Lucene search
+L

14 matches found

NVD
NVD
•added 2026/10/08 11:16 p.m.•18 views

CVE-2026-107733

SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, FrameOnCommand handles CmdExec by passing a null current-tab pointer to RunWithExe, which dereferences WindowTab::filePath. A local process in the same interactive Windows session, at an integrity level greater than or equal t...

6.8CVSS0.00156EPSS
SaveExploits0References2
Mend
Mend
•added 2026/10/08 10:23 p.m.•12 views

CVE-2026-107733

SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, FrameOnCommand handles CmdExec by passing a null current-tab pointer to RunWithExe, which dereferences WindowTab::filePath. A local process in the same interactive Windows session, at an integrity level greater than or equal t...

6.8CVSS5.8AI score0.00156EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2026/10/08 10:23 p.m.•11 views

CVE-2026-107733 SumatraPDF: Null-pointer dereference in `CmdExec` when no document tab is open

SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, FrameOnCommand handles CmdExec by passing a null current-tab pointer to RunWithExe, which dereferences WindowTab::filePath. A local process in the same interactive Windows session, at an integrity level greater than or equal t...

6.8CVSS5.8AI score
SaveExploits0References4
Cvelist
Cvelist
•added 2026/10/08 10:23 p.m.•34 views

CVE-2026-107733 SumatraPDF: Null-pointer dereference in `CmdExec` when no document tab is open

SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, FrameOnCommand handles CmdExec by passing a null current-tab pointer to RunWithExe, which dereferences WindowTab::filePath. A local process in the same interactive Windows session, at an integrity level greater than or equal t...

6.8CVSS0.00156EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/10/08 10:23 p.m.•12 views

CVE-2026-107733 SumatraPDF: Null-pointer dereference in `CmdExec` when no document tab is open

SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, FrameOnCommand handles CmdExec by passing a null current-tab pointer to RunWithExe, which dereferences WindowTab::filePath. A local process in the same interactive Windows session, at an integrity level greater than or equal t...

6.8CVSS5.8AI score0.00156EPSS
SaveExploits0References2
CVE
CVE
•added 2026/10/08 10:23 p.m.•19 views

CVE-2026-107733

In SumatraPDF version 3.6.1 and earlier for Windows, a null-pointer dereference occurs within the FrameOnCommand() function when handling CmdExec while no document tab is open. The root cause is the passing of a null current-tab pointer to RunWithExe(), leading to the dereferencing of WindowTab::...

6.8CVSS5.8AI score0.00156EPSS
SaveExploits0References2
Mend
Mend
•added 2026/10/08 10:22 p.m.•11 views

CVE-2026-107732

SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, untrusted document paths and PDF link targets are interpolated into notification text that ParseTip interprets as trusted tip markup. When a user clicks an injected link, ExecuteTipLink dispatches its CmdExec command and can...

8.4CVSS6.1AI score0.00131EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/08 12:00 a.m.•12 views

CVE-2026-107733: NULL Pointer Dereference

SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, FrameOnCommand handles CmdExec by passing a null current-tab pointer to RunWithExe, which dereferences WindowTab::filePath. A local process in the same interactive Windows session, at an integrity level greater than or equal t...

6.8CVSS5.8AI score0.00156EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•27 views

EUVD-2018-11301

Malware in sbrugna...

6.1CVSS6.3AI score0.00865EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/05/22 7:35 a.m.•24 views

CVE-2018-19614

XSS exists in the /cmdexec/cmdexe?cmd= function in Westermo DR-250 Pre-5162 and DR-260 Pre-5162 routers...

6.1CVSS6.3AI score0.00865EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2024/04/03 12:00 a.m.•24 views

Westermo DR-250, DR-260 and MR-260 Cross-site Scripting (CVE-2018-19614)

XSS exists in the /cmdexec/cmdexe?cmd= function in Westermo DR-250 Pre-5162 and DR-260 Pre-5162 routers. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...

6.1CVSS6.3AI score0.00865EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/05/23 12:00 a.m.•12 views

CVE-2018-19614: Improper Neutralization of Input During Web Page Generation

XSS exists in the /cmdexec/cmdexe?cmd= function in Westermo DR-250 Pre-5162 and DR-260 Pre-5162 routers...

6.1CVSS5.8AI score0.00865EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2019/05/23 12:00 a.m.•14 views

PT-2019-9878

Name of the Vulnerable Software and Affected Versions Westermo DR-250 versions Pre-5162 Westermo DR-260 versions Pre-5162 Description A security issue exists in the /cmdexec/cmdexe?cmd= function, allowing for potential exploitation. Recommendations For Westermo DR-250 version Pre-5162, update to ...

6.1CVSS0.00865EPSS
SaveExploits0References3
Packet Storm
Packet Storm
•added 2009/04/14 12:00 a.m.•45 views

Shadow Stream Recorder Overflow

!/usr/bin/perl Shadow Stream Recorder .m3u file Local Universal Stack Overflow Exploit By AlpHaNiX NullArea.Net alphaathacker.bz Made in Tunisia program : Shadow Stream Recorder download : http://www.rm-to-mp3.net/downloads/ssrecordersetup.exe program homepage :...

0.8AI score
SaveExploits0
Rows per page
Query Builder