Browse CVEs

HIGH 7.5 CVE-2026-27704 The Dart and Flutter SDKs provide software development kits for the Dart programming language. In versions of the Dart SDK prior to 3.11.0 and the Fl… Dart Software Development Kit 3.11.0 / 3.41.0+ Fix from $1,9502026-02-25 MEDIUM 6.1 CVE-2014-125098 A vulnerability was found in Dart http_server up to 0.9.5 and classified as problematic. Affected by this issue is the function VirtualDirectory of t… HTTP Server 0.9.6+ Fix from $1,6002023-04-10 CRITICAL 9.8 CVE-2022-3095 The implementation of backslash parsing in the Dart URI class for versions prior to 2.18 and Flutter versions prior to 3.30 differs from the WhatWG U… Dart Software Development Kit 2.18.0 / 3.3.3+ Fix from $2,3002022-10-27 MEDIUM 6.5 CVE-2022-0451 Dart SDK contains the HTTPClient in dart:io library whcih includes authorization headers when handling cross origin redirects. These headers may be e… Dart Software Development Kit 2.16.0+ Fix from $1,6002022-02-18 HIGH 8.8 CVE-2021-22568 When using the dart pub publish command to publish a package to a third-party package server, the request would be authenticated with an oauth2 acces… Dart Software Development Kit 2.15.0+ Fix from $1,9502021-12-09 MEDIUM 6.1 CVE-2021-22540 Bad validation logic in the Dart SDK versions prior to 2.12.3 allow an attacker to use an XSS attack via DOM clobbering. The validation logic in dart… Dart Software Development Kit 2.12.3+ Fix from $1,6002021-04-22 MEDIUM 6.1 CVE-2020-35669 An issue was discovered in the http package through 0.12.2 for Dart. If the attacker controls the HTTP method and the app is using Request directly, … Http after 0.12.2 Fix from $1,6002020-12-24 MEDIUM 6.1 CVE-2020-8923 An improper HTML sanitization in Dart versions up to and including 2.7.1 and dev versions 2.8.0-dev.16.0, allows an attacker leveraging DOM Clobberin… Dart Software Development Kit 2.7.2+ Fix from $1,6002020-03-26 HIGH 7.5 CVE-2012-5389EPSS 7% NULL Pointer Dereference in PowerTCP WebServer for ActiveX 1.9.2 and earlier allows remote attackers to cause a denial of service (application crash)… Powertcp Webserver For Activex after 1.9.2 Fix from $1,9502020-01-23 MEDIUM 5.0 CVE-2012-3819 Stack consumption vulnerability in dartwebserver.dll 1.9 and earlier, as used in Dart PowerTCP WebServer for ActiveX and other products, allows remot… Powertcp Activex No fix yet Fix from $1,6002012-10-04 HIGH 9.3 CVE-2008-4652EPSS 10% Buffer overflow in the ActiveX control (DartFtp.dll) in Dart Communications PowerTCP FTP for ActiveX 2.0.2 0 allows remote attackers to execute arbit… Powertcp Ftp For Activex No fix yet Fix from $1,9502008-10-22 HIGH 9.3 CVE-2007-2855 Buffer overflow in a certain ActiveX control in DartZipLite.dll 1.8.5.3 in Dart ZipLite Compression for ActiveX allows user-assisted remote attackers… Dart Ziplite Compression No fix yet Fix from $1,9502007-05-24 HIGH 9.3 CVE-2007-2856EPSS 7% Buffer overflow in the Dart Communications PowerTCP ZIP Compression ActiveX control in DartZip.dll 1.8.5.3, when Internet Explorer 6 is used, allows … Powertcp Zip Compression No fix yet Fix from $1,9502007-05-24