Lucene search
+L

270 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.13 views

EUVD-2021-10042

Malware in sbrugna...

6.5CVSS6.5AI score0.01368EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2020-29060

Malware in sbrugna...

4.1CVSS4.6AI score0.00636EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2020-29063

Malware in sbrugna...

8CVSS7.8AI score0.01035EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2021-25598

Malware in sbrugna...

8.1CVSS8AI score0.01336EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2020-29165

Malware in sbrugna...

4.3CVSS4.6AI score0.01339EPSS
SaveExploits1References4
EUVD
EUVD
added 2025/10/07 12:00 a.m.14 views

EUVD-2025-32878

Ankitects Anki before 25.02.5 allows a crafted shared deck on Windows to execute arbitrary commands when playing audio because of URL scheme mishandling...

6.7CVSS7AI score0.00132EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/10/07 12:00 a.m.4 views

CVE-2025-62185

In Ankitects Anki before 25.02.5, a crafted shared deck can place a YouTube downloader executable in the media folder, and this is executed for a YouTube link in the deck. The executable name could be youtube-dl.exe or yt-dlp.exe or yt-dlpx86.exe...

6.7CVSS6.4AI score0.00141EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/10/07 12:00 a.m.10 views

Ankitects Anki 代码问题漏洞

Ankitects Anki is an open source program by the individual developers of Ankitects to help remember information through the use of flash cards. A code issue vulnerability exists in Ankitects Anki versions prior to 25.02.5, which stems from a specially crafted shared deck that can place a YouTube...

7.8CVSS6.9AI score0.00141EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/10/07 12:00 a.m.15 views

PT-2025-41187

Name of the Vulnerable Software and Affected Versions Anki versions prior to 25.02.5 Description A specially designed shared deck can place a YouTube downloader executable in the media folder. This executable is then run when a YouTube link is present within the deck. The executable may be named...

7.8CVSS6.6AI score0.00141EPSS
SaveExploits0References7
Cvelist
Cvelist
added 2025/10/07 12:00 a.m.14 views

CVE-2025-62185

In Ankitects Anki before 25.02.5, a crafted shared deck can place a YouTube downloader executable in the media folder, and this is executed for a YouTube link in the deck. The executable name could be youtube-dl.exe or yt-dlp.exe or yt-dlpx86.exe...

6.7CVSS0.00141EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/10/07 12:00 a.m.13 views

PT-2025-41188

Name of the Vulnerable Software and Affected Versions Anki versions prior to 25.02.5 Description A specially crafted shared deck on Windows can lead to the execution of arbitrary commands when playing audio due to improper handling of URL schemes. Recommendations Update to version 25.02.5 or late...

7.8CVSS5.7AI score0.00132EPSS
SaveExploits0References7
Cvelist
Cvelist
added 2025/10/07 12:00 a.m.15 views

CVE-2025-62186

Ankitects Anki before 25.02.5 allows a crafted shared deck on Windows to execute arbitrary commands when playing audio because of URL scheme mishandling...

6.7CVSS0.00132EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/10/07 12:00 a.m.8 views

CVE-2025-62186

Ankitects Anki before 25.02.5 allows a crafted shared deck on Windows to execute arbitrary commands when playing audio because of URL scheme mishandling...

6.7CVSS7.1AI score0.00132EPSS
SaveExploits0References1
OSV
OSV
added 2025/10/07 12:00 a.m.8 views

CVE-2025-62185

In Ankitects Anki before 25.02.5, a crafted shared deck can place a YouTube downloader executable in the media folder, and this is executed for a YouTube link in the deck. The executable name could be youtube-dl.exe or yt-dlp.exe or yt-dlpx86.exe...

6.7CVSS6.8AI score
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 12:00 a.m.10 views

EUVD-2025-32879

In Ankitects Anki before 25.02.5, a crafted shared deck can place a YouTube downloader executable in the media folder, and this is executed for a YouTube link in the deck. The executable name could be youtube-dl.exe or yt-dlp.exe or yt-dlpx86.exe...

6.7CVSS6.3AI score0.00141EPSS
SaveExploits0References3
CVE
CVE
added 2025/10/07 12:00 a.m.37 views

CVE-2025-62185

In Ankitects Anki prior to 25.02.5, a crafted shared deck can place a YouTube downloader executable (names include youtube-dl.exe, yt-dlp.exe, or yt-dlp_x86.exe) in the media folder. This executable can be run when a YouTube link is present in the deck, enabling potential arbitrary code execution...

7.8CVSS6.4AI score0.00141EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2025/10/07 12:00 a.m.23 views

CVE-2025-62186

Anki (Ankitects) on Windows is affected by CVE-2025-62186: versions prior to 25.02.5 are vulnerable to arbitrary command execution when playing audio via a crafted shared deck due to URL scheme mishandling. The root cause is improper handling of URL schemes in the shared deck workflow. Affected p...

7.8CVSS7.1AI score0.00132EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2025/10/07 12:00 a.m.6 views

CVE-2025-62186

Ankitects Anki before 25.02.5 allows a crafted shared deck on Windows to execute arbitrary commands when playing audio because of URL scheme mishandling...

6.7CVSS7.6AI score
SaveExploits0References3
EUVD
EUVD
added 2025/10/03 8:07 p.m.10 views

EUVD-2024-19789

Malicious code in bioql PyPI...

5.4CVSS5.5AI score0.00505EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/03 8:07 p.m.10 views

EUVD-2024-36867

Malicious code in bioql PyPI...

4.3CVSS5.1AI score0.00381EPSS
SaveExploits0References3
Rows per page
Query Builder