Skip to content
Noroxi

Dart records

14 published records for vendor dart.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
3
With a fix record
14.3%
Median publish → KEV
No record has entered KEV

Records by year

  1. 20
  2. 21
  3. 22
  4. 23
  5. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

14 records
  • CVE-2008-4652
    40Plan

    Buffer overflow in the ActiveX control (DartFtp.dll) in Dart Communications PowerTCP FTP for ActiveX 2.0.2 0 allows remote attackers to exec

    CriticalCVSS 9.3Proof of conceptEPSS 10%

    dart · powertcp ftp for activexOct 21, 2008

  • CVE-2007-2856
    39Monitor

    Buffer overflow in the Dart Communications PowerTCP ZIP Compression ActiveX control in DartZip.dll 1.8.5.3, when Internet Explorer 6 is used

    CriticalCVSS 9.3Proof of conceptEPSS 7%

    dart · powertcp zip compressionMay 24, 2007

  • CVE-2022-3095
    39Monitor

    Incorrect parsing of the backslash characters in Dart library

    CriticalCVSS 9.8No exploitEPSS 1%

    dart · dart software development kitOct 27, 2022

  • CVE-2007-2855
    38Monitor

    Buffer overflow in a certain ActiveX control in DartZipLite.dll 1.8.5.3 in Dart ZipLite Compression for ActiveX allows user-assisted remote

    CriticalCVSS 9.3No exploitEPSS 5%

    dart · dart ziplite compressionMay 24, 2007

  • CVE-2021-22568
    35Monitor

    Dart - Publishing to third-party package repositories may expose pub.dev credentials

    HighCVSS 8.8No exploitEPSS 1%

    dart · dart software development kitDec 9, 2021

  • CVE-2012-5389
    32Monitor

    NULL Pointer Dereference in PowerTCP WebServer for ActiveX 1.9.2 and earlier allows remote attackers to cause a denial of service (applicati

    HighCVSS 7.5No exploitEPSS 7%

    dart · powertcp webserver for activexJan 23, 2020

  • CVE-2022-0451
    26Monitor

    Auth bypass in Dark SDK

    MediumCVSS 6.5No exploitEPSS 1%

    dart · dart software development kitFeb 18, 2022

  • CVE-2026-27704
    26Monitor

    Dart SDK and Flutter SDK have Zip slip in Dart Pub package extraction

    MediumCVSS 6.6No exploitEPSS 1%

    dart · dart software development kitFeb 25, 2026

  • CVE-2020-35669
    25Monitor

    An issue was discovered in the http package through 0.12.2 for Dart.

    MediumCVSS 6.1Proof of conceptEPSS 2%

    dart · httpDec 23, 2020

  • CVE-2021-22540
    24Monitor

    Bad validation logic in the Dart SDK versions prior to 2.12.3 allow an attacker to use an XSS attack via DOM clobbering.

    MediumCVSS 6.1No exploitEPSS 1%

    dart · dart software development kitApr 22, 2021

  • CVE-2014-125098
    24Monitor

    Dart http_server Directory Listing virtual_directory.dart VirtualDirectory cross site scripting

    MediumCVSS 6.1No exploitEPSS 1%

    dart · http serverApr 10, 2023

  • CVE-2020-8923
    24Monitor

    An improper HTML sanitization in Dart versions up to and including 2.7.1 and dev versions 2.8.0-dev.16.0, allows an attacker leveraging DOM

    MediumCVSS 6.1No exploitEPSS 0%

    dart · dart software development kitMar 26, 2020

  • CVE-2012-3819
    21Monitor

    Stack consumption vulnerability in dartwebserver.dll 1.9 and earlier, as used in Dart PowerTCP WebServer for ActiveX and other products, all

    MediumCVSS 5.0Proof of conceptEPSS 2%

    dart · powertcp activexOct 4, 2012

  • CVE-2021-22567
    14Monitor

    Bidirectional Override in Dart SDK

    LowCVSS 3.5No exploitEPSS 1%

    dart · dart software development kitJan 5, 2022