汇总 ponsoftware 相关全部产品的 CVE 与安全漏洞情报，包括 CVSS、EPSS、公开时间与漏洞情报数据。
常见弱点模式包括 路径处理缺陷与缓冲区溢出，在 生产负载与软件部署 使用场景中可能带来 应用崩溃、内存损坏与文件覆盖 等风险。
相关漏洞数据主要来源于公开漏洞披露与安全公告，可用于评估历史漏洞暴露面与修复优先级。
| CVE | 摘要 | 来源 | 最高 CVSS | EPSS % | 公开时间 | 更新时间 |
|---|---|---|---|---|---|---|
| CVE-2018-0646 | Directory traversal vulnerability in Explzh v.7.58 and earlier allows an attacker to read arbitrary files via unspecified vectors. | [email protected] | 7.8 | 1.62% | 2018-09-04 | 2024-11-21 |
| CVE-2010-3160 | Untrusted search path vulnerability in Archive Decoder 1.23 and earlier allows local users to gain privileges via a Trojan horse executable file in the current working directory. | [email protected] | 6.9 | 0.06% | 2010-10-25 | 2026-04-29 |
| CVE-2010-3159 | Untrusted search path vulnerability in Explzh 5.67 and earlier allows local users to gain privileges via a Trojan horse executable file in the current working directory. | [email protected] | 6.9 | 0.07% | 2010-10-25 | 2026-04-29 |
| CVE-2010-2434 | Buffer overflow in Arcext.dll 2.16.1 and earlier in pon software Explzh 5.62 and earlier allows remote attackers to execute arbitrary code via an LZH LHA file with a crafted header that is not properly handled during expansion. | [email protected] | 9.3 | 5.33% | 2010-06-25 | 2026-04-29 |