Vim for Windows Uncontrolled Search Path Element Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Vim for Windows. User interaction is required to exploit this vulnerability in that the target must open a malicious file and perform one of a set of specific actions in the editor. The specific flaw...

EUVD-2025-202282

A NULL pointer dereference vulnerability in the util.readFileIntoStream component of PDF-XChange Editor v10.7.3.401 allows attackers to cause a Denial of Service DoS via a crafted input...

EUVD-2025-202265

A NULL pointer dereference vulnerability in the importDataObject function of PDF-XChange Editor v10.7.3.401 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2025-64085

A NULL pointer dereference vulnerability in the importDataObject function of PDF-XChange Editor v10.7.3.401 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2025-64085

A NULL pointer dereference vulnerability in the importDataObject function of PDF-XChange Editor v10.7.3.401 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2025-64086

A NULL pointer dereference vulnerability in the util.readFileIntoStream component of PDF-XChange Editor v10.7.3.401 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2025-64086

A NULL pointer dereference vulnerability in the util.readFileIntoStream component of PDF-XChange Editor v10.7.3.401 allows attackers to cause a Denial of Service DoS via a crafted input...

gimp: GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

A heap-based buffer overflow vulnerability was discovered in GIMP’s DICOM DCM file parser. The flaw occurs because the application fails to properly validate the length of user-supplied data before copying it to a heap buffer. This can lead to arbitrary code execution when a user opens a speciall...

CVE-2025-64085

A NULL pointer dereference vulnerability in the importDataObject function of PDF-XChange Editor v10.7.3.401 allows attackers to cause a Denial of Service DoS via a crafted input...

PT-2025-50107

Name of the Vulnerable Software and Affected Versions PDF-XChange Editor version 10.7.3.401 Description A flaw exists in the util.readFileIntoStream component that can lead to a Denial of Service DoS. The issue is due to a NULL pointer dereference triggered by a specially crafted input...

CVE-2025-64085

A NULL pointer dereference vulnerability in the importDataObject function of PDF-XChange Editor v10.7.3.401 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2025-64086

A NULL pointer dereference vulnerability in the util.readFileIntoStream component of PDF-XChange Editor v10.7.3.401 allows attackers to cause a Denial of Service DoS via a crafted input...

PDF-XChange Editor 安全漏洞

PDF-XChange Editor is a PDF file viewing software from PDF-XChange running on Microsoft Windows systems. A security vulnerability exists in PDF-XChange Editor version v10.7.3.401, which originates from the presence of a null pointer dereference in the component util.readFileIntoStream, which coul...

CVE-2025-64086

PDF-XChange Editor v10.7.3.401 contains a NULL pointer dereference in the util.readFileIntoStream component that can lead to a Denial of Service. The vulnerability is documented across multiple sources (PDF-XChange and Red Hat), with no public details on a fixed version or patch in the provided d...

PT-2025-50126

Name of the Vulnerable Software and Affected Versions PDF-XChange Editor version 10.7.3.401 Description A flaw exists in PDF-XChange Editor that involves a NULL pointer dereference within the importDataObject function. This issue can be exploited by attackers to trigger a Denial of Service DoS...

PDF-XChange Editor 安全漏洞

PDF-XChange Editor is a PDF file viewing software from PDF-XChange running on Microsoft Windows systems. A security vulnerability exists in PDF-XChange Editor version v10.7.3.401, which originates from the presence of a null pointer dereference in the function importDataObject, which could lead t...

CVE-2025-64086

A NULL pointer dereference vulnerability in the util.readFileIntoStream component of PDF-XChange Editor v10.7.3.401 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2025-64085

PDF-XChange Editor v10.7.3.401 has a NULL pointer dereference in importDataObject() that can be triggered by crafted input to cause a Denial of Service. Documents (NVD/Red Hat/EUVD/CVE List/CNNVD) confirm DoS via this input; exploitation details are not provided in the available materials, and no...

Tiptap Editor 安全漏洞

Tiptap Editor is an open source text editor framework from Tiptap. A security vulnerability exists in Tiptap Editor versions prior to 2.10.4 that stems from uncleaned user input and could lead to a cross-site scripting attack...

CVE-2025-66301

Grav is a file-based Web platform. Prior to 1.8.0-beta.27, due to improper authorization checks when modifying critical fields on a POST request to /admin/pages/pagename, an editor with only permissions to change basic content on the form is now able to change the functioning of the form through...