Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

TI-2026-30111 CVE-2026-41530 · GHSA-g8fh-6crc-6rfw

Path traversal in Chitora soft Lhaz

Priority LOW 20

The automatic folder creation feature of Lhaz and Lhaz+ provided by Chitora soft contains a path traversal vulnerability.

CVSS 4.0MEDIUM 4.6 Local No auth User interaction EPSS 0.0015 Published 2026-05-12 No fix listed CWE-22
Priority LOW 36

Untrusted search path vulnerability in Installer of Lhaz+ version 3.4.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.01059 Published 2017-07-14 No fix listed CWE-426
Priority LOW 36

Untrusted search path vulnerability in Installer of Lhaz version 2.4.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.01059 Published 2017-07-14 No fix listed CWE-426