CVE-2022-43609

CVE-2022-43609 affects IronCAD. The vulnerability stems from parsing STP files where, when handling the VECTOR element, a pointer is not properly initialized before access, enabling remote code execution with user interaction (visiting a malicious page or opening a malicious file). Descriptions f...

CVE-2022-36972

CVE-2022-36972 concerns Ivanti Avalanche 6.3.2.3490. The vulnerability is a SQL injection in the ProfileDaoImpl class that allows a crafted request to assemble and execute SQL from user-supplied input, enabling an authentication bypass over the network. Related disclosures (ZDI-22-777) and vendor...

CVE-2022-43636

TP-Link TL-WR940N (version 3.20.1(US)) is affected by CVE-2022-43636. The httpd service on port 80 uses insufficiently random session identifiers, enabling network-adjacent attackers to bypass authentication. Impact is authenticated bypass with high severity; no exploit details provided in the so...

CVE-2022-36982

CVE-2022-36982 affects Ivanti Avalanche 6.3.3.101. The flaw is in the AgentTaskHandler and stems from inadequate validation of a user-supplied path before file operations, enabling a path-traversal-like disclosure of arbitrary files and stored session cookies. Authentication is required to exploi...

CVE-2022-43643

CVE-2022-43643 concerns a remote command injection in the D-Link DIR-825 1.0.9/EE router. The flaw is in the xupnpd Generic plugin listening on TCP port 4044, arising from inadequate validation of user-supplied input used in a system call. This allows network-adjacent attackers to execute code wi...

CVE-2022-27642

Summary (CVE-2022-27642) : Affects NETGEAR R6700v3 router with firmware 1.0.4.120_10.0.91. The vulnerability is in the httpd service and stems from incorrect string matching logic when accessing protected pages, allowing network-adjacent attackers to bypass authentication. In combination with oth...

CVE-2022-37012

The CVE-2022-37012 entry affects Unified Automation OPC UA C++ Demo Server 1.7.6-537. The underlying flaw is in OpcUa_SecureListener_ProcessSessionCallRequest, where a crafted OPC UA message can cause an incorrect reference-count update, enabling a network-based denial-of-service without authenti...

CVE-2022-37371

PDF-XChange Editor is affected by CVE-2022-37371 due to a parsing flaw that allows a crafted PDF to trigger a write past the end of an allocated buffer, enabling remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a malicious file). Root cause: buff...

CVE-2022-36977

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche 6.3.2.3490. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the Certificate...

CVE-2022-43618

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Corel CorelDRAW Graphics Suite 23.5.0.506. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2022-37366

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

CVE-2022-43608

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Canon imageCLASS MF644Cdw 10.03 printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the BJNP service. The issue results from the lack of...

CVE-2022-43640

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 12.0.1.12430. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2022-2561

Summary: CVE-2022-2561 affects OPC Labs QuickOPC 2022.1. The issue stems from improper validation during XML processing in Connectivity Explorer, leading to deserialization of untrusted data and remote code execution in the current process. Exploitation requires user interaction (visiting a malic...

CVE-2022-42429

This CVE concerns Centreon. The vulnerability is a SQL injection in the poller broker configuration handling, caused by insufficient validation of a user-supplied string used to build SQL queries. It allows remote attackers to escalate privileges to administrator on affected Centreon installation...

CVE-2022-43630

CVE-2022-43630 affects D-Link DIR-1935 (firmware ~1.03). The vulnerability is a stack-based buffer overflow in the handling of SOAPAction header in the web management portal, exploitable by network-adjacent attackers without authentication to execute code as root. The issue is documented as a rem...

CVE-2022-37390

CVE-2022-37390 affects Foxit PDF Reader 11.2.2.53575; the flaw lies in AcroForms handling where the code does not validate the existence of an object before performing operations. This can allow code execution in the context of the current process after the target visits a malicious page or opens...

CVE-2022-37355

PDF-XChange Editor is affected by a vulnerability in the parsing of JPG files that can trigger a write-past-end of an allocated buffer, enabling remote code execution with the current process’s privileges after user interaction (visiting a malformed page or opening a malicious file). Evidence tie...

CVE-2022-43621

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-1935 1.03 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of HNAP login requests. The issue results from an...

CVE-2022-37354

PDF-XChange Editor is affected by a J2K file parsing vulnerability that can cause an out-of-bounds write, enabling remote code execution with user interaction. The flaw is triggered by crafted J2K data leading to write past the end of an allocated buffer in the parsing path. The available connect...