105 matches found
CVE-2022-31901
CVE-2022-31901 拒绝服务（DOS）漏洞，影响 Notepad++x86 版本 8.4.3 及之前版本。 描述 通过打开两个特制的文本文件（例如 first.txt 和 second.txt）作为 Notepad++ 的输入来触发漏洞。 以下示例展示，截至 2022年7月11日，最新版本的 Notepad++x86 为 8.4.3。 概念验证 - 以任意顺序在 Notepad++ 中打开两个示例输入文件 first.txt 和 second.txt。 结果： Visual Studio 2019 转储分析 这里可以看到解析这些文件的问题位于 ScintallComponent...
EUVD-2026-56829
Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
UBUNTU-CVE-2026-39822
On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /. For example, 'root.Open"symlink/"' will open "symlink" even when "symlink" is a symbolic link pointing...
EUVD-2026-41920
DNG SDK versions 1.7.1 2536 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue...
EUVD-2026-35803
Dreamweaver Desktop versions 21.7 and earlier are affected by a Dependency on Vulnerable Third-Party Component vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a maliciou...
CVE-2026-27291 InDesign Desktop | Out-of-bounds Write (CWE-787)
InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2026-21341
Substance3D - Stager versions 3.1.6 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
Finalwire AIDA64 缓冲区错误漏洞
Finalwire AIDA64 is a system information, diagnosis, and auditing tool developed by the Hungarian company Finalwire, running on the Microsoft Windows platform. Version 5.50.2100 of Finalwire AIDA64 contains a buffer error vulnerability, which stems from improper handling of the file opening...
CVE-2026-0662
CVE-2026-0662 : Autodesk 3ds Max is affected by an Untrusted Search Path vulnerability when opening a max file from a malicious project directory, potentially allowing arbitrary code execution in the current process. The description specifies this is tied to the search path trust issue, with the ...
EUVD-2022-38575
Malicious code in bioql PyPI...
EUVD-2023-32896
Malicious code in bioql PyPI...
EUVD-2024-41323
Malicious code in bioql PyPI...
EUVD-2024-18512
Malicious code in bioql PyPI...
EUVD-2025-24477
Malicious code in bioql PyPI...
EUVD-2022-46663
Malicious code in bioql PyPI...
EUVD-2025-24523
Malicious code in bioql PyPI...
EUVD-2022-33282
Malicious code in bioql PyPI...
EUVD-2025-9915
Malicious code in bioql PyPI...
UBUNTU-CVE-2025-38698
In the Linux kernel, the following vulnerability has been resolved: jfs: Regular file corruption check The reproducer builds a corrupted file on disk with a negative isize value. Add a check when opening this file to avoid subsequent operation failures...
CVE-2025-38698 jfs: Regular file corruption check
In the Linux kernel, the following vulnerability has been resolved: jfs: Regular file corruption check The reproducer builds a corrupted file on disk with a negative isize value. Add a check when opening this file to avoid subsequent operation failures...