Design/Logic Flaw

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

CVE-2022-24048

MariaDB CONNECT Storage Engine Stack-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the...

Design/Logic Flaw

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2022-24051

MariaDB CONNECT Storage Engine Format String Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL...

CVE-2022-24971

Foxit PDF Reader 11.1.0.52543 is affected by a JPEG2000 image parsing flaw that allows remote code execution via crafted data. The issue arises from not validating user-supplied data, causing a read past the end of an allocated structure. Exploitation requires user interaction (visiting a malicio...

CVE-2022-24971

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-24369

CVE-2022-24369 affects Foxit PDF Reader 11.1.0.52543. The flaw occurs in JP2 image parsing, where crafted data can trigger a write past the end of an allocated buffer, enabling arbitrary code execution in the context of the current process. User interaction is required (target must visit a malici...

CVE-2022-24368

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.1.0.52543. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2022-24367

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-24366

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-24366

CVE-2022-24366 affects Foxit PDF Reader 11.1.0.52543. The issue is a failure to validate the existence of an object before performing operations on it within AcroForms, allowing remote code execution in the current process. Exploitation requires user interaction (visiting a malicious page or open...

CVE-2022-24365

Foxit PDF Reader 11.1.0.52543 is affected by CVE-2022-24365 due to improper handling of AcroForms. The vulnerability arises from not validating the existence of an object before performing operations on it, enabling remote code execution in the context of the current process. Exploitation require...

CVE-2022-24364

This CVE affects Foxit PDF Reader 11.1.0.52543. The flaw is in how Doc objects are handled: the code fails to validate object existence before operations, enabling remote code execution when a user opens a malicious file/page or visits a crafted site. Exploitation requires user interaction. Likel...

CVE-2022-24363

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-24363

Foxit PDF Reader 11.1.0.52543 is affected by CVE-2022-24363 due to improper handling of Annotation objects. The flaw stems from not validating the existence of an object before performing operations, enabling remote code execution in the current process when a user visits a malicious page or open...

CVE-2022-24362

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-24361

Foxit PDF Reader 11.1.0.52543 is vulnerable to remote code execution due to improper validation during JPEG2000 image parsing, causing a write past the end of an allocated structure. The flaw allows an attacker to execute code in the current process context after the user visits a malicious page ...

CVE-2022-24360

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-24360

CVE-2022-24360 (Foxit PDF Reader 11.1.0.52543) is triggered by a flaw in handling Doc objects where the program does not verify object existence before operating on it. This allows remote code execution in the context of the current process when a user visits a malicious page or opens a malicious...