DA
Vendor
Dart
14
CVEs
0
On KEV
0
New 30D
Products
DS9.8
Dart Software Development Kit
Dart
7 CVEs0 on KEV0 new
DZ–
Dart Ziplite Compression
Dart
1 CVEs0 on KEV0 new
HT6.1
Http
Dart
1 CVEs0 on KEV0 new
HS6.1
Http Server
Dart
1 CVEs0 on KEV0 new
PA–
Powertcp Activex
Dart
1 CVEs0 on KEV0 new
PF–
Powertcp Ftp For Activex
Dart
1 CVEs0 on KEV0 new
PW7.5
Powertcp Webserver For Activex
Dart
1 CVEs0 on KEV0 new
PZ–
Powertcp Zip Compression
Dart
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-27704 | DS Dart Software Development Kit Dart | 7.5 | Feb 25 | Dart SDK and Flutter SDK have Zip slip in Dart Pub package extraction |
| CVE-2014-125098 | HS Http Server Dart | 6.1 | Apr 10 | A vulnerability was found in Dart http_server up to 0.9.5 and classified as problematic |
| CVE-2022-3095 | DS Dart Software Development Kit Dart | 9.8 | Oct 27 | Incorrect parsing of the backslash characters in Dart library |
| CVE-2022-0451 | DS Dart Software Development Kit Dart | 6.5 | Feb 18 | Dart SDK contains the HTTPClient in dart:io library whcih includes authorization headers when handling cross origin redirects |
| CVE-2021-22567 | DS Dart Software Development Kit Dart | 3.5 | Jan 5 | Bidirectional Unicode text can be interpreted and compiled differently than how it appears in editors which can be exploited to get nefarious code passed a code review by… |
| CVE-2021-22568 | DS Dart Software Development Kit Dart | 8.8 | Dec 9 | When using the dart pub publish command to publish a package to a third-party package server, the request would be authenticated with an oauth2 access_token that is valid for… |
| CVE-2021-22540 | DS Dart Software Development Kit Dart | 6.1 | Apr 22 | Bad validation logic in the Dart SDK versions prior to 2.12.3 allow an attacker to use an XSS attack via DOM clobbering |
| CVE-2020-35669 | HT Http Dart | 6.1 | Dec 24 | An issue was discovered in the http package through 0.12.2 for Dart |
| CVE-2020-8923 | DS Dart Software Development Kit Dart | 6.1 | Mar 26 | An improper HTML sanitization in Dart versions up to and including 2.7.1 and dev versions 2.8.0-dev.16.0, allows an attacker leveraging DOM Clobbering techniques to skip the… |
| CVE-2012-5389 | PW Powertcp Webserver For Activex Dart | 7.5 | Jan 23 | NULL Pointer Dereference in PowerTCP WebServer for ActiveX 1.9.2 and earlier allows remote attackers to cause a denial of service (application crash) via a crafted HTTP request |
| CVE-2012-3819 | PA Powertcp Activex Dart | – | Oct 4 | Stack consumption vulnerability in dartwebserver.dll 1.9 and earlier, as used in Dart PowerTCP WebServer for ActiveX and other products, allows remote attackers to cause a denial… |
| CVE-2008-4652 | PF Powertcp Ftp For Activex Dart | – | Oct 22 | Buffer overflow in the ActiveX control (DartFtp.dll) in Dart Communications PowerTCP FTP for ActiveX 2.0.2 0 allows remote attackers to execute arbitrary code via a long SecretKey… |
| CVE-2007-2855 | DZ Dart Ziplite Compression Dart | – | May 24 | Buffer overflow in a certain ActiveX control in DartZipLite.dll 1.8.5.3 in Dart ZipLite Compression for ActiveX allows user-assisted remote attackers to execute arbitrary code via… |
| CVE-2007-2856 | PZ Powertcp Zip Compression Dart | – | May 24 | Buffer overflow in the Dart Communications PowerTCP ZIP Compression ActiveX control in DartZip.dll 1.8.5.3, when Internet Explorer 6 is used, allows user-assisted remote attackers… |