CVE-2022-42393

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-42376

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-42384

CVE-2022-42384 affects PDF-XChange Editor. The root cause is in the parsing of U3D files, where crafted data can trigger a read past the end of an allocated buffer, potentially enabling arbitrary code execution in the context of the current process after user interaction (visiting a malicious pag...

CVE-2022-41142

This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of requests to configure poller resources. The issue results from the lack of proper...

CVE-2022-42388

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-41145

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-42418

CVE-2022-42418 affects PDF-XChange Editor. The vulnerability lies in the parsing of TIF files, due to inadequate validation of a user-supplied value before dereferencing it as a pointer, enabling remote code execution with user interaction required. Exploitation details are documented in ZDI-22-1...

CVE-2022-42423

PDF-XChange Editor is affected by a TIF file parsing issue that can cause a write past the end of an allocated buffer, enabling arbitrary code execution in the current process. Affected component: PDF-XChange Editor (parsing of TIF images). Root cause: out-of-bounds write during TIF data handling...

CVE-2022-42401

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-40717

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected D-Link DIR-2150 4.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the anweb service, which listens on TCP ports 80 and 443 by default. The issue...

CVE-2022-42421

PDF-XChange Editor is affected by a TIF-file parsing out-of-bounds write that enables remote code execution when a user opens a malicious file or visits a malicious page. Exploitation requires user interaction; the attacker can execute code in the context of the current process. The root cause is...

CVE-2022-42412

CVE-2022-42412 affects PDF-XChange Editor. The issue is a parsing flaw in PDF handling where crafted data can trigger a read past the end of an allocated buffer, enabling information disclosure and, in conjunction with other vulnerabilities, potentially arbitrary code execution in the process con...

CVE-2022-42380

CVE-2022-42380 affects PDF-XChange Editor. The root cause is an out-of-bounds write when parsing U3D files, allowing remote code execution after a user opens a malicious file or visits a malicious page. The vulnerability can be triggered with crafted U3D data and results in code execution in the ...

CVE-2022-42408

CVE-2022-42408 affects PDF-XChange Editor via EMF file parsing, caused by not validating object existence before operations, enabling information disclosure and potential code execution when combined with other vulnerabilities. Exploitation requires user interaction (user opens a malicious file/p...

CVE-2022-42420

PDF-XChange Editor is affected by CVE-2022-42420 due to a TIF file parsing issue that can trigger a write past the end of an allocated buffer, enabling remote code execution with user interaction (visiting a malicious page or opening a malicious file). The vulnerability context is the PDF-XChange...

CVE-2022-40719

CVE-2022-40719 affects D-Link DIR-2150 firmware 4.0.1. The vulnerability lies in the xupnpd_generic.lua plugin of the xupnpd service, which listens on TCP port 4044 by default. When parsing the feed parameter, the input is not properly validated before being used in a system call, enabling networ...

CVE-2022-42376

CVE-2022-42376 affects Tracker Software’s PDF-XChange Editor . The flaw resides in the parsing of U3D files , where crafted data can trigger a read past the end of an allocated buffer, enabling information disclosure. User interaction is required (open a malicious file/page). Exploitation could l...

CVE-2022-41148

The CVE-2022-41148 issue affects PDF-XChange Editor and stems from a parsing flaw in U3D files that can trigger a write past the end of an allocated buffer, enabling remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a malicious file). Affected sof...

CVE-2022-42401

Affected software: PDF-XChange Editor (Tracker Software). Vulnerability: PDF parsing reads past end of allocated buffer, enabling information disclosure; may be combined with other flaws to execute code in the current process. Remote attackers exploit via malicious PDF sent on a page/file; user i...

CVE-2022-42419

CVE-2022-42419 affects PDF-XChange Editor. The vulnerability stems from TIF file parsing, where crafted data can trigger a write past the end of an allocated buffer, enabling remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a malicious file). Sev...