Lucene search
+L

6184 matches found

Cvelist
Cvelist
•added 2026/06/03 1:23 p.m.•60 views

CVE-2022-49042

An inclusion of functionality from untrusted control sphere vulnerability in MinGW DLL component in Synology Hyper Backup Explorer before 3.0.1-0156 allows local users to execute arbitrary code via unspecified vectors...

7.8CVSS0.00123EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/06/03 12:00 a.m.•22 views

Synology Hyper Backup Explorer 安全漏洞

Synology Hyper Backup Explorer is a backup file viewing tool developed by Synology, a Chinese company, for browsing, retrieving, and restoring backup version data. Versions of Synology Hyper Backup Explorer prior to 3.0.1-0156 contained security vulnerabilities. These vulnerabilities stemmed from...

7.8CVSS5.9AI score0.00123EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/06/02 12:31 a.m.•29 views

EUVD-2018-21953

Arm Whois 3.11 contains a buffer overflow vulnerability that allows local attackers to execute arbitrary code by overwriting the structured exception handler. Attackers can craft a malicious input file with a 672-byte offset to overwrite the nSEH and SEH pointers, enabling code execution through...

8.6CVSS6.7AI score0.00162EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2026/06/02 12:00 a.m.•22 views

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 149.0.7827.53 contained a resource management vulnerability. This vulnerability stemmed from the use of reusing after releasing in WebView, which could allow local attackers to execute arbitrary code throug...

7.8CVSS6.8AI score0.00107EPSS
SaveExploits0References3
NVD
NVD
•added 2026/06/01 10:16 p.m.•29 views

CVE-2018-25432

Arm Whois 3.11 contains a buffer overflow vulnerability that allows local attackers to execute arbitrary code by overwriting the structured exception handler. Attackers can craft a malicious input file with a 672-byte offset to overwrite the nSEH and SEH pointers, enabling code execution through...

8.6CVSS0.00162EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/06/01 9:00 p.m.•22 views

CVE-2018-25432 Arm Whois 3.11 Buffer Overflow via ASLR Bypass

Arm Whois 3.11 contains a buffer overflow vulnerability that allows local attackers to execute arbitrary code by overwriting the structured exception handler. Attackers can craft a malicious input file with a 672-byte offset to overwrite the nSEH and SEH pointers, enabling code execution through...

8.6CVSS7.1AI score0.00162EPSS
SaveExploits0References4
CVE
CVE
•added 2026/06/01 9:00 p.m.•44 views

CVE-2018-25432

Arm Whois 3.11 is affected by a local buffer overflow that allows code execution via exception handler hijacking. An input file crafted with a 672-byte offset can overwrite nSEH and SEH pointers, enabling arbitrary code execution when the structured exception handler is triggered. CVSS data prese...

8.6CVSS7.1AI score0.00162EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/06/01 5:34 p.m.•58 views

CVE-2026-43958 Rrdtool: rrdtool: stack buffer overflow allows local code execution or denial of service

A flaw was found in rrdcached, a component of rrdtool. A local attacker with access to a rrdcached socket can exploit a stack-based buffer overflow by sending an oversized CREATE request. This vulnerability can lead to a denial of service by crashing the daemon or potentially allow for arbitrary...

7.8CVSS0.00176EPSS
SaveExploits0References9
Vulnrichment
Vulnrichment
•added 2026/06/01 5:34 p.m.•18 views

CVE-2026-43958 Rrdtool: rrdtool: stack buffer overflow allows local code execution or denial of service

A flaw was found in rrdcached, a component of rrdtool. A local attacker with access to a rrdcached socket can exploit a stack-based buffer overflow by sending an oversized CREATE request. This vulnerability can lead to a denial of service by crashing the daemon or potentially allow for arbitrary...

7.8CVSS6.4AI score0.00176EPSS
SaveExploits0References9
CNNVD
CNNVD
•added 2026/06/01 12:00 a.m.•26 views

OETIKER+PARTNER RRDtool 安全漏洞

OETIKER+PARTNER RRDtool is a time-series data storage and plotting system developed by OETIKER+PARTNER Inc. There is a security vulnerability in OETIKER+PARTNER RRDtool; this vulnerability stems from a stack buffer overflow issue. It could allow local attackers to cause the daemon process to cras...

7.8CVSS6.8AI score0.00176EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/06/01 12:00 a.m.•26 views

ArmCode Arm Whois 安全漏洞

ArmCode Arm Whois is a web information query tool developed by ArmCode Corporation. Version 3.11 of ArmCode Arm Whois contains a security vulnerability. This vulnerability stems from a buffer overflow, which may allow local attackers to execute arbitrary code by overriding structured exception...

8.6CVSS6.2AI score0.00162EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/01 12:00 a.m.•7 views

CVE-2018-25432: Buffer Copy without Checking Size of Input

Arm Whois 3.11 contains a buffer overflow vulnerability that allows local attackers to execute arbitrary code by overwriting the structured exception handler. Attackers can craft a malicious input file with a 672-byte offset to overwrite the nSEH and SEH pointers, enabling code execution through...

8.6CVSS7.1AI score0.00162EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/06/01 12:00 a.m.•56 views

PT-2026-45623

Name of the Vulnerable Software and Affected Versions Arm Whois version 3.11 Description A buffer overflow allows local attackers to execute arbitrary code by overwriting the structured exception handler. By crafting a malicious input file with a 672-byte offset, an attacker can overwrite the nSE...

8.6CVSS6.8AI score0.00162EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
•added 2026/05/30 2:16 a.m.•30 views

SUSE CVE-2026-9987

Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 148.0.7778.216 allowed a local attacker to execute arbitrary code via a malicious file. Chromium security severity: High...

7.8CVSS6.8AI score0.0014EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/05/29 2:46 p.m.•21 views

CVE-2018-25383 Free MP3 CD Ripper 2.8 Buffer Overflow SEH DEP Bypass

Free MP3 CD Ripper 2.8 contains a stack-based buffer overflow vulnerability in WMA file processing that allows local attackers to bypass DEP protection via structured exception handling manipulation. Attackers can craft a malicious WMA file that triggers the overflow when loaded through the Conve...

8.6CVSS6.6AI score0.00181EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/05/29 2:46 p.m.•25 views

EUVD-2018-21905

Free MP3 CD Ripper 2.8 contains a stack-based buffer overflow vulnerability in WMA file processing that allows local attackers to bypass DEP protection via structured exception handling manipulation. Attackers can craft a malicious WMA file that triggers the overflow when loaded through the Conve...

8.6CVSS6.5AI score0.00181EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/05/29 12:00 a.m.•30 views

Free MP3 CD Ripper 安全漏洞

Free MP3 CD Ripper is an audio format converter. Version 2.8 of Free MP3 CD Ripper has a security vulnerability. This vulnerability stems from a stack buffer overflow issue during WMA file processing. It could allow local attackers to bypass the DEP protection by manipulating structured exception...

8.6CVSS6.3AI score0.00181EPSS
SaveExploits0References3
OSV
OSV
•added 2026/05/28 11:16 p.m.•27 views

DEBIAN-CVE-2026-9987

Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 148.0.7778.216 allowed a local attacker to execute arbitrary code via a malicious file. Chromium security severity: High...

7.8CVSS6.8AI score0.0014EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/05/28 10:25 p.m.•57 views

CVE-2026-9987

Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 148.0.7778.216 allowed a local attacker to execute arbitrary code via a malicious file. Chromium security severity: High...

0.0014EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/05/28 10:25 p.m.•21 views

CVE-2026-9987

Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 148.0.7778.216 allowed a local attacker to execute arbitrary code via a malicious file. Chromium security severity: High...

6.8AI score0.0014EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder