CVE-2022-42399

CVE-2022-42399 affects PDF-XChange Editor. Root cause: buffer over-read during PDF parsing that can trigger code execution when a user opens a malicious PDF or visits a crafted page. Affected software is PDF-XChange Editor (Tracker Software). Impact described as arbitrary code execution in the co...

CVE-2022-42375

CVE-2022-42375 affects PDF-XChange Editor. The issue stems from parsing of U3D files, where crafted data can trigger a read past the end of an allocated buffer, potentially allowing an attacker to disclose sensitive information and, with other vulnerabilities, execute arbitrary code in the curren...

Foxit PDF Reader < 12.1 Vulnerability

According to its version, the Foxit PDF Reader application previously named Foxit Reader installed on the remote Windows host is prior to 12.1. It is, therefore affected by vulnerability: - This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF...

PT-2023-33295 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 5.10.28 through 5.10.158 Description: The issue concerns a NULL pointer dereference in the can rcv filter function. This problem was introduced in version v5.10.28 and is fixed in version v5.10.159. The actual impact and...

PT-2023-33215 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.83 Description: The issue concerns a NULL pointer dereference in can rcv filter. This problem was introduced in version v5.12 and is fixed in Linux Kernel version v5.15.83. The actual impact and attack...

CVE-2022-47935

A vulnerability has been identified in JT Open All versions V11.1.1.0, JT Utilities All versions V13.1.1.0, Solid Edge All versions V2023. The Jt1001.dll contains a memory corruption vulnerability while parsing specially crafted JT files. An attacker could leverage this vulnerability to execute...

Memory corruption

A vulnerability has been identified in JT Open All versions V11.1.1.0, JT Utilities All versions V13.1.1.0, Solid Edge All versions V2023. The Jt1001.dll contains a memory corruption vulnerability while parsing specially crafted JT files. An attacker could leverage this vulnerability to execute...

Out-of-bounds

A vulnerability has been identified in JT2Go All versions V14.1.0.6, Teamcenter Visualization V13.2 All versions V13.2.0.12, Teamcenter Visualization V13.3 All versions V13.3.0.9, Teamcenter Visualization V13.3 All versions V13.3.0.8, Teamcenter Visualization V14.0 All versions V14.0.0.5,...

CVE-2022-45484

Siemens VT/JT2Go vulnerability CVE-2022-45484 involves an out-of-bounds read in CCITT_G4Decode.dll when parsing RAS files. Affects JT2Go (all versions before 14.1.0.6) and Teamcenter Visualization: V13.2 before 13.2.0.12, V13.3 before 13.3.0.8/note updates exist for 13.3.0.8+), V14.0 before 14.0....

CVE-2022-46349

A vulnerability has been identified in Parasolid V33.1 All versions V33.1.264, Parasolid V34.0 All versions V34.0.252, Parasolid V34.1 All versions V34.1.242, Parasolid V35.0 All versions V35.0.170, Solid Edge SE2022 All versions V222.0MP12, Solid Edge SE2022 All versions, Solid Edge SE2023 All...

GSD-2022-1008160 can: j1939: j1939_send_one(): fix missing CAN header initialization

can: j1939: j1939sendone: fix missing CAN header initialization This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.225 by commit...

GSD-2022-1008066 can: j1939: j1939_send_one(): fix missing CAN header initialization

can: j1939: j1939sendone: fix missing CAN header initialization This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.155 by commit...

GSD-2022-1007933 can: j1939: j1939_send_one(): fix missing CAN header initialization

can: j1939: j1939sendone: fix missing CAN header initialization This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.79 by commit...

GSD-2022-1007771 can: j1939: j1939_send_one(): fix missing CAN header initialization

can: j1939: j1939sendone: fix missing CAN header initialization This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.9 by commit...

PT-2022-36332 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.155 Description: The issue concerns a NULL pointer dereference in the can rx register function. This problem was introduced in version v5.10.28 and is fixed in Linux Kernel version v5.10.155. The actual...

Aruba Networks AirWave Management Platform 安全漏洞

Aruba Networks AirWave Management Platform, from Aruba Networks, provides granular visibility into wired and wireless networks and is the leading multi-vendor management platform designed for local campus environments. A security vulnerability exists in the Aruba Networks AirWave Management...

xorg-x11-server security and bug fix update

1.20.11-11 - CVE fix for: CVE-2022-2319/ZDI-CAN-16062, CVE-2022-2320/ZDI-CAN-16070 Resolves: rhbz2108157, rhbz2108162...

CVE-2020-12508

In s::can moni::tools in versions below 4.2 an unauthenticated attacker could get any file from the device by path traversal in the image-relocator module...

CVE-2020-12507

In s::can moni::tools before version 4.2 an authenticated attacker could get full access to the database through SQL injection. This may result in loss of confidentiality, loss of integrity and DoS...

Sql injection

In s::can moni::tools before version 4.2 an authenticated attacker could get full access to the database through SQL injection. This may result in loss of confidentiality, loss of integrity and DoS...