https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 09:58:25 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-04819 bdu:2023-04819 https://cve.radiocsirt.org/vuln/bdu:2023-04819 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0694 certfr-2023-avi-0694 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0694 https://cve.radiocsirt.org/vuln/euvd-2026-259759 EUVD-2026-259759 https://cve.radiocsirt.org/vuln/euvd-2026-259759 https://cve.radiocsirt.org/vuln/fkie_cve-2023-40477 <p>RARLAB WinRAR Recovery Volume Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of RARLAB WinRAR. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.</p> <p>The specific flaw exists within the processing of recovery volumes. The issue results from the lack of proper validation of user-supplied data, which can result in a memory access past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-21233.</p> <p>RARLAB WinRAR Recovery Volume Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of RARLAB WinRAR. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.</p> <p>The specific flaw exists within the processing of recovery volumes. The issue results from the lack of proper validation of user-supplied data, which can result in a memory access past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-21233.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-40477 https://cve.radiocsirt.org/vuln/ghsa-58vr-f4x9-3h36 <p>RARLAB WinRAR Recovery Volume Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of RARLAB WinRAR. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.</p> <p>The specific flaw exists within the processing of recovery volumes. The issue results from the lack of proper validation of user-supplied data, which can result in a memory access past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-21233.</p> <p>RARLAB WinRAR Recovery Volume Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of RARLAB WinRAR. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.</p> <p>The specific flaw exists within the processing of recovery volumes. The issue results from the lack of proper validation of user-supplied data, which can result in a memory access past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-21233.</p> https://cve.radiocsirt.org/vuln/ghsa-58vr-f4x9-3h36 https://cve.radiocsirt.org/vuln/gsd-2023-40477 gsd-2023-40477 https://cve.radiocsirt.org/vuln/gsd-2023-40477 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13394-1 <p>clamav-0.103.11-2.1 on GA media</p> <p>clamav-0.103.11-2.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:13394-1 https://cve.radiocsirt.org/vuln/suse-su-2023:4297-1 <p>Security update for clamav</p> <p>Security update for clamav</p> https://cve.radiocsirt.org/vuln/suse-su-2023:4297-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-40477 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: libclamunrar, Ubuntu:16.04:LTS: rar, Ubuntu:16.04:LTS: unrar-nonfree, Ubuntu:18.04:LTS: libclamunrar, Ubuntu:18.04:LTS: rar, Ubuntu:18.04:LTS: unrar-nonfree, Ubuntu:20.04:LTS: libclamunrar, Ubuntu:20.04:LTS: rar, Ubuntu:20.04:LTS: unrar-nonfree, Ubuntu:22.04:LTS: libclamunrar and 3 more</p> <p>RARLAB WinRAR Recovery Volume Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of RARLAB WinRAR. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of recovery volumes. The issue results from the lack of proper validation of user-supplied data, which can result in a memory access past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-21233.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: libclamunrar, Ubuntu:16.04:LTS: rar, Ubuntu:16.04:LTS: unrar-nonfree, Ubuntu:18.04:LTS: libclamunrar, Ubuntu:18.04:LTS: rar, Ubuntu:18.04:LTS: unrar-nonfree, Ubuntu:20.04:LTS: libclamunrar, Ubuntu:20.04:LTS: rar, Ubuntu:20.04:LTS: unrar-nonfree, Ubuntu:22.04:LTS: libclamunrar and 3 more</p> <p>RARLAB WinRAR Recovery Volume Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of RARLAB WinRAR. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of recovery volumes. The issue results from the lack of proper validation of user-supplied data, which can result in a memory access past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-21233.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-40477 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2093 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in win.rar WinRAR ausnutzen, um beliebigen Programmcode auszuführen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in win.rar WinRAR ausnutzen, um beliebigen Programmcode auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2093