CVE-2022-37367

PDF-XChange Editor is affected by CVE-2022-37367 due to an AcroForms handling flaw that can trigger a read past the end of an allocated buffer, enabling remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a malicious file). The vulnerability is desc...

CVE-2022-2825

The CVE-2022-2825 issue affects Kepware KEPServerEX 6.11.718.0, with a stack-based buffer overflow in the handling of text encoding conversions caused by improper validation of the length of user-supplied data. It allows remote attackers to execute arbitrary code with SYSTEM privileges without au...

CVE-2022-27641

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.12010.0.91 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NetUSB module. The issue results from the lack of...

CVE-2022-37350

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

CVE-2022-3210

This vulnerability allows network-adjacent attackers to execute arbitrary commands on affected installations of D-Link DIR-2150 4.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the xupnpd service, which listens on TCP port 4044 by defaul...

CVE-2022-27642

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 1.0.4.12010.0.91 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service. The issue results from incorrect...

CVE-2022-28318

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2022-43647

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-825 1.0.9/EE routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the xupnpd service, which listens on TCP port 4044. The issue...

CVE-2022-36980

This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche 6.3.2.3490. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

CVE-2022-28315

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2022-28300

Bentley MicroStation CONNECT (10.16.02.034) is affected by CVE-2022-28300 due to an out-of-bounds write in the JP2 image parser. Crafted JP2 data can trigger a write past the end of an allocated buffer, enabling code execution in the context of the current process. User interaction is required (v...

CVE-2022-43623

CVE-2022-43623 affects D-Link DIR-1935 1.03. The vulnerability is a command-injection flaw in the web management portal’s handling of the SetWebFilterSetting request, specifically when parsing the WebFilterURLs element. A user-supplied string is not properly validated before being used to execute...

CVE-2022-43616

CVE-2022-43616 affects CorelDRAW Graphics Suite 23.5.0.506, due to an error in EMF image parsing that allows a read past the end of an allocated object. This can enable remote code execution with current process privileges and requires user interaction (visiting a malicious page or opening a mali...

CVE-2022-43614

CorelDRAW Graphics Suite 23.5.0.506 is affected by a GIF file parsing vulnerability that can cause a write past the end of an allocated object, enabling arbitrary code execution in the current process. Exploitation requires user interaction (visiting a malicious page or opening a malicious file)....

CVE-2022-37375

CVE-2022-37375 affects PDF-XChange Editor. The vulnerability lies in the parsing of JPC files where crafted JPC data can trigger a read past the end of an allocated buffer, enabling an information disclosure. Exploitation requires user interaction (visiting a malicious page or opening a malicious...

CVE-2022-28687

The CVE-2022-28687 entry covers AVEVA Edge 2020 SP2 Patch 0 (4201.2111.1802.0000). The described issue is in APP file handling where the process loads a library from an unsecured location, enabling arbitrary code execution in the context of the current process after user interaction (visiting a m...

CVE-2022-37356

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

CVE-2022-28645

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.02.34. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

CVE-2022-28643

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2022-37387

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.2.53575. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...