CVE Browser

Search and filter CVEs by severity, ecosystem, EPSS score, and more.

Page 1

rubyzip before 3.4.0 Path Traversal in Zip::Entry#extract via Sibling-Directory Prefix

cfme: rubygem-rubyzip denial of service via crafted ZIP file

rubyzip: arbitrary file write vulnerability / arbitrary code execution using a specially crafted zip file

rubygem-rubyzip: Directory traversal in the Zip::File component

CVE ID	Description	Severity	CVSS	EPSS	Published
CVE-2026-85396	rubyzip before 3.4.0 Path Traversal in Zip::Entry#extract via Sibling-Directory Prefix	HIGH	8.7	0.56%	Sep 3, 2026
CVE-2019-16892	cfme: rubygem-rubyzip denial of service via crafted ZIP file	MEDIUM	5.5	1.58%	Sep 25, 2019
CVE-2018-1000544	rubyzip: arbitrary file write vulnerability / arbitrary code execution using a specially crafted zip file	CRITICAL	9.8	4.41%	Jun 26, 2018
CVE-2017-5946	rubygem-rubyzip: Directory traversal in the Zip::File component	CRITICAL	9.8	3.44%	Feb 27, 2017

Rows per page

Showing 1 to 4 CVEs · page 1