10642 matches found
CVE-2022-42402
PDF-XChange Editor is affected by CVE-2022-42402 due to a parsing flaw in PDF handling, where crafted data in an embedded U3D object can cause a read past the end of an allocated buffer. This can allow remote code execution with the attacker needing user interaction (visiting a malicious page or ...
CVE-2022-42394
CVE-2022-42394 affects PDF-XChange Editor. The vulnerability stems from the parsing of U3D files, where crafted data can trigger a write past the end of an allocated buffer, allowing an attacker to execute code in the context of the current process. Exploitation requires user interaction (visitin...
Foxit PDF Reader < 12.1 Vulnerability
According to its version, the Foxit PDF Reader application previously named Foxit Reader installed on the remote Windows host is prior to 12.1. It is, therefore affected by vulnerability: - This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF...
CVE-2022-47935
A vulnerability has been identified in JT Open All versions V11.1.1.0, JT Utilities All versions V13.1.1.0, Solid Edge All versions V2023. The Jt1001.dll contains a memory corruption vulnerability while parsing specially crafted JT files. An attacker could leverage this vulnerability to execute...
Memory corruption
A vulnerability has been identified in JT Open All versions V11.1.1.0, JT Utilities All versions V13.1.1.0, Solid Edge All versions V2023. The Jt1001.dll contains a memory corruption vulnerability while parsing specially crafted JT files. An attacker could leverage this vulnerability to execute...
Out-of-bounds
A vulnerability has been identified in JT2Go All versions V14.1.0.6, Teamcenter Visualization V13.2 All versions V13.2.0.12, Teamcenter Visualization V13.3 All versions V13.3.0.9, Teamcenter Visualization V13.3 All versions V13.3.0.8, Teamcenter Visualization V14.0 All versions V14.0.0.5,...
CVE-2022-46349
A vulnerability has been identified in Parasolid V33.1 All versions V33.1.264, Parasolid V34.0 All versions V34.0.252, Parasolid V34.1 All versions V34.1.242, Parasolid V35.0 All versions V35.0.170, Solid Edge SE2022 All versions V222.0MP12, Solid Edge SE2022 All versions, Solid Edge SE2023 All...
CVE-2022-45484
Siemens VT/JT2Go vulnerability CVE-2022-45484 involves an out-of-bounds read in CCITT_G4Decode.dll when parsing RAS files. Affects JT2Go (all versions before 14.1.0.6) and Teamcenter Visualization: V13.2 before 13.2.0.12, V13.3 before 13.3.0.8/note updates exist for 13.3.0.8+), V14.0 before 14.0....
xorg-x11-server security and bug fix update
1.20.11-11 - CVE fix for: CVE-2022-2319/ZDI-CAN-16062, CVE-2022-2320/ZDI-CAN-16070 Resolves: rhbz2108157, rhbz2108162...
Design/Logic Flaw
A vulnerability has been identified in Parasolid V34.0 All versions = V34.0.252 = V34.1.242 = V35.0.170 V35.0.184, Simcenter Femap All versions V2023.1. The affected application contains an out of bounds read past the end of an allocated structure while parsing specially crafted XT files. This...
SolarWinds Information Service (SWIS) .NET Deserialization From AMQP RCE
The SolarWinds Information Service SWIS is vulnerable to RCE by way of a crafted message received through the AMQP message queue. A malicious user that can authenticate to the AMQP service can publish such a crafted message whose body is a serialized .NET object which can lead to OS command...
CVE-2022-2602
iouring UAF, Unix SCM garbage collection...
CVE-2022-41851
A vulnerability has been identified in JTTK All versions V11.1.1.0, Simcenter Femap V2022.1 All versions V2022.1.3, Simcenter Femap V2022.2 All versions V2022.2.2. The JTTK library is vulnerable to an uninitialized pointer reference vulnerability while parsing specially crafted JT files. An...
Null pointer dereference
A vulnerability has been identified in JTTK All versions V11.1.1.0, Simcenter Femap V2022.1 All versions V2022.1.3, Simcenter Femap V2022.2 All versions V2022.2.2. The JTTK library is vulnerable to an uninitialized pointer reference vulnerability while parsing specially crafted JT files. An...
CVE-2022-37864
Siemens Solid Edge prior to SE2022MP9 is affected by CVE-2022-37864, a heap-based buffer overflow when parsing DWG files. It allows code execution in the current process with local attack vector and user interaction required. Mitigation: update to SE2022MP9 or later or avoid untrusted DWG files; ...
CVE-2022-41851
Siemens JT Open Toolkit (JTTK) and Simcenter Femap are affected by CVE-2022-41851 due to an uninitialized pointer reference when parsing specially crafted JT files. Affected versions: JTTK < 11.1.1.0; Simcenter Femap < 2022.1.3 (V2022.1) and
GSD-2022-1006324 unknown in Exchange Server version Exchange Server 2019
In Microsoft Exchange Server version Exchange Server 2019 and possibly earlier an undisclosed vulnerability exists in an undisclosed component that can be attacked via the network, reportedly resulting in remote code execution. This is also known as ZDI-CAN-18333, and public reports of exploitati...
CVE-2022-40655
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Viewer 1.2100.1483.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
CVE-2022-40653
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...
CVE-2022-40654
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...