CVE-2018-25220

Bochs 2.6-5 contains a stack-based buffer overflow vulnerability that allows attackers to execute arbitrary code by supplying an oversized input string to the application. Attackers can craft a malicious payload with 1200 bytes of padding followed by a return-oriented programming chain to overwri...

CVE-2018-25220

Removed by vendor...

CVE-2018-25201

creationtimestamp| type| source ---|---|--- 2026-03-27 23:00:14+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mi37vfhvso2d...

CVE-2018-25185

creationtimestamp| type| source ---|---|--- 2026-03-27 22:00:15+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mi34k4xut52v...

CVE-2018-25183

creationtimestamp| type| source ---|---|--- 2026-03-27 19:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mi2upmpyc32r...

CVE-2018-25210

creationtimestamp| type| source ---|---|--- 2026-03-27 19:20:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mi2tlubztk2c...

CVE-2018-25217

creationtimestamp| type| source ---|---|--- 2026-03-26 15:21:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhxvsmvsw32q 2026-03-27 19:00:15+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mi2sib6gjt2r...

CVE-2018-25211

creationtimestamp| type| source ---|---|--- 2026-03-26 15:11:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhxvapzyxi2t 2026-03-27 20:20:10+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mi2wx5jgn32a...

CVE-2018-25218

creationtimestamp| type| source ---|---|--- 2026-03-26 15:06:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhxuxrlqn22t 2026-03-31 17:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3miepuppxzk2r...

CVE-2018-25219

creationtimestamp| type| source ---|---|--- 2026-03-26 15:01:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhxuot65ky24...

CVE-2018-25212

creationtimestamp| type| source ---|---|--- 2026-03-26 14:56:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhxufumxob2n 2026-03-31 02:20:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mid4hm6okm2i...

CVE-2018-25213

creationtimestamp| type| source ---|---|--- 2026-03-26 14:45:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhxtrin5432s 2026-03-28 04:00:15+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mi3qntwlre2a...

CVE-2018-25219

PassFab Excel Password Recovery 8.3.1 contains a structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious payload in the registration code field. Attackers can craft a buffer overflow payload with a pop-pop-ret gadg...

CVE-2018-25212

Boxoft wav-wma Converter 1.0 contains a local buffer overflow vulnerability in structured exception handling that allows attackers to execute arbitrary code by crafting malicious WAV files. Attackers can create a specially crafted WAV file with excessive data and ROP gadgets to overwrite the SEH...

CVE-2018-25219

PassFab Excel Password Recovery 8.3.1 contains a structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious payload in the registration code field. Attackers can craft a buffer overflow payload with a pop-pop-ret gadg...

CVE-2018-25213

Nsauditor 3.0.28.0 contains a structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying malicious input to the DNS Lookup tool. Attackers can craft a payload with SEH chain overwrite and inject shellcode through the DNS Query...

CVE-2018-25211

Allok Video Splitter 3.1.1217 contains a buffer overflow vulnerability that allows local attackers to cause a denial of service or execute arbitrary code by supplying an oversized string in the License Name field. Attackers can craft a malicious payload exceeding 780 bytes, paste it into the...

CVE-2018-25202

creationtimestamp| type| source ---|---|--- 2026-03-26 13:14:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhxop4pjbf2z...

CLSA-2026-1774528369 openssh: Fix of 3 CVEs

CVE-2018-20685: fix a vulnerability scp client where a malicious server could bypass intended access restrictions and modify target directory permissions via crafted filenames - CVE-2019-6109: fix scp client where a malicious server could manipulate the client's progress display output due to...

CVE-2018-25208

qdPM 9.1 contains an SQL injection vulnerability that allows unauthenticated attackers to extract database information by injecting SQL code through filterby parameters. Attackers can submit malicious POST requests to the timeReport endpoint with crafted filterbyCommentCreatedFrom and...