Lucene search
K

7 matches found

EUVD
EUVD
added 2026/04/23 12:31 a.m.2 views

EUVD-2026-25119

radare2 prior to 6.1.4 contains a command injection vulnerability in the PDB parser's printgvars function that allows attackers to execute arbitrary commands by crafting a malicious PDB file with newline characters in symbol names. Attackers can inject arbitrary radare2 commands through unsanitiz...

8.4CVSS6.3AI score0.00026EPSS
Exploits1References5
CNNVD
CNNVD
added 2026/04/22 12:0 a.m.6 views

Radare2 操作系统命令注入漏洞

Radare2 is an open-source reverse framework for Unix-based geeks, developed by Radare. Versions of Radare2 prior to 6.1.4 contained a vulnerability related to operating system command injection. This vulnerability stemmed from the printgvars function in the PDB parser, which allowed command...

8.4CVSS6AI score0.00026EPSS
Exploits1References1
Tenable Nessus
Tenable Nessus
added 2026/04/16 12:0 a.m.0 views

Linux Distros Unpatched Vulnerability : CVE-2026-40499

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - radare2 prior to version 6.1.4 contains a command injection vulnerability in the PDB parser's printgvars function that allows attackers to execute arbitrary...

8.4CVSS5.8AI score0.00039EPSS
Exploits1References2
AlpineLinux
AlpineLinux
added 2026/04/15 2:5 a.m.3 views

CVE-2026-40499

radare2 prior to version 6.1.4 contains a command injection vulnerability in the PDB parser's printgvars function that allows attackers to execute arbitrary commands by embedding a newline byte in the PE section header name field. Attackers can craft a malicious PDB file with specially crafted...

8.4CVSS6.1AI score0.00039EPSS
Exploits1References5
CVE
CVE
added 2026/04/15 2:5 a.m.5 views

CVE-2026-40499

Radare2

8.4CVSS6.1AI score0.00039EPSS
Exploits1References4Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/15 2:5 a.m.0 views

CVE-2026-40499 radare2 < 6.1.4 Command Injection via PDB Parser print_gvars()

radare2 prior to version 6.1.4 contains a command injection vulnerability in the PDB parser's printgvars function that allows attackers to execute arbitrary commands by embedding a newline byte in the PE section header name field. Attackers can craft a malicious PDB file with specially crafted...

8.4CVSS6.1AI score0.00039EPSS
Exploits1References4
Cvelist
Cvelist
added 2026/04/15 2:5 a.m.28 views

CVE-2026-40499 radare2 < 6.1.4 Command Injection via PDB Parser print_gvars()

radare2 prior to version 6.1.4 contains a command injection vulnerability in the PDB parser's printgvars function that allows attackers to execute arbitrary commands by embedding a newline byte in the PE section header name field. Attackers can craft a malicious PDB file with specially crafted...

8.4CVSS0.00039EPSS
Exploits1References4
Rows per page
Query Builder