Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed...
CVE-2025-7002
Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed PDF file may allow Loca
#severity:high
共收录 5509 条相关情报。
← 返回所有主题Heap buffer out-of-bounds read vulnerability in Avast Antivirus when scanning a malformed Windows...
CVE-2025-7009
Heap buffer out-of-bounds read vulnerability in Avast Antivirus when scanning a malformed Windows PE file may allow Loca
Heap out-of-bounds read vulnerability in Avast Antivirus when scanning a malformed zip file...
CVE-2025-7011
Heap out-of-bounds read vulnerability in Avast Antivirus when scanning a malformed zip file containing XML may allow Loc
Heap buffer out-of-bounds write vulnerability in Avast Antivirus when scanning a malformed...
CVE-2025-7004
Heap buffer out-of-bounds write vulnerability in Avast Antivirus when scanning a malformed Windows PE file may allow Loc
Heap buffer out-of-bounds read vulnerability in Avast Antivirus when scanning a malformed Windows...
CVE-2025-7008
Heap buffer out-of-bounds read vulnerability in Avast Antivirus when scanning a malformed Windows PE file with .NET meta
Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed...
CVE-2025-7003
Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed PDF file may allow Loca
File Browser has a Command Execution Allowlist Bypass via Shell Metacharacter Injection
CVE-2026-54090
> [!NOTE] > **This feature has been disabled by default for all installations from v2.33.8 onwards, including for existe
File Browser has incorrect access control for public directory shares via rule path rebasing
CVE-2026-54091
### Summary File Browser's public share handlers rebase the share owner's filesystem root to the shared directory and th
File Browser has a DoS Vulnerability via Public Login API
CVE-2026-54092
### Summary Unchecked passwords maximums allow for an arbitrarily large password to be passed into the login API. This s
MISP contains an insecure default configuration in which the Security.check_sec_fetch_site_header...
CVE-2026-54359
MISP contains an insecure default configuration in which the Security.check_sec_fetch_site_header control is disabled. W
MISP contained multiple mass assignment vulnerabilities in the handling of collections, tag...
CVE-2026-54361
MISP contained multiple mass assignment vulnerabilities in the handling of collections, tag collections, event delegatio
Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4...
CVE-2026-53408
Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and before 7.
A mass assignment vulnerability exists in MISP’s sharing group creation endpoint. When creating a...
CVE-2026-54360
A mass assignment vulnerability exists in MISP’s sharing group creation endpoint. When creating a new sharing group, the
An incorrect authorization vulnerability in MISP allows an organization administrator to target...
CVE-2026-54358
An incorrect authorization vulnerability in MISP allows an organization administrator to target site administrator accou
Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4...
CVE-2026-53407
Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and before 7.
A flaw in Naxclow's platform’s onboarding workflow allows an attacker to replay a confirm-then...
CVE-2026-42947
A flaw in Naxclow's platform’s onboarding workflow allows an attacker to replay a confirm-then-bind sequence to silently
The Naxclow platform API that returns device relay registration details exposes a persistent...
CVE-2026-50108
The Naxclow platform API that returns device relay registration details exposes a persistent credential without verifyin
File Browser: Improper Access Control Occurs via Pre-Created Public Share for a Non-existent Path
CVE-2026-54096
### Summary This is similar vulnrability of **`CVE-2026-0035`**, which was fixed in Android `MediaProvider` with **high*
File Browser: Cross-user unauthorized share-link deletion via unbounded prefix match in DeleteWithPathPrefix
CVE-2026-54097
### Summary A low-privileged authenticated user of filebrowser (with `create` + `delete` permissions in their own isolat
esbuild: Missing binary integrity verification in Deno module enables remote code execution via NPM_CONFIG_REGISTRY
### Summary The esbuild Deno module (`lib/deno/mod.ts`) downloads native binary executables from an npm registry and wr