Everything

everything

Vendor: Voidtools • 3 CVEs

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-27704 1Voidtools 1Everything Jun 17, 2026 Apr 12, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Void Tools Everything lower than v1.4.1.1022 was discovered to contain a Regular Expression Denial of Service (ReDoS).
CVE-2021-20784 1Voidtools 1Everything Jun 17, 2026 Jul 14, 2021 N/A· v4 6.1 MEDIUM· v3 5.8 MEDIUM· v2 HTTP header injection vulnerability in Everything version 1.0, 1.1, and 1.2 except the Lite version may allow a remote attacker to inject an arbitrary script or alter the website that uses the product.
CVE-2020-24567 1Voidtools 1Everything Jun 17, 2026 Aug 21, 2020 N/A· v4 7.8 HIGH· v3 6.9 MEDIUM· v2 voidtools Everything before 1.4.1 Beta Nightly 2020-08-18 allows privilege escalation via a Trojan horse urlmon.dll file in the installation directory. NOTE: this is only relevant if low-privileged users can write to the...Show more voidtools Everything before 1.4.1 Beta Nightly 2020-08-18 allows privilege escalation via a Trojan horse urlmon.dll file in the installation directory. NOTE: this is only relevant if low-privileged users can write to the installation directory, which may be considered a site-specific configuration errorShow less