). This attack appear to be exploitable via a specially crafted zip file should be uploaded.

Action-Not Available
Vendor-opennetworkingn/a
Product-onosn/a
CWE ID-CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2018-17828
Matching Score-4
Assigner-MITRE Corporation
ShareView Details
Matching Score-4
Assigner-MITRE Corporation
CVSS Score-5.5||MEDIUM
EPSS-0.55% / 67.95%
||
7 Day CHG~0.00%
Published-01 Oct, 2018 | 08:00
Updated-10 Jul, 2025 | 15:44
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Directory traversal vulnerability in ZZIPlib 0.13.69 allows attackers to overwrite arbitrary files via a .. (dot dot) in a zip file, because of the function unzzip_cat in the bins/unzzipcat-mem.c file.

Action-Not Available
Vendor-gdraheimn/a
Product-zziplibn/a
CWE ID-CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2013-6127
Matching Score-4
Assigner-Cybersecurity and Infrastructure Security Agency (CISA) Industrial Control Systems (ICS)
ShareView Details
Matching Score-4
Assigner-Cybersecurity and Infrastructure Security Agency (CISA) Industrial Control Systems (ICS)
CVSS Score-5.8||MEDIUM
EPSS-4.22% / 88.84%
||
7 Day CHG~0.00%
Published-25 Oct, 2013 | 20:00
Updated-29 Apr, 2026 | 01:13
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

The SUPERGRIDLib.SuperGrid ActiveX control in SuperGrid.ocx before 65.30.30000.10002 in WellinTech KingView before 6.53 does not properly restrict ReplaceDBFile method calls, which allows remote attackers to create or overwrite arbitrary files, and subsequently execute arbitrary programs, via the two pathname arguments, as demonstrated by a directory traversal attack.

Action-Not Available
Vendor-wellintechn/a
Product-kingviewn/a
CWE ID-CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2013-4420
Matching Score-4
Assigner-Red Hat, Inc.
ShareView Details
Matching Score-4
Assigner-Red Hat, Inc.
CVSS Score-5.8||MEDIUM
EPSS-0.38% / 59.24%
||
7 Day CHG~0.00%
Published-20 Feb, 2014 | 16:00
Updated-29 Apr, 2026 | 01:13
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Multiple directory traversal vulnerabilities in the (1) tar_extract_glob and (2) tar_extract_all functions in libtar 1.2.20 and earlier allow remote attackers to overwrite arbitrary files via a .. (dot dot) in a crafted tar file.

Action-Not Available
Vendor-feepn/a
Product-libtarn/a
CWE ID-CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
  • Previous
  • 1
  • 2
  • Next
Details not found