CVE-2022-37374

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

CVE-2022-42430

This vulnerability allows local attackers to escalate privileges on affected Tesla vehicles. An attacker must first obtain the ability to execute privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of the wowlanconfig data...

CVE-2022-28312

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.02.034. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific fla...

CVE-2022-36975

This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche 6.3.2.3490. The specific flaw exists within the ProfileDaoImpl class. A crafted request can trigger execution of SQL queries composed from a user-supplied string. An attacker can...

CVE-2022-43626

CVE-2022-43626 affects the D-Link DIR-1935 (version 1.03). The flaw is in the web management SetIPv4FirewallSettings handling of IPv4FirewallRule elements, where a user-supplied string isn’t properly validated before it’s used in a system call, enabling arbitrary code execution in the root contex...

CVE-2022-43622

CVE-2022-43622 affects D-Link DIR-1935 devices (version 1.03). The flaw is in handling of the Login requests to the web management portal: during parsing of the HNAP_AUTH header, the length of user-supplied data is not properly validated before copying into a fixed-size stack buffer, enabling a s...

CVE-2022-28316

Bentley MicroStation CONNECT 10.16.02.34 is affected by an out-of-bounds write in the IFC file parsing logic. Crafted data in an IFC file can trigger a write past the end of an allocated buffer, enabling remote code execution in the context of the current process. User interaction is required (ta...

CVE-2022-37361

The CVE-2022-37361 issue affects PDF-XChange Editor and stems from JP2 file parsing. A crafted JP2 payload can trigger a read past the end of an allocated buffer, enabling information disclosure. Exploitation requires user interaction (visiting a malicious page or opening a malicious file), and, ...

CVE-2022-43615

CorelDRAW Graphics Suite 23.5.0.506 is affected by a PDF file parsing vulnerability that can disclose sensitive information via a read past the end of an allocated object. The flaw arises from insufficient validation of user-supplied data during PDF parsing, and exploitation requires user interac...

CVE-2022-43648

CVE-2022-43648 affects D-Link DIR-3040 routers (version 1.20B03). The flaw is in the MiniDLNA service, where the length of user-supplied data is not properly validated before copying to a heap-based buffer, enabling a heap-based buffer overflow. This allows network-adjacent attackers to execute a...

CVE-2022-43629

CVE-2022-43629 affects D-Link DIR-1935 v1.03. The vulnerability is a command-injection in the web management portal’s SetSysEmailSettings handling: a user-supplied string parsed inside a system call is not properly validated, enabling an attacker to execute code with root privileges. Exploitation...

CVE-2022-27643

CVE-2022-27643 affects NETGEAR R6700v3 routers; a pre-auth buffer overflow in upnpd when parsing the SOAPAction header allows network-adjacent attackers to execute code with root privileges. Investigations reference ZDI-CAN-15692 and multiple security trackers noting a SOAP handling flaw. The con...

CVE-2022-27645

CVE-2022-27645 affects NETGEAR R6700v3 routers. The flaw in readycloud_control.cgi allows network-adjacent attackers to bypass authentication, gaining code execution in the root context. Impact is high (C/H/I/A). Sources note this is tied to ZDI-15762; no explicit fix/version is provided in the c...

CVE-2022-36970

CVE-2022-36970 affects AVEVA Edge 20.0 Build 4201.2111.1802.0000 Service Pack 2. The flaw lies in the processing of APP files, where crafted APP data can cause the application to execute arbitrary Visual Basic scripts. User interaction is required (visiting a malicious page or opening a malicious...

CVE-2022-28309

Bentley View 10.16.02.022 is affected by a parsing flaw in 3DS files that can trigger an out-of-bounds read in the allocated buffer. The vulnerability, associated with ZDI-CAN-16308, requires user interaction (victim opens a malicious file/page). Exploitation could lead to arbitrary code executio...

CVE-2022-36980

CVE-2022-36980 affects Ivanti Avalanche 6.3.2.3490. The vulnerability is an authentication bypass in the EnterpriseServer service caused by lack of proper locking during authentication, enabling remote attackers to bypass authentication. Connected sources identify ZDI-22-785 and related advisorie...

CVE-2022-37358

CVE-2022-37358 affects PDF-XChange Editor. The flaw is in JPG file parsing, where crafted data can trigger a write past the end of an allocated buffer, leading to remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a malicious file). The issue is do...

CVE-2022-43635

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR940N 6211111 3.20.1US routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP por...

CVE-2022-28686

This vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge 2020 SP2 Patch 04201.2111.1802.0000. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

CVE-2022-28305

Bentley MicroStation CONNECT 10.16.02.034 is affected by CVE-2022-28305 due to a stack-based buffer overflow in OBJ file parsing. The flaw arises from insufficient validation of user-supplied data length before copying to a fixed-length buffer, enabling arbitrary code execution when a user opens ...