Lucene search
+L

7250 matches found

ATTACKERKB
ATTACKERKB
added 2026/05/30 2:55 p.m.10 views

CVE-2018-25423

Arm Whois 3.11 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized input string. Attackers can paste a malicious buffer of 700 bytes into the IP address or domain input field to trigger a denial of service condition...

6.9CVSS6AI score0.0014EPSS
SaveExploits0References4Affected Software1
CNNVD
CNNVD
added 2026/05/30 12:0 a.m.15 views

ArmCode Arm Whois 安全漏洞

ArmCode Arm Whois is a web information query tool developed by ArmCode Corporation. Version 3.11 of Arm Whois contains a security vulnerability; this vulnerability stems from a buffer overflow, which could allow local attackers to cause the application to crash by providing excessively long input...

6.9CVSS6AI score0.0014EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/05/29 12:45 p.m.41 views

CVE-2026-10074 Interinfo|DreamMaker - Arbitrary File Read

DreamMaker developed by Interinfo has an Arbitrary File Read vulnerability, allowing privileged local attackers to exploit Relative Path Traversal to download arbitrary system files...

6.9CVSS0.00347EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/05/29 12:45 p.m.10 views

CVE-2026-10074 Interinfo|DreamMaker - Arbitrary File Read

DreamMaker developed by Interinfo has an Arbitrary File Read vulnerability, allowing privileged local attackers to exploit Relative Path Traversal to download arbitrary system files...

6.9CVSS5.9AI score0.00347EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/05/29 12:39 p.m.37 views

CVE-2026-10073 Interinfo|DreamMaker - Arbitrary File Read

DreamMaker developed by Interinfo has an Arbitrary File Read vulnerability, allowing unauthenticated local attackers to exploit Relative Path Traversal to download arbitrary system files...

8.7CVSS0.00353EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/05/29 12:39 p.m.10 views

EUVD-2026-33294

DreamMaker developed by Interinfo has an Arbitrary File Read vulnerability, allowing unauthenticated local attackers to exploit Relative Path Traversal to download arbitrary system files...

8.7CVSS5.9AI score0.00353EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/29 12:0 a.m.10 views

Canon CUPS Printer Driver 安全漏洞

The Canon CUPS Printer Driver is a printer driver suite developed by the Japanese company Canon. Versions of the Canon CUPS Printer Driver 16.91.0.0 and earlier contained security vulnerabilities. These vulnerabilities were due to improper handling of symbolic links in the installation process,...

5.1CVSS5.8AI score0.00123EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/05/29 12:0 a.m.23 views

PT-2026-44837

DreamMaker developed by Interinfo has an Arbitrary File Read vulnerability, allowing unauthenticated local attackers to exploit Relative Path Traversal to download arbitrary system files...

8.7CVSS5.9AI score0.00353EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/05/29 12:0 a.m.17 views

PT-2026-44838

DreamMaker developed by Interinfo has an Arbitrary File Read vulnerability, allowing privileged local attackers to exploit Relative Path Traversal to download arbitrary system files...

6.9CVSS5.9AI score0.00347EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/05/29 12:0 a.m.11 views

Canon My Image Garden 安全漏洞

Canon My Image Garden is a photo management and printing software developed by the Japanese company Canon. Versions of Canon My Image Garden 3.6.8 and earlier contained security vulnerabilities. These vulnerabilities were due to improper handling of symbolic links in the installation process, whi...

5.1CVSS5.8AI score0.00123EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/05/29 12:0 a.m.17 views

Interinfo DreamMaker 安全漏洞

Interinfo DreamMaker is an application developed by Interinfo Corporation in China. Interinfo DreamMaker has a security vulnerability, which stems from relative path traversal. This vulnerability could allow privileged local attackers to download arbitrary system files...

6.9CVSS5.9AI score0.00347EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/05/29 12:0 a.m.22 views

PT-2026-44709

Improper handling of symbolic links in the installer of CUPS Printer Driver for macOS may allow a local attacker with login privileges to exploit a specially crafted symbolic link during installation to modify permissions of directories for which they would not normally have authorization. :Canon...

5.1CVSS5.8AI score0.00123EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2026/05/28 11:59 p.m.16 views

CVE-2026-6891

Improper handling of symbolic links in the installer of My Image Garden for macOS Version 3.6.8 or earlier may allow a local attacker with login privileges to exploit a specially crafted symbolic link during installation to modify permissions of files for which they would not normally have...

5.1CVSS5.8AI score0.00123EPSS
SaveExploits0References4
CVE
CVE
added 2026/05/27 8:44 a.m.26 views

CVE-2026-2237

CVE-2026-2237 : A vulnerability in the Synology Storage Manager package (volume encryption) prior to version 1.0.1-1100 arises from using GET requests with sensitive query strings. This allows a local attacker to read sensitive information. Documents identify the affected component as the Storage...

6.2CVSS5.8AI score0.00092EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2026/05/27 8:44 a.m.37 views

CVE-2026-2237

A use of get request method with sensitive query strings vulnerability in volume encryption of Synology Storage Manager package before 1.0.1-1100 allows local users on Windows to obtain sensitive information...

6.2CVSS0.00092EPSS
SaveExploits0References1
NVD
NVD
added 2026/05/25 3:16 p.m.23 views

CVE-2018-25376

Socusoft 3GP Photo Slideshow 8.05 contains a buffer overflow vulnerability in the registration dialog that allows local attackers to execute arbitrary code by exploiting structured exception handling. Attackers can craft malicious input in the Registration Name and Registration Key fields to...

8.6CVSS0.00183EPSS
SaveExploits0References3
NVD
NVD
added 2026/05/25 3:16 p.m.18 views

CVE-2018-25378

Notebook Pro 2.0 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the notebook name field. Attackers can create a malicious text file containing 500 or more characters, paste the content into the New Noteboo...

6.9CVSS0.00136EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/05/25 2:15 p.m.14 views

EUVD-2018-21898

Notebook Pro 2.0 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the notebook name field. Attackers can create a malicious text file containing 500 or more characters, paste the content into the New Noteboo...

6.9CVSS5.8AI score0.00136EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/05/25 2:15 p.m.15 views

EUVD-2018-21899

Flash Slideshow Maker Professional 5.20 contains a buffer overflow vulnerability in the registration dialog that allows local attackers to execute arbitrary code by exploiting structured exception handling. Attackers can craft a malicious payload and paste it into the Name and Code fields of the...

8.6CVSS6.5AI score0.00182EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/05/25 2:15 p.m.8 views

CVE-2018-25375 SocuSoft iPod Photo Slideshow 8.05 Buffer Overflow SEH

SocuSoft iPod Photo Slideshow 8.05 contains a buffer overflow vulnerability in the registration dialog that allows local attackers to execute arbitrary code by overwriting the structured exception handler. Attackers can craft malicious input in the Registration Name and Registration Key fields to...

8.6CVSS6.6AI score0.00182EPSS
SaveExploits0References3
Rows per page
Query Builder