Null pointer dereference vulnerability in Avira Antivirus engine when scanning a malformed...
CVE-2025-7018
Null pointer dereference vulnerability in Avira Antivirus engine when scanning a malformed Windows PE file may allow Den
#severity:medium
共收录 5584 条相关情报。
← 返回所有主题Stack overflow vulnerability in Avast Antivirus when scanning a malformed Office Open XML file...
CVE-2025-7019
Stack overflow vulnerability in Avast Antivirus when scanning a malformed Office Open XML file may allow Denial-of-Servi
Use of stack memory after free vulnerability in Avast Antivirus when scanning a malformed Windows...
CVE-2025-7006
Use of stack memory after free vulnerability in Avast Antivirus when scanning a malformed Windows PE file may allow Deni
Uncontrolled recursion vulnerability in Avast Antivirus when scanning a malformed Windows PE file...
CVE-2025-7005
Uncontrolled recursion vulnerability in Avast Antivirus when scanning a malformed Windows PE file may allow Denial-of-Se
Stack overflow vulnerability due to uncontrolled recursion in Avast Antivirus when scanning a...
CVE-2025-7010
Stack overflow vulnerability due to uncontrolled recursion in Avast Antivirus when scanning a malformed PDF file may all
File Browser: FilePath traversal in download-as-zip/tar via Windows-style backslash separators in stored filenames
CVE-2026-54093
### Summary filebrowser builds the download-as-zip / download-as-tar archive entry names with `filepath.ToSlash`, which
File Browser: Symlink following lets scoped users read, overwrite, and share files outside their filebrowser scope
CVE-2026-54094
## Summary File Browser enforces per-user scope with `afero.NewBasePathFs(afero.NewOsFs(), scope)`, set up in `users/us
MISP contains a reflected cross-site scripting vulnerability in the UiBeta event index view. The...
CVE-2026-54395
MISP contains a reflected cross-site scripting vulnerability in the UiBeta event index view. The urlparams value is inse
A stored cross-site scripting vulnerability exists in MISP when the Overmind theme is used. The...
CVE-2026-54393
A stored cross-site scripting vulnerability exists in MISP when the Overmind theme is used. The setHomePage endpoint pre
An information disclosure vulnerability exists in the MISP AuthKey edit functionality. When a...
CVE-2026-54396
An information disclosure vulnerability exists in the MISP AuthKey edit functionality. When a validation error occurs du
An incorrect visibility condition in the MISP event template builder allowed authenticated non...
CVE-2026-54362
An incorrect visibility condition in the MISP event template builder allowed authenticated non-site-admin users to view
MISP contains a path traversal vulnerability in OrganisationsController::getOrgLogo. The...
CVE-2026-54394
MISP contains a path traversal vulnerability in OrganisationsController::getOrgLogo. The vulnerable code builds organisa
A vulnerability in MISP’s non-REST event editing path allowed an authenticated user with event...
CVE-2026-54397
A vulnerability in MISP’s non-REST event editing path allowed an authenticated user with event edit permissions to manip
The Naxclow platform exposes a registration endpoint that accepts signed requests containing a...
CVE-2026-50244
The Naxclow platform exposes a registration endpoint that accepts signed requests containing a batch prefix and an arbit
An improper authorization vulnerability in MISP allowed an authenticated organization...
CVE-2026-54357
An improper authorization vulnerability in MISP allowed an authenticated organization administrator to access or modify
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in...
CVE-2026-24618
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in HashThemes Hash Elements all
During WiFi association, Naxclow device firmware prints the host network’s SSID, PSK, and...
CVE-2026-50099
During WiFi association, Naxclow device firmware prints the host network’s SSID, PSK, and negotiated WPA keys in clearte
Naxclow device identifiers use fixed manufacturing prefixes combined with sequential counters,...
CVE-2026-42932
Naxclow device identifiers use fixed manufacturing prefixes combined with sequential counters, producing a fully predict
Camaleon CMS 2.9.2 contains an improper authorization vulnerability in the administrator draft...
CVE-2026-10715
Camaleon CMS 2.9.2 contains an improper authorization vulnerability in the administrator draft autosave endpoint. A low-
ConnectBot SSH Client Library: Excessive allocation and integer overflow in DER private-key parsing
## Summary The DER parser used for application-supplied private keys did not safely validate encoded length values befo