<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: bearshare</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2007-0018: Stack-based buffer overflow in the NCTAudioFile2.AudioFile ActiveX control (NCTAudioFile2.dll), as used by mul</title><link>https://patchthecve.com/cve/CVE-2007-0018.html</link><guid>https://patchthecve.com/cve/CVE-2007-0018.html</guid><pubDate>Tue, 16 Jun 2026 22:34:42 +0000</pubDate><description>HIGH 9.3: Stack-based buffer overflow in the NCTAudioFile2.AudioFile ActiveX control (NCTAudioFile2.dll), as used by multiple products, allows remote attackers to execute arbitrary code via a long argument to the SetFormatLikeSample function. NOTE: the products include (1) NCTsoft NCTAudioStudio, NCTAudioEdit</description></item><item><title>CVE-2002-2144: Directory traversal vulnerability in BearShare 4.0.5 and 4.0.6 allows remote attackers to read files outside o</title><link>https://patchthecve.com/cve/CVE-2002-2144.html</link><guid>https://patchthecve.com/cve/CVE-2002-2144.html</guid><pubDate>Tue, 16 Jun 2026 22:00:44 +0000</pubDate><description>MEDIUM 5.0: Directory traversal vulnerability in BearShare 4.0.5 and 4.0.6 allows remote attackers to read files outside of the web root by hex-encoding the &quot;/&quot; (forward slash) or &quot;.&quot; (dot) characters.</description></item><item><title>CVE-2001-0368: Directory traversal vulnerability in BearShare 2.2.2 and earlier allows a remote attacker to read certain file</title><link>https://patchthecve.com/cve/CVE-2001-0368.html</link><guid>https://patchthecve.com/cve/CVE-2001-0368.html</guid><pubDate>Tue, 16 Jun 2026 21:54:10 +0000</pubDate><description>MEDIUM 5.0: Directory traversal vulnerability in BearShare 2.2.2 and earlier allows a remote attacker to read certain files via a URL containing a series of . characters, a variation of the .. (dot dot) attack.</description></item></channel></rss>