Lucene search
K

43 matches found

SUSE CVE
SUSE CVE
added 2026/05/26 1:52 a.m.12 views

SUSE CVE-2026-48831

Wine ships a .desktop file that registers itself as a MIME handler for EXE files and several other Windows executable file types. In some configurations, handling of an EXE file causes that file to be blindly executed with the permissions of the invoker. This allows escaping Flatpak and Snap...

7.3CVSS5.8AI score0.00026EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2026/05/25 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2026-48831

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Wine ships a .desktop file that registers itself as a MIME handler for EXE files and several other Windows executable file types. In some configurations, handli...

7.3CVSS5.9AI score0.00026EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2006-5923

Malware in sbrugna...

10CVSS6.4AI score0.00502EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2019-10346

Malware in sbrugna...

7.5CVSS7.6AI score0.00593EPSS
Exploits0References6
RedhatCVE
RedhatCVE
added 2025/02/05 12:35 a.m.3 views

CVE-2024-55579

An issue was discovered in Qlik Sense Enterprise for Windows before November 2024 IR. An unprivileged user with network access may be able to create connection objects that trigger execution of arbitrary EXE files. This is fixed in November 2024 IR, May 2024 Patch 10, February 2024 Patch 14,...

8.8CVSS7AI score0.00314EPSS
Exploits0References1
CVE
CVE
added 2024/11/06 6:43 a.m.48 views

CVE-2024-9307

CVE-2024-9307 affects the mFolio Lite WordPress plugin. The vulnerability is due to a missing capability check in all versions up to 1.2.1, allowing authenticated attackers with Author-level access or higher to upload SVGs/EXEs and inject scripts that execute on page load or file access, with pot...

9.9CVSS9.3AI score0.07965EPSS
Exploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2024/11/06 6:43 a.m.15 views

CVE-2024-9307 mFolio Lite <= 1.2.1 - Missing Authorization to Authenticated (Author+) File Upload via EXE and SVG Files

The mFolio Lite plugin for WordPress is vulnerable to file uploads due to a missing capability check in all versions up to, and including, 1.2.1. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute...

9.9CVSS9.4AI score0.07965EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/08/03 12:0 a.m.2 views

PT-2023-36240 · Unknown · Python-Pip

Name of the Vulnerable Software and Affected Versions: python-pip affected versions not specified Description: The issue with python-pip is related to the presence of .exe files in the RPM package, which could cause problems with security scanners. Recommendations: At the moment, there is no...

7AI score
Exploits0References3
OSV
OSV
added 2023/07/21 9:53 a.m.2 views

SUSE-SU-2023:2932-1 Security update for python-pip

This update for python-pip fixes the following issues: - Removed .exe files from the RPM package, to prevent issues with security scanners bsc1212015...

7.2AI score
Exploits0References2
Prion
Prion
added 2020/06/01 7:15 a.m.9 views

Design/Logic Flaw

The file downloading functionality in the Atlassian Companion App before version 1.0.0 allows remote attackers, who control a Confluence Server instance that the Companion App is connected to, execute arbitrary .exe files via a Protection Mechanism Failure...

6.5CVSS7.1AI score0.00674EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2020/06/01 6:35 a.m.18 views

CVE-2020-4020

The file downloading functionality in the Atlassian Companion App before version 1.0.0 allows remote attackers, who control a Confluence Server instance that the Companion App is connected to, execute arbitrary .exe files via a Protection Mechanism Failure...

7.2AI score0.00674EPSS
Exploits0References1
CVE
CVE
added 2020/06/01 6:35 a.m.52 views

CVE-2020-4020

CVE-2020-4020 affects the Atlassian Companion App prior to 1.0.0. The file downloading feature allows remote attackers who control a Confluence Server the Companion App connects to to execute arbitrary .exe files via a Protection Mechanism Failure, due to a malfunctioning protection mechanism. Im...

7.2CVSS7.1AI score0.00674EPSS
Exploits0References1Affected Software1
Atlassian
Atlassian
added 2020/04/16 8:37 p.m.23 views

Protection Mechanism Failure in file downloading in Companion - CVE-2020-4020

The file downloading functionality in the Atlassian Companion App before version 1.0.0 allows remote attackers, who control a Confluence Server instance that the Companion App is connected to, execute arbitrary .exe files via a Protection Mechanism Failure. h5. Acknowledgements Credit for finding...

7.2CVSS7.1AI score0.00674EPSS
Exploits0
Atlassian
Atlassian
added 2020/04/16 8:37 p.m.71 views

Protection Mechanism Failure in file downloading in Companion - CVE-2020-4020

The file downloading functionality in the Atlassian Companion App before version 1.0.0 allows remote attackers, who control a Confluence Server instance that the Companion App is connected to, execute arbitrary .exe files via a Protection Mechanism Failure. h5. Acknowledgements Credit for finding...

7.2CVSS6.2AI score0.00674EPSS
Exploits0Affected Software1
Kitploit
Kitploit
added 2019/10/31 9:56 p.m.114 views

PESTO - PE (files) Statistical Tool

PESTO is a Python script that extracts and saves in a database some PE file security characteristics or flags searching for every PE binary in a whole directory, and saving results in a database. It checks for architecture flag in the header, and for the following security flags: ASLR, NOSEH, DEP...

7.7AI score
Exploits0References3
Prion
Prion
added 2018/08/15 8:29 p.m.14 views

Design/Logic Flaw

A vulnerability in certain attachment detection mechanisms of Cisco Email Security Appliances ESA could allow an unauthenticated, remote attacker to bypass the filtering functionality of an affected system. The vulnerability is due to the improper detection of content within executable EXE files...

4.3CVSS7.5AI score0.00327EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2018/08/15 8:0 p.m.7 views

CVE-2018-0419

A vulnerability in certain attachment detection mechanisms of Cisco Email Security Appliances ESA could allow an unauthenticated, remote attacker to bypass the filtering functionality of an affected system. The vulnerability is due to the improper detection of content within executable EXE files...

7AI score0.00327EPSS
Exploits0References3
Kitploit
Kitploit
added 2017/09/26 9:33 p.m.263 views

Exe2Image - A simple utility to convert EXE files to JPEG images and vice versa.

A simple utility to convert EXE files to PNG images and vice versa. Putty.exe converted to an image. Download Exe2Image...

7.3AI score
Exploits0References1
Cisco Threats
Cisco Threats
added 2015/07/29 2:59 p.m.9 views

Threat Outbreak Alert RuleID17006: Email Messages Distributing Malicious Software on July 28, 2015

Medium Alert ID: 40191 First Published: 2015 July 29 14:59 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID17006 may contain the following files: Name | Siz...

0.4AI score
Exploits0
Check Point Advisories
Check Point Advisories
added 2015/01/08 12:0 a.m.2 views

Adobe Flash Player Improper File Validation (APSB15-01: CVE-2015-0301)

An improper file validation issue has been reported in Adobe Flash Player. The vulnerability occurs when the Flash Broker application allows malicious dlls or exes files to be written to one of the whitelisted directories. such a malicious dll dropped in these directories could be used to deliver...

10CVSS2.9AI score0.074EPSS
Exploits0
Rows per page
Query Builder