CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-14452

Sigil before 0.9.16 is vulnerable to a directory traversal, allowing attackers to write arbitrary files via a ../ (dot dot slash) in a ZIP archive entry that is mishandled during extraction.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.027

EPSS Ranking 85.4%

CVSS Severity

CVSS v3 Score 7.5

CVSS v2 Score 5.0

References

Products affected by CVE-2019-14452

Flightcrew Project » Flightcrew » Version: 0.9.2

cpe:2.3:a:flightcrew_project:flightcrew:0.9.2
Sigil-Ebook » Sigil » Version: 0.4.1

cpe:2.3:a:sigil-ebook:sigil:0.4.1
Sigil-Ebook » Sigil » Version: 0.4.2

cpe:2.3:a:sigil-ebook:sigil:0.4.2
Sigil-Ebook » Sigil » Version: 0.5.0

cpe:2.3:a:sigil-ebook:sigil:0.5.0
Sigil-Ebook » Sigil » Version: 0.5.1

cpe:2.3:a:sigil-ebook:sigil:0.5.1
Sigil-Ebook » Sigil » Version: 0.5.2

cpe:2.3:a:sigil-ebook:sigil:0.5.2
Sigil-Ebook » Sigil » Version: 0.5.3

cpe:2.3:a:sigil-ebook:sigil:0.5.3
Sigil-Ebook » Sigil » Version: 0.6.0

cpe:2.3:a:sigil-ebook:sigil:0.6.0
Sigil-Ebook » Sigil » Version: 0.6.1

cpe:2.3:a:sigil-ebook:sigil:0.6.1
Sigil-Ebook » Sigil » Version: 0.6.2

cpe:2.3:a:sigil-ebook:sigil:0.6.2
Sigil-Ebook » Sigil » Version: 0.7.0

cpe:2.3:a:sigil-ebook:sigil:0.7.0
Sigil-Ebook » Sigil » Version: 0.7.1

cpe:2.3:a:sigil-ebook:sigil:0.7.1
Sigil-Ebook » Sigil » Version: 0.7.2

cpe:2.3:a:sigil-ebook:sigil:0.7.2
Sigil-Ebook » Sigil » Version: 0.7.3

cpe:2.3:a:sigil-ebook:sigil:0.7.3
Sigil-Ebook » Sigil » Version: 0.7.4

cpe:2.3:a:sigil-ebook:sigil:0.7.4
Sigil-Ebook » Sigil » Version: 0.8.0

cpe:2.3:a:sigil-ebook:sigil:0.8.0
Sigil-Ebook » Sigil » Version: 0.8.1

cpe:2.3:a:sigil-ebook:sigil:0.8.1
Sigil-Ebook » Sigil » Version: 0.8.2

cpe:2.3:a:sigil-ebook:sigil:0.8.2
Sigil-Ebook » Sigil » Version: 0.8.3

cpe:2.3:a:sigil-ebook:sigil:0.8.3
Sigil-Ebook » Sigil » Version: 0.8.4

cpe:2.3:a:sigil-ebook:sigil:0.8.4
Sigil-Ebook » Sigil » Version: 0.8.5

cpe:2.3:a:sigil-ebook:sigil:0.8.5
Sigil-Ebook » Sigil » Version: 0.8.6

cpe:2.3:a:sigil-ebook:sigil:0.8.6
Sigil-Ebook » Sigil » Version: 0.8.7

cpe:2.3:a:sigil-ebook:sigil:0.8.7
Sigil-Ebook » Sigil » Version: 0.8.900

cpe:2.3:a:sigil-ebook:sigil:0.8.900
Sigil-Ebook » Sigil » Version: 0.8.901

cpe:2.3:a:sigil-ebook:sigil:0.8.901
Sigil-Ebook » Sigil » Version: 0.9.0

cpe:2.3:a:sigil-ebook:sigil:0.9.0
Sigil-Ebook » Sigil » Version: 0.9.1

cpe:2.3:a:sigil-ebook:sigil:0.9.1
Sigil-Ebook » Sigil » Version: 0.9.10

cpe:2.3:a:sigil-ebook:sigil:0.9.10
Sigil-Ebook » Sigil » Version: 0.9.11

cpe:2.3:a:sigil-ebook:sigil:0.9.11
Sigil-Ebook » Sigil » Version: 0.9.12

cpe:2.3:a:sigil-ebook:sigil:0.9.12
Sigil-Ebook » Sigil » Version: 0.9.13

cpe:2.3:a:sigil-ebook:sigil:0.9.13
Sigil-Ebook » Sigil » Version: 0.9.14

cpe:2.3:a:sigil-ebook:sigil:0.9.14
Sigil-Ebook » Sigil » Version: 0.9.15

cpe:2.3:a:sigil-ebook:sigil:0.9.15
Sigil-Ebook » Sigil » Version: 0.9.2

cpe:2.3:a:sigil-ebook:sigil:0.9.2
Sigil-Ebook » Sigil » Version: 0.9.3

cpe:2.3:a:sigil-ebook:sigil:0.9.3
Sigil-Ebook » Sigil » Version: 0.9.4

cpe:2.3:a:sigil-ebook:sigil:0.9.4
Sigil-Ebook » Sigil » Version: 0.9.5

cpe:2.3:a:sigil-ebook:sigil:0.9.5
Sigil-Ebook » Sigil » Version: 0.9.6

cpe:2.3:a:sigil-ebook:sigil:0.9.6
Sigil-Ebook » Sigil » Version: 0.9.7

cpe:2.3:a:sigil-ebook:sigil:0.9.7
Sigil-Ebook » Sigil » Version: 0.9.8

cpe:2.3:a:sigil-ebook:sigil:0.9.8
Sigil-Ebook » Sigil » Version: 0.9.9

cpe:2.3:a:sigil-ebook:sigil:0.9.9
Canonical » Ubuntu Linux » Version: 16.04

cpe:2.3:o:canonical:ubuntu_linux:16.04
Canonical » Ubuntu Linux » Version: 18.04

cpe:2.3:o:canonical:ubuntu_linux:18.04
Canonical » Ubuntu Linux » Version: 19.04

cpe:2.3:o:canonical:ubuntu_linux:19.04

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-14452

Products

Pricing

Contact Us