Lucene search
+L

2579 matches found

Positive Technologies
Positive Technologies
added 2026/04/05 12:00 a.m.26 views

PT-2026-30474

River Past Ringtone Converter 2.7.6.1601 contains a local buffer overflow vulnerability that allows attackers to crash the application by supplying oversized input to activation fields. Attackers can paste 300 bytes of data into the Email textbox and Activation code textarea via the Help menu's...

6.9CVSS6.2AI score0.00191EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2026/04/05 12:00 a.m.21 views

R 缓冲区错误漏洞

R is a statistical computing software developed by The R Foundation. Version 3.5.0 of R i386 contains a buffer overflow vulnerability. This vulnerability stems from a local buffer overflow in the GUI Preferences dialog box, which may allow local attackers to trigger the structured exception handl...

8.6CVSS6AI score0.00159EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/04/05 12:00 a.m.24 views

PT-2026-30476

TaskInfo 8.2.0.280 contains a local buffer overflow vulnerability that allows attackers to crash the application by supplying oversized input to registration fields. Attackers can paste excessively long strings into the New User Name or New Serial Number textboxes in the Help menu's registration...

6.9CVSS6.2AI score0.00191EPSS
SaveExploits1References4
NVD
NVD
added 2026/04/04 12:16 a.m.11 views

CVE-2026-34772

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 38.8.6, 39.8.0, 40.7.0, and 41.0.0-beta.8, apps that allow downloads and programmatically destroy sessions may be vulnerable to a use-after-free. If a session is torn down whi...

8.8CVSS0.00209EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/04/03 11:49 p.m.31 views

CVE-2026-34772 Electron: Use-after-free in download save dialog callback

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 38.8.6, 39.8.0, 40.7.0, and 41.0.0-beta.8, apps that allow downloads and programmatically destroy sessions may be vulnerable to a use-after-free. If a session is torn down whi...

5.8CVSS0.00209EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/04/03 11:49 p.m.3 views

CVE-2026-34772 Electron: Use-after-free in download save dialog callback

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 38.8.6, 39.8.0, 40.7.0, and 41.0.0-beta.8, apps that allow downloads and programmatically destroy sessions may be vulnerable to a use-after-free. If a session is torn down whi...

5.8CVSS5.8AI score0.00209EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/03 11:49 p.m.3 views

CVE-2026-34772

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 38.8.6, 39.8.0, 40.7.0, and 41.0.0-beta.8, apps that allow downloads and programmatically destroy sessions may be vulnerable to a use-after-free. If a session is torn down whi...

5.8CVSS5.8AI score0.00209EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2026/04/03 11:49 p.m.68 views

CVE-2026-34772

CVE-2026-34772 – Electron Use-After-Free in download save dialog callback . The issue affects Electron applications that allow downloads and programmatically destroy sessions. If the session is torn down while a native save-file dialog for a download is open, dismissing the dialog may dereference...

8.8CVSS5.8AI score0.00209EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2026/04/03 11:49 p.m.14 views

CVE-2026-34772 Electron: Use-after-free in download save dialog callback

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 38.8.6, 39.8.0, 40.7.0, and 41.0.0-beta.8, apps that allow downloads and programmatically destroy sessions may be vulnerable to a use-after-free. If a session is torn down whi...

5.8CVSS5.8AI score
SaveExploits0References3
Snyk
Snyk
added 2026/04/03 2:41 a.m.3 views

Use After Free

Overview org.webjars.npm:electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free in the download save dialog callback process. An attacker can cause a crash or memory...

8.8CVSS5.9AI score0.00209EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/04/03 2:41 a.m.15 views

Use After Free

Overview electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free in the download save dialog callback process. An attacker can cause a crash or memory corruption by triggeri...

8.8CVSS5.9AI score0.00209EPSS
SaveExploits0References2
OSV
OSV
added 2026/04/03 2:41 a.m.12 views

GHSA-9W97-2464-8783 Electron: Use-after-free in download save dialog callback

Impact Apps that allow downloads and programmatically destroy sessions may be vulnerable to a use-after-free. If a session is torn down while a native save-file dialog is open for a download, dismissing the dialog dereferences freed memory, which may lead to a crash or memory corruption. Apps tha...

5.8CVSS5.9AI score0.00209EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2026/04/03 2:41 a.m.15 views

Electron: Use-after-free in download save dialog callback

Impact Apps that allow downloads and programmatically destroy sessions may be vulnerable to a use-after-free. If a session is torn down while a native save-file dialog is open for a download, dismissing the dialog dereferences freed memory, which may lead to a crash or memory corruption. Apps tha...

8.8CVSS5.8AI score0.00209EPSS
SaveExploits0References3Affected Software1
EUVD
EUVD
added 2026/04/03 2:41 a.m.20 views

EUVD-2026-18943

Electron: Use-after-free in download save dialog callback...

5.8CVSS5.9AI score0.00209EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/04/03 12:00 a.m.23 views

PT-2026-30002

Name of the Vulnerable Software and Affected Versions Electron versions prior to 38.8.6, prior to 39.8.0, prior to 40.7.0, and prior to 41.0.0-beta.8 Description Electron applications allowing downloads and programmatic session destruction may experience a use-after-free condition. Specifically, ...

8.8CVSS5.8AI score0.00209EPSS
SaveExploits0References9
Cvelist
Cvelist
added 2026/03/30 11:02 a.m.28 views

CVE-2019-25655 Device Monitoring Studio 8.10.00.8925 Denial of Service

Device Monitoring Studio 8.10.00.8925 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string to the server connection dialog. Attackers can trigger the crash by entering a malformed server name or address containing...

6.9CVSS0.00159EPSS
SaveExploits1References2
CVE
CVE
added 2026/03/30 11:02 a.m.31 views

CVE-2019-25655

CVE-2019-25655 affects Device Monitoring Studio 8.10.00.8925 and is a Denial of Service vulnerability. The issue arises when a user provides an excessively long string to the server connection dialog, specifically by entering a malformed server name or address containing repeated characters via T...

6.9CVSS5.9AI score0.00159EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
added 2026/03/30 12:00 a.m.17 views

HDD Device Monitoring Studio 安全漏洞

HDD Device Monitoring Studio is a device communication monitoring and debugging tool developed by the American company HDD. Version 8.10.00.8925 of HDD Device Monitoring Studio contains a security vulnerability. This vulnerability stems from a denial-of-service vulnerability in the server...

6.9CVSS5.8AI score0.00159EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2026/03/30 12:00 a.m.14 views

PT-2026-29011

Name of the Vulnerable Software and Affected Versions Device Monitoring Studio version 8.10.00.8925 Description A denial of service issue exists that allows local attackers to crash the application by providing a long string to the server connection dialog. Attackers can trigger this by entering ...

6.9CVSS5.8AI score0.00159EPSS
SaveExploits1References4
EUVD
EUVD
added 2026/03/26 3:30 p.m.14 views

EUVD-2018-21692

PDF Explorer 1.5.66.2 contains a structured exception handler SEH overflow vulnerability that allows local attackers to execute arbitrary code by overwriting SEH records with malicious data. Attackers can craft a payload with buffer overflow, NSEH jump, and ROP gadget chains that execute when the...

8.6CVSS6.4AI score0.0022EPSS
SaveExploits1References5
Rows per page
Query Builder