İçeriğe atla
Noroxi

RARLAB kayıtları

rarlab üreticisine ait 45 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
5 · %11,1
Silahlaştırılmış
5 · %11,1
Pre-auth RCE
9
Düzeltme kaydı olan
%46,7
Yayından KEV’e ortanca
92 gün

Yıllara göre kayıt

  1. 17
  2. 19
  3. 21
  4. 22
  5. 23
  6. 24
  7. 25
  8. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

45 kayıt
  • CVE-2023-38831
    91Hemen

    RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a ZIP archive.

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %99

    rarlab · winrar23 Ağu 2023

  • CVE-2025-8088
    91Hemen

    Path traversal vulnerability in WinRAR

    YüksekCVSS 8,4KEVSilahlaştırılmışEPSS %94

    rarlab · winrar8 Ağu 2025

  • CVE-2022-30333
    90Hemen

    RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) operation, as demonst

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %99

    rarlab · unrar9 May 2022

  • CVE-2018-20250
    90Hemen

    In WinRAR versions prior to and including 5.61, There is path traversal vulnerability when crafting the filename field of the ACE format (in

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %96

    rarlab · winrar5 Şub 2019

  • CVE-2025-6218
    88Hemen

    RARLAB WinRAR Directory Traversal Remote Code Execution Vulnerability

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %90

    rarlab · winrar20 Haz 2025

  • CVE-2004-1254
    43Planlayın

    WinRAR 3.40, and possibly earlier versions, allows remote attackers to execute arbitrary code via a ZIP file containing a file with a long f

    KritikCVSS 10,0Kavram kanıtıEPSS %10

    rarlab · winrar10 Oca 2005

  • CVE-2004-0234
    43Planlayın

    Multiple stack-based buffer overflows in the get_header function in header.c for LHA 1.14, as used in products such as Barracuda Spam Firewa

    KritikCVSS 10,0İstismar yokEPSS %10

    clearswift · mailsweeper18 Ağu 2004

  • CVE-2012-6706
    42Planlayın

    A VMSF_DELTA memory corruption was discovered in unrar before 5.5.5, as used in Sophos Anti-Virus Threat Detection Engine before 3.37.2 and

    KritikCVSS 9,8İstismar yokEPSS %10

    sophos · threat detection engine22 Haz 2017

  • CVE-2008-7144
    41Planlayın

    Multiple unspecified vulnerabilities in RARLAB WinRAR before 3.71 have unknown impact and attack vectors related to crafted (1) ACE, (2) ARJ

    KritikCVSS 10,0İstismar yokEPSS %2

    rarlab · winrar1 Eyl 2009

  • CVE-2017-12942
    40Planlayın

    libunrar.a in UnRAR before 5.5.7 has a buffer overflow in the Unpack::LongLZ function.

    KritikCVSS 9,8İstismar yokEPSS %2

    rarlab · unrar18 Ağu 2017

  • CVE-2017-12941
    40Planlayın

    libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the Unpack::Unpack20 function.

    KritikCVSS 9,8İstismar yokEPSS %2

    rarlab · unrar18 Ağu 2017

  • CVE-2017-12940
    40Planlayın

    libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the EncodeFileName::Decode call within the Archive::ReadHeader15 function.

    KritikCVSS 9,8İstismar yokEPSS %2

    rarlab · unrar18 Ağu 2017

  • CVE-2006-3845
    39İzleyin

    Stack-based buffer overflow in lzh.fmt in WinRAR 3.00 through 3.60 beta 6 allows remote attackers to execute arbitrary code via a long filen

    KritikCVSS 9,3Kavram kanıtıEPSS %7

    rarlab · winrar25 Tem 2006

  • CVE-2017-14122
    37İzleyin

    unrar 0.0.1 (aka unrar-free or unrar-gpl) suffers from a stack-based buffer over-read in unrarlib.c, related to ExtrFile and stricomp.

    KritikCVSS 9,1İstismar yokEPSS %1

    rarlab · unrar3 Eyl 2017

  • CVE-2022-43650
    35İzleyin

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of RARLAB WinRAR 6.11.0.0.

    YüksekCVSS 7,1İstismar yokEPSS %23

    rarlab · winrar29 Mar 2023

  • CVE-2023-40477
    34İzleyin

    RARLAB WinRAR Recovery Volume Improper Validation of Array Index Remote Code Execution Vulnerability

    YüksekCVSS 7,8Kavram kanıtıEPSS %11

    rarlab · winrar2 May 2024

  • CVE-2005-3262
    33İzleyin

    Format string vulnerability in RARLAB WinRAR 2.90 through 3.50 allows remote attackers to execute arbitrary code via format string specifier

    YüksekCVSS 7,5Kavram kanıtıEPSS %8

    rarlab · winrar20 Eki 2005

  • CVE-2018-20253
    32İzleyin

    In WinRAR versions prior to and including 5.60, There is an out-of-bounds write vulnerability during parsing of a crafted LHA / LZH archive

    YüksekCVSS 7,8İstismar yokEPSS %4

    rarlab · winrar12 Şub 2019

  • CVE-2018-20252
    32İzleyin

    In WinRAR versions prior to and including 5.60, there is an out-of-bounds write vulnerability during parsing of crafted ACE and RAR archive

    YüksekCVSS 7,8İstismar yokEPSS %3

    rarlab · winrar5 Şub 2019

  • CVE-2018-20251
    31İzleyin

    In WinRAR versions prior to and including 5.61, there is path traversal vulnerability when crafting the filename field of the ACE format.

    OrtaCVSS 5,5İstismar yokEPSS %31

    rarlab · winrar5 Şub 2019

  • CVE-2005-3263
    31İzleyin

    Stack-based buffer overflow in UNACEV2.DLL for RARLAB WinRAR 2.90 through 3.50 allows remote attackers to execute arbitrary code via an ACE

    YüksekCVSS 7,5İstismar yokEPSS %3

    rarlab · winrar20 Eki 2005

  • CVE-2017-12938
    31İzleyin

    UnRAR before 5.5.7 allows remote attackers to bypass a directory-traversal protection mechanism via vectors involving a symlink to the .

    YüksekCVSS 7,5İstismar yokEPSS %3

    rarlab · unrar18 Ağu 2017

  • CVE-2017-14120
    31İzleyin

    unrar 0.0.1 (aka unrar-free or unrar-gpl) suffers from a directory traversal vulnerability for RAR v2 archives: pathnames of the form ../[fi

    YüksekCVSS 7,5İstismar yokEPSS %2

    rarlab · unrar3 Eyl 2017

  • CVE-2018-25018
    31İzleyin

    UnRAR 5.6.1.7 through 5.7.4 and 6.0.3 has an out-of-bounds write during a memcpy in QuickOpen::ReadRaw when called from QuickOpen::ReadNext.

    YüksekCVSS 7,8İstismar yokEPSS %1

    rarlab · unrar30 Haz 2021

  • CVE-2017-20006
    31İzleyin

    UnRAR 5.6.1.2 and 5.6.1.3 has a heap-based buffer overflow in Unpack::CopyString (called from Unpack::Unpack5 and CmdExtract::ExtractCurrent

    YüksekCVSS 7,8İstismar yokEPSS %1

    rarlab · unrar30 Haz 2021