Lucene search
+L

7325 matches found

CNNVD
CNNVD
added 2026/06/01 12:00 a.m.17 views

CodexBar 安全漏洞

CodexBar is an AI programming service usage monitoring tool developed by Peter Steinberger. Versions of CodexBar prior to 0.32.0 contained a security vulnerability. This vulnerability stemmed from a race condition in the handling of temporary files during CLI installation, which could allow local...

7.5CVSS5.8AI score0.0027EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/06/01 12:00 a.m.21 views

Fsas ServerView Agents 安全漏洞

Fsas ServerView Agents is a server monitoring and management software developed by the Japanese company Fsas. Fsas ServerView Agents for Windows versions 11.60.04 and earlier contain security vulnerabilities. These vulnerabilities stem from improper allocation of permissions for critical resource...

8.5CVSS7.4AI score0.00097EPSS
SaveExploits0References2
NVD
NVD
added 2026/05/30 4:17 p.m.31 views

CVE-2018-25423

Arm Whois 3.11 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized input string. Attackers can paste a malicious buffer of 700 bytes into the IP address or domain input field to trigger a denial of service condition...

6.9CVSS0.0014EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/05/30 2:55 p.m.13 views

CVE-2018-25423

Arm Whois 3.11 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized input string. Attackers can paste a malicious buffer of 700 bytes into the IP address or domain input field to trigger a denial of service condition...

6.9CVSS6AI score0.0014EPSS
SaveExploits0References4Affected Software1
CNNVD
CNNVD
added 2026/05/30 12:00 a.m.20 views

ArmCode Arm Whois 安全漏洞

ArmCode Arm Whois is a web information query tool developed by ArmCode Corporation. Version 3.11 of Arm Whois contains a security vulnerability; this vulnerability stems from a buffer overflow, which could allow local attackers to cause the application to crash by providing excessively long input...

6.9CVSS6AI score0.0014EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/05/29 12:45 p.m.15 views

CVE-2026-10074 Interinfo|DreamMaker - Arbitrary File Read

DreamMaker developed by Interinfo has an Arbitrary File Read vulnerability, allowing privileged local attackers to exploit Relative Path Traversal to download arbitrary system files...

6.9CVSS5.9AI score0.00347EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/05/29 12:45 p.m.50 views

CVE-2026-10074 Interinfo|DreamMaker - Arbitrary File Read

DreamMaker developed by Interinfo has an Arbitrary File Read vulnerability, allowing privileged local attackers to exploit Relative Path Traversal to download arbitrary system files...

6.9CVSS0.00347EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/05/29 12:39 p.m.17 views

EUVD-2026-33294

DreamMaker developed by Interinfo has an Arbitrary File Read vulnerability, allowing unauthenticated local attackers to exploit Relative Path Traversal to download arbitrary system files...

8.7CVSS5.9AI score0.00353EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/05/29 12:39 p.m.46 views

CVE-2026-10073 Interinfo|DreamMaker - Arbitrary File Read

DreamMaker developed by Interinfo has an Arbitrary File Read vulnerability, allowing unauthenticated local attackers to exploit Relative Path Traversal to download arbitrary system files...

8.7CVSS0.00353EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/29 12:00 a.m.28 views

Interinfo DreamMaker 安全漏洞

Interinfo DreamMaker is an application developed by Interinfo Corporation in China. Interinfo DreamMaker has a security vulnerability, which stems from relative path traversal. This vulnerability could allow privileged local attackers to download arbitrary system files...

6.9CVSS5.9AI score0.00347EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/05/29 12:00 a.m.30 views

PT-2026-44837

DreamMaker developed by Interinfo has an Arbitrary File Read vulnerability, allowing unauthenticated local attackers to exploit Relative Path Traversal to download arbitrary system files...

8.7CVSS5.9AI score0.00353EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/05/29 12:00 a.m.19 views

Canon CUPS Printer Driver 安全漏洞

The Canon CUPS Printer Driver is a printer driver suite developed by the Japanese company Canon. Versions of the Canon CUPS Printer Driver 16.91.0.0 and earlier contained security vulnerabilities. These vulnerabilities were due to improper handling of symbolic links in the installation process,...

5.1CVSS5.8AI score0.00123EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/05/29 12:00 a.m.26 views

PT-2026-44838

DreamMaker developed by Interinfo has an Arbitrary File Read vulnerability, allowing privileged local attackers to exploit Relative Path Traversal to download arbitrary system files...

6.9CVSS5.9AI score0.00347EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/05/29 12:00 a.m.18 views

Canon My Image Garden 安全漏洞

Canon My Image Garden is a photo management and printing software developed by the Japanese company Canon. Versions of Canon My Image Garden 3.6.8 and earlier contained security vulnerabilities. These vulnerabilities were due to improper handling of symbolic links in the installation process, whi...

5.1CVSS5.8AI score0.00123EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/05/29 12:00 a.m.29 views

PT-2026-44709

Improper handling of symbolic links in the installer of CUPS Printer Driver for macOS may allow a local attacker with login privileges to exploit a specially crafted symbolic link during installation to modify permissions of directories for which they would not normally have authorization. :Canon...

5.1CVSS5.8AI score0.00123EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2026/05/28 11:59 p.m.18 views

CVE-2026-6891

Improper handling of symbolic links in the installer of My Image Garden for macOS Version 3.6.8 or earlier may allow a local attacker with login privileges to exploit a specially crafted symbolic link during installation to modify permissions of files for which they would not normally have...

5.1CVSS5.8AI score0.00123EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/05/27 8:44 a.m.48 views

CVE-2026-2237

A use of get request method with sensitive query strings vulnerability in volume encryption of Synology Storage Manager package before 1.0.1-1100 allows local users on Windows to obtain sensitive information...

6.2CVSS0.00092EPSS
SaveExploits0References1
CVE
CVE
added 2026/05/27 8:44 a.m.44 views

CVE-2026-2237

CVE-2026-2237 : A vulnerability in the Synology Storage Manager package (volume encryption) prior to version 1.0.1-1100 arises from using GET requests with sensitive query strings. This allows a local attacker to read sensitive information. Documents identify the affected component as the Storage...

6.2CVSS5.8AI score0.00092EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2026/05/25 3:16 p.m.32 views

CVE-2018-25376

Socusoft 3GP Photo Slideshow 8.05 contains a buffer overflow vulnerability in the registration dialog that allows local attackers to execute arbitrary code by exploiting structured exception handling. Attackers can craft malicious input in the Registration Name and Registration Key fields to...

8.6CVSS0.00183EPSS
SaveExploits0References3
NVD
NVD
added 2026/05/25 3:16 p.m.25 views

CVE-2018-25378

Notebook Pro 2.0 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the notebook name field. Attackers can create a malicious text file containing 500 or more characters, paste the content into the New Noteboo...

6.9CVSS0.00136EPSS
SaveExploits0References2
Rows per page
Query Builder