113 matches found
CVE-2022-31901
CVE-2022-31901 Denial Of Services DOS in Notepad++x86 in 8.4.3 and before. Description Vulnerability triggering, via opening two specially crafted text files e.g. first.txt & second.txt as input to notepad++. As an illustrative example below, as of 11/07/2022, latest version of Notepad++x86 is...
CLEANSTART-2026-UD62821 On Unix systems, opening a file in an os
CVE-2026-39822 affects multiple packages. On Unix systems, opening a file in an os. See references for individual vulnerability details...
CLEANSTART-2026-XZ43182 launch-editor allows users to open files with line numbers in editor from Node
Security vulnerability affects the argo-workflows package. launch-editor allows users to open files with line numbers in editor from Node...
EUVD-2026-56829
Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
Markdown Preview Extension File Helper Code Execution
The vulnerability of the file opening helper function in the Markdown Preview extension of the Visual Studio Code editor is related to the failure to implement measures to neutralize special elements. Exploiting this vulnerability may allow an attacker operating remotely to execute arbitrary code...
CVE-2026-46671
Rust OneNote File Parser is a parser for Microsoft OneNote files implemented in Rust. Prior to version 1.1.1, a maliciously crafted ".onetoc2" table-of-contents file can cause "Parser::parsenotebook" to open arbitrary files on the host filesystem outside the notebook's directory. The parser reads...
UBUNTU-CVE-2026-39822
On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /. For example, 'root.Open"symlink/"' will open "symlink" even when "symlink" is a symbolic link pointing...
EUVD-2026-41920
DNG SDK versions 1.7.1 2536 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue...
PT-2026-68364
Name of the Vulnerable Software and Affected Versions Markdown Preview Enhanced versions prior to 0.8.28 Description Improper neutralization of special elements in the preview-link handling of the Markdown Preview Enhanced extension for Visual Studio Code allows remote code execution. When a user...
EUVD-2026-35803
Dreamweaver Desktop versions 21.7 and earlier are affected by a Dependency on Vulnerable Third-Party Component vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a maliciou...
CVE-2026-27291 InDesign Desktop | Out-of-bounds Write (CWE-787)
InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2026-21341
Substance3D - Stager versions 3.1.6 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
Finalwire AIDA64 buffer error vulnerability
Finalwire AIDA64 is a system information, diagnosis, and auditing tool developed by the Hungarian company Finalwire, running on the Microsoft Windows platform. Version 5.50.2100 of Finalwire AIDA64 contains a buffer error vulnerability, which stems from improper handling of the file opening...
CVE-2026-0662
CVE-2026-0662 : Autodesk 3ds Max is affected by an Untrusted Search Path vulnerability when opening a max file from a malicious project directory, potentially allowing arbitrary code execution in the current process. The description specifies this is tied to the search path trust issue, with the ...
EUVD-2025-24523
Malicious code in bioql PyPI...
EUVD-2022-46663
Malicious code in bioql PyPI...
EUVD-2024-18512
Malicious code in bioql PyPI...
EUVD-2025-9915
Malicious code in bioql PyPI...