Read the docs

Chitora soft

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

Chitora soft records in CISA KEV

No Chitora soft vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

5 records

Priority LOW 36

Untrusted search path vulnerability in Installer of Lhaz+ version 3.4.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.01059 Published 2017-07-14 No fix listed CWE-426
Priority LOW 36

Untrusted search path vulnerability in Installer of Lhaz version 2.4.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.01059 Published 2017-07-14 No fix listed CWE-426
TI-2026-30111 CVE-2026-41530 · GHSA-g8fh-6crc-6rfw

Path traversal in Chitora soft Lhaz

Priority LOW 20

The automatic folder creation feature of Lhaz and Lhaz+ provided by Chitora soft contains a path traversal vulnerability.

CVSS 4.0MEDIUM 4.6 Local No auth User interaction EPSS 0.0015 Published 2026-05-12 No fix listed CWE-22
Open these records in search →