CVE-2023-44442 GIMP PSD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

GIMP PSD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page o...

CVE-2023-44440 Ashlar-Vellum Lithium Uncontrolled Search Path Element Remote Code Execution Vulnerability

Ashlar-Vellum Lithium Uncontrolled Search Path Element Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Lithium. User interaction is required to exploit this vulnerability in that the target must...

CVE-2023-44440

CVE-2023-44440 affects Ashlar-Vellum Lithium. The vulnerability arises during parsing of various file types, where the process loads a library from an unsecured location, enabling an attacker to execute code in the context of the current process. Exploitation requires user interaction: the target...

CVE-2023-44439 Ashlar-Vellum Xenon Uncontrolled Search Path Element Remote Code Execution Vulnerability

Ashlar-Vellum Xenon Uncontrolled Search Path Element Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Xenon. User interaction is required to exploit this vulnerability in that the target must visit...

CVE-2023-44439

CVE-2023-44439 affects Ashlar-Vellum Xenon. The flaw is in the parsing of various file types, where the process loads a library from an unsecured location, enabling an attacker to execute code in the context of the current process. Remote exploitation requires user interaction (target must visit ...

CVE-2023-44438 Ashlar-Vellum Argon Uncontrolled Search Path Element Remote Code Execution Vulnerability

Ashlar-Vellum Argon Uncontrolled Search Path Element Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Argon. User interaction is required to exploit this vulnerability in that the target must visit...

CVE-2023-44437 Ashlar-Vellum Cobalt Uncontrolled Search Path Element Remote Code Execution Vulnerability

Ashlar-Vellum Cobalt Uncontrolled Search Path Element Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must vis...

CVE-2023-44438

CVE-2023-44438 concerns Ashlar-Vellum Argon, a CAD/3D modeling tool. The vulnerability stems from how Argon parses various file types, loading a library from an unsecured location, which enables remote code execution with the attacker’s code running in the context of the target process. Exploitat...

CVE-2023-44437

CVE-2023-44437 affects Ashlar-Vellum Cobalt. The flaw is in the parsing of file types where the process loads a library from an unsecured location, enabling a threat actor to execute code in the current process. Exploitation requires user interaction (the target must visit a malicious page or ope...

CVE-2023-44438 Ashlar-Vellum Argon Uncontrolled Search Path Element Remote Code Execution Vulnerability

Ashlar-Vellum Argon Uncontrolled Search Path Element Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Argon. User interaction is required to exploit this vulnerability in that the target must visit...

CVE-2023-44436 Kofax Power PDF File Parsing Use-After-Free Remote Code Execution Vulnerability

Kofax Power PDF File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious...

CVE-2023-44436 Kofax Power PDF File Parsing Use-After-Free Remote Code Execution Vulnerability

Kofax Power PDF File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious...

CVE-2023-44436

Kofax Power PDF has a Use-After-Free vulnerability in PDF file parsing (CVE-2023-44436) that allows remote code execution when a user opens a malicious file or visits a malicious page. The flaw stems from not validating object existence before operations, enabling code execution in the process co...

CVE-2023-44435

Kofax Power PDF has a Use-After-Free vulnerability in PDF file parsing that can allow remote code execution. The flaw arises from not validating the existence of a PDF object before performing operations, enabling code execution in the current process. Exploitation requires user interaction (targ...

CVE-2023-44433 Kofax Power PDF AcroForm Annotation Out-Of-Bounds Read Information Disclosure Vulnerability

Kofax Power PDF AcroForm Annotation Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target mus...

CVE-2023-44433

Kofax Power PDF is affected by an AcroForm Annotation out-of-bounds read information disclosure vulnerability (CVE-2023-44433). The flaw stems from insufficient validation of user-supplied data in Annotation objects, allowing a read past the end of an allocated buffer. Impact stated: potential in...

CVE-2023-44434

CVE-2023-44434 (Kofax Power PDF) is a PDF parsing vulnerability where improper validation of user-supplied data allows an out-of-bounds read, potentially disclosing sensitive information. Affected product: Kofax Power PDF. The issue resides in the PDF handling code and can be triggered when a use...

CVE-2023-44432 Kofax Power PDF PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Kofax Power PDF PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a...

CVE-2023-44432

The CVE-2023-44432 issue affects Kofax Power PDF and stems from the PDF parsing code allowing an out-of-bounds write. The vulnerability enables remote code execution and requires user interaction (visiting a malicious page or opening a malicious file). The root cause is inadequate validation of u...

CVE-2023-44431 BlueZ Audio Profile AVRCP Stack-based Buffer Overflow Remote Code Execution Vulnerability

BlueZ Audio Profile AVRCP Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code via Bluetooth on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target...