Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8
CVE-2023-49102
- EPSS 1.72%
- Published 22.11.2023 22:15:08
- Last modified 21.11.2024 08:32:49
NZBGet 21.1 allows authenticated remote code execution because the unarchive programs (7za and unrar) preserve executable file permissions. An attacker with the Control capability can execute a file by setting the value of SevenZipCommand or UnrarCmd...
4.4
CVE-2008-2266
- EPSS 0.05%
- Published 16.05.2008 12:54:00
- Last modified 09.04.2025 00:30:58
uulib/uunconc.c in UUDeview 0.5.20, as used in nzbget before 0.3.0 and possibly other products, allows local users to overwrite arbitrary files via a symlink attack on a temporary filename generated by the tempnam function. NOTE: this may be a CVE-2...
1