Lucene search
+L

1250 matches found

Zero Day Initiative
Zero Day Initiative
•added 2023/09/08 12:00 a.m.•29 views

PDF-XChange Editor EMF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS6.8AI score0.00483EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/09/08 12:00 a.m.•28 views

PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS5.9AI score0.00436EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/09/08 12:00 a.m.•29 views

PDF-XChange Editor EMF File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS6.8AI score0.0048EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/09/08 12:00 a.m.•15 views

PT-2023-28261 · Unknown · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations. It requires user interaction, such as visiting a malicious page or opening a...

5.5CVSS7.2AI score0.00436EPSS
SaveExploits0References4
Zero Day Initiative
Zero Day Initiative
•added 2023/09/08 12:00 a.m.•28 views

PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS5.9AI score0.0043EPSS
SaveExploits0References1
Veracode
Veracode
•added 2023/08/31 11:59 p.m.•33 views

Denial Of Service (DoS)

imagemagick is vulnerable to Denial of Service DoS attacks. The vulnerability exists in the ReadEnhMetaFile function in the coders/emf.c file. The function is responsible for decoding Enhanced Metafile EMF images. The vulnerability occurs when the function attempts to divide by zero, which causes...

7.5CVSS6.7AI score0.00953EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2023/08/29 12:00 a.m.•14 views

PT-2023-5391 · Pdf Xchange · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: The issue is related to a heap-based buffer overflow in the PDF-XChange Editor, specifically when parsing EMF files. This occurs due to the lack of proper validation of the lengt...

7.8CVSS7.9AI score0.00489EPSS
SaveExploits0References6
attackerkb
attackerkb
•added 2023/08/22 7:16 p.m.•17 views

CVE-2021-40211

An issue was discovered with ImageMagick 7.1.0-4 via Division by zero in function ReadEnhMetaFile of coders/emf.c...

7.5CVSS5.8AI score0.00953EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2023/08/22 12:00 a.m.•23 views

CVE-2021-40211

An issue was discovered with ImageMagick 7.1.0-4 via Division by zero in function ReadEnhMetaFile of coders/emf.c...

6.7AI score0.00953EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/08/17 12:00 a.m.•36 views

PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS6AI score0.00411EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2023/05/26 12:00 a.m.•17 views

The vulnerability of the Efficient Multicast Forwarding module (EMF) in microprogrammed routing software from TOTOLINK, TP-LINK, ASUS, Arris, Buffalo, D-Link, Linksys, Netgear, TRENDnet, Xiaomi, Linksys, Luxul, Phicomm, Ubee allows a hacker to execute arbitrary code.

The vulnerability of the Efficient Multicast Forwarding EMF module in microprogrammed router software from TOTOLINK, TP-LINK, ASUS, Arris, Buffalo, D-Link, Linksys, Netgear, TRENDnet, Xiaomi, Luxul, Phicomm, and Ubee lies in the execution of operations outside the buffer in memory. Exploiting thi...

7.8CVSS6.3AI score
SaveExploits0References3Affected Software9
Trellix
Trellix
•added 2023/05/03 12:00 a.m.•68 views

The Art of Information Disclosure: A Deep Dive into CVE-2022-37985, a Unique Information Disclosure Vulnerability in Windows Graphics Component

The Art of Information Disclosure: A Deep Dive into CVE-2022-37985, a Unique Information Disclosure Vulnerability in Windows Graphics Component By Bing Sun · May 03, 2023 Overview In October 2022, Microsoft released a security patch to address a unique information disclosure vulnerability in the...

7.5AI score0.38604EPSS
SaveExploits1
Trellix
Trellix
•added 2023/05/03 12:00 a.m.•46 views

The Art of Information Disclosure: A Deep Dive into CVE-2022-37985, a Unique Information Disclosure Vulnerability in Windows Graphics Component

The Art of Information Disclosure: A Deep Dive into CVE-2022-37985, a Unique Information Disclosure Vulnerability in Windows Graphics Component By Bing Sun · May 03, 2023 Overview In October 2022, Microsoft released a security patch to address a unique information disclosure vulnerability in the...

5.5CVSS7.8AI score0.38604EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2023/04/17 12:00 a.m.•11 views

The vulnerability of the PDF-XChange PDF document viewing and editing program, related to the occurrence of operations outside the buffer in memory, allows a hacker to execute arbitrary code.

The vulnerability of the PDF document viewing and editing software PDF-XChange lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created malicious EMF file...

10CVSS8AI score0.00532EPSS
SaveExploits0References4Affected Software1
Zero Day Initiative
Zero Day Initiative
•added 2023/03/31 12:00 a.m.•27 views

PDF-XChange Editor EMF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS6.7AI score0.00532EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/03/31 12:00 a.m.•27 views

PDF-XChange Editor EMF File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS6.6AI score0.00501EPSS
SaveExploits0References1
OSV
OSV
•added 2023/03/29 7:15 p.m.•14 views

CVE-2022-43616

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Corel CorelDRAW Graphics Suite 23.5.0.506. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

7.8CVSS6.1AI score0.00873EPSS
SaveExploits0References1
NVD
NVD
•added 2023/03/29 7:15 p.m.•37 views

CVE-2022-43616

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Corel CorelDRAW Graphics Suite 23.5.0.506. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

7.8CVSS7.8AI score0.00873EPSS
SaveExploits0References1
OSV
OSV
•added 2023/03/29 7:15 p.m.•16 views

CVE-2022-37364

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS6.2AI score0.00777EPSS
SaveExploits0References2
OSV
OSV
•added 2023/03/29 7:15 p.m.•12 views

CVE-2022-37360

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

5.5CVSS4.9AI score0.00736EPSS
SaveExploits0References2
Rows per page
Query Builder