Advisories · Technology
pandora.
Every CVE that names pandora among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.3 CriticalCritical · CVSS 9+
Path traversal in Pandora archive extractor allows arbitrary file writes outside the extraction directory in pandora analysis
- pandora
- Path traversal
- CVSS 7.0 High
Stored Cross-Site Scripting in URL Observables via Lookyloo Submission Handler in Pandora
- pandora
- Cross-site scripting (XSS)
- CVSS 6.9 Medium
Stored Cross-Site Scripting via MIME-Type Confusion in PDF Downloads of Pandora
- pandora
- Cross-site scripting (XSS)
- CVSS 8.7 High
Unbounded DAA Decompression in Pandora Allows Denial of Service via Decompression Bomb
- pandora
- Unrestricted file upload
- CVSS 10.0 CriticalCritical · CVSS 9+
Path Traversal in TAR Archive Extraction Allows Arbitrary File Write in Pandora
- pandora
- Path traversal