101 matches found
UBUNTU-CVE-2026-39822
On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /. For example, 'root.Open"symlink/"' will open "symlink" even when "symlink" is a symbolic link pointing...
EUVD-2026-41920
DNG SDK versions 1.7.1 2536 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue...
EUVD-2026-35803
Dreamweaver Desktop versions 21.7 and earlier are affected by a Dependency on Vulnerable Third-Party Component vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a maliciou...
CVE-2026-27291 InDesign Desktop | Out-of-bounds Write (CWE-787)
InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2026-21341
Substance3D - Stager versions 3.1.6 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
Finalwire AIDA64 缓冲区错误漏洞
Finalwire AIDA64 is a system information, diagnosis, and auditing tool developed by the Hungarian company Finalwire, running on the Microsoft Windows platform. Version 5.50.2100 of Finalwire AIDA64 contains a buffer error vulnerability, which stems from improper handling of the file opening...
CVE-2026-0662
CVE-2026-0662 : Autodesk 3ds Max is affected by an Untrusted Search Path vulnerability when opening a max file from a malicious project directory, potentially allowing arbitrary code execution in the current process. The description specifies this is tied to the search path trust issue, with the ...
EUVD-2024-18512
Malicious code in bioql PyPI...
EUVD-2025-24477
Malicious code in bioql PyPI...
EUVD-2023-32896
Malicious code in bioql PyPI...
EUVD-2022-46663
Malicious code in bioql PyPI...
EUVD-2025-24523
Malicious code in bioql PyPI...
EUVD-2022-38575
Malicious code in bioql PyPI...
EUVD-2025-9915
Malicious code in bioql PyPI...
EUVD-2024-41323
Malicious code in bioql PyPI...
EUVD-2022-33282
Malicious code in bioql PyPI...
UBUNTU-CVE-2025-38698
In the Linux kernel, the following vulnerability has been resolved: jfs: Regular file corruption check The reproducer builds a corrupted file on disk with a negative isize value. Add a check when opening this file to avoid subsequent operation failures...
CVE-2025-38698 jfs: Regular file corruption check
In the Linux kernel, the following vulnerability has been resolved: jfs: Regular file corruption check The reproducer builds a corrupted file on disk with a negative isize value. Add a check when opening this file to avoid subsequent operation failures...
An issue was discovered in the DBI module through 1.643 for Perl. DBD::File drivers can open files from folders other than those specifically passed via the f_dir attribute in the data source name (DSN). NOTE: this issue exists because of an incomplete fix for CVE-2014-10401.
...
CVE-2025-54224
InDesign Desktop versions 20.4, 19.5.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...