CVE-2023-6401

A vulnerability classified as problematic was found in NotePad++ up to 8.1. Affected by this vulnerability is an unknown functionality of the file dbghelp.exe. The manipulation leads to uncontrolled search path. An attack has to be approached locally. The identifier VDB-246421 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-427

• https://vuldb.com/?ctiid.246421Third Party Advisory
• https://vuldb.com/?id.246421Third Party Advisory
• https://vuldb.com/?ctiid.246421Third Party Advisory
• https://vuldb.com/?id.246421Third Party Advisory

Published

Nov 30, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-6394A flaw was found in Quarkus. This issue occurs when receivin…9.1
• CVE-2023-6395The Mock software contains a vulnerability wherein an attack…9.8
• CVE-2023-6397 A null pointer dereference vulnerability in Zyxe…5.3
• CVE-2023-6398A post-authentication command injection vulnerability in the…7.2
• CVE-2023-6399A format string vulnerability in Zyxel ATP series firmware v…6.5
• CVE-2023-6400Incorrect Authorization vulnerability in OpenText™ ZENworks …7.4
• CVE-2023-6402A vulnerability, which was classified as critical, was found…8.8
• CVE-2023-6407 A CWE-22: Improper Limitation of a Pathname to a Restricted…7.1
• CVE-2023-6408 CWE-924: Improper Enforcement of Message Integrity During T…8.1
• CVE-2023-6409 CWE-798: Use of Hard-coded Credentials vulnerability exists…7.7
• CVE-2023-6410A vulnerability has been reported in Voovi Social Networking…7.5
• CVE-2023-6411A vulnerability has been reported in Voovi Social Networking…7.5