10666 matches found
CVE-2022-42383
This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
CVE-2022-42423
PDF-XChange Editor is affected by a TIF file parsing issue that can cause a write past the end of an allocated buffer, enabling arbitrary code execution in the current process. Affected component: PDF-XChange Editor (parsing of TIF images). Root cause: out-of-bounds write during TIF data handling...
CVE-2022-42390
PDF-XChange Editor (Tracker Software) is affected by CVE-2022-42390 due to improper parsing of U3D files, causing an out-of-bounds read that can disclose sensitive information. The vulnerability requires user interaction (visiting a malicious page or opening a crafted file) and may enable arbitra...
CVE-2022-41147
This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...
CVE-2022-42397
This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
CVE-2022-42417
This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...
CVE-2022-40718
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected D-Link DIR-2150 4.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the anweb service, which listens on TCP ports 80 and 443 by default. The issue...
CVE-2022-42387
PDF-XChange Editor is affected by CVE-2022-42387 due to a buffer read overflow in the parsing of U3D files. The flaw allows a remote attacker who persuades a user to open a malicious file or visit a crafted page to disclose sensitive information; user interaction is required and the attacker coul...
CVE-2022-42383
The CVE-2022-42383 issue affects PDF-XChange Editor and stems from a flaw in parsing U3D files. The vulnerability allows remote disclosure of sensitive information by triggering a read past the end of an allocated buffer when processing crafted U3D data, with user interaction required (visiting a...
CVE-2022-42400
This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...
CVE-2022-42373
This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...
CVE-2022-42418
This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...
CVE-2022-42409
This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
CVE-2022-42411
This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
CVE-2022-40717
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected D-Link DIR-2150 4.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the anweb service, which listens on TCP ports 80 and 443 by default. The issue...
CVE-2022-42391
CVE-2022-42391 affects Tracker Software PDF-XChange Editor. The vulnerability is in the parsing of U3D files where crafted data triggers a read past the end of an allocated buffer, allowing an attacker to disclose sensitive information and potentially execute arbitrary code in the context of the ...
CVE-2022-42399
CVE-2022-42399 affects PDF-XChange Editor. Root cause: buffer over-read during PDF parsing that can trigger code execution when a user opens a malicious PDF or visits a crafted page. Affected software is PDF-XChange Editor (Tracker Software). Impact described as arbitrary code execution in the co...
CVE-2022-42394
CVE-2022-42394 affects PDF-XChange Editor. The vulnerability stems from the parsing of U3D files, where crafted data can trigger a write past the end of an allocated buffer, allowing an attacker to execute code in the context of the current process. Exploitation requires user interaction (visitin...
CVE-2022-42373
CVE-2022-42373 affects PDF-XChange Editor. The root cause is an out-of-bounds write during parsing of U3D files, allowing remote attackers to execute arbitrary code after the user opens a crafted U3D file or visits a malicious page. Exploitation requires user interaction and runs with the current...
CVE-2022-42375
CVE-2022-42375 affects PDF-XChange Editor. The issue stems from parsing of U3D files, where crafted data can trigger a read past the end of an allocated buffer, potentially allowing an attacker to disclose sensitive information and, with other vulnerabilities, execute arbitrary code in the curren...