10642 matches found
CVE-2021-34831
CVE-2021-34831 affects Foxit Reader 10.1.4.37651 (and related Foxit PDF tooling) with remote code execution via improper handling of Document objects. The flaw arises from not validating the existence of an object before performing operations, allowing an attacker to execute code in the context o...
CVE-2021-31503
This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop Build 16.6.3.84 package 16.6.3.134. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The...
CVE-2021-31504
This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop Build 16.6.3.84 package 16.6.3.134. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The...
CVE-2021-31504
OpenText Brava! Desktop is affected by CVE-2021-31504 due to an unvalidated pointer dereference in PDF parsing, allowing a user-interaction-initiated remote code execution. Affected: OpenText Brava! Desktop Build 16.6.3.84 (package 16.6.3.134). Exploitation requires the user to visit a malicious ...
CVE-2021-31503
OpenText Brava! Desktop (version 16.6.3.84 / package 16.6.3.134) is affected by CVE-2021-31503 due to a parsing flaw in IGS files caused by an uninitialized pointer. This leads to arbitrary code execution with the current process context when a user visits a malicious page or opens a malicious fi...
CVE-2021-31503
This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop Build 16.6.3.84 package 16.6.3.134. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The...
GHSA-9Q94-V7CH-MXQW Insufficient Session Expiration and TOCTOU Race Condition in OPC FOundation UA .Net Standard
This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of OPC Foundation UA .NET Standard 1.04.358.30. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of sessions. The issue results fr...
Insufficient Session Expiration and TOCTOU Race Condition in OPC FOundation UA .Net Standard
This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of OPC Foundation UA .NET Standard 1.04.358.30. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of sessions. The issue results fr...
CVE-2021-34829
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1330 1.13B01 BETA routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the HNAPAUTH HTTP header. The issue resul...
CVE-2021-34827
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1330 1.13B01 BETA routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the SOAPAction HTTP header. The issue...
Stack overflow
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1330 1.13B01 BETA routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the SOAPAction HTTP header. The issue...
Design/Logic Flaw
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1330 1.13B01 BETA routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the HNAPAUTH HTTP header. The issue resul...
Stack overflow
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1330 1.13B01 BETA routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the Cookie HTTP header. The issue results...
CVE-2021-34830
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1330 1.13B01 BETA routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the Cookie HTTP header. The issue results...
CVE-2021-34830
CVE-2021-34830 affects D-Link DAP-1330 routers. The flaw is a stack-based buffer overflow in the handling of the HTTP Cookie header, caused by inadequate validation of user-supplied data length before copying to a fixed-length buffer. This leads to remote code execution with no authentication req...
CVE-2021-34829
CVE-2021-34829 affects D-Link DAP-1330 routers (1.13B01 BETA). A flaw in handling the HNAP_AUTH header allows a network-adjacent attacker to overflow a fixed-length buffer, enabling remote code execution in the device context. The root cause is insufficient validation of the length of user-suppli...
CVE-2021-34828
CVE-2021-34828 affects D-Link DAP-1330 (firmware 1.13B01 BETA). The flaw is in handling of the SOAPAction HTTP header, caused by insufficient validation of the length of user-supplied data copied into a fixed-length buffer. This enables network-adjacent attackers with no authentication to execute...
CVE-2021-34827
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1330 1.13B01 BETA routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the SOAPAction HTTP header. The issue...
CVE-2021-34827
CVE-2021-34827 affects D-Link DAP-1330 1.13B01 BETA routers. The issue is a stack-based buffer overflow in the handling of the SOAPAction HTTP header caused by improper validation of the length of user-supplied data, enabling network-adjacent attackers to execute arbitrary code in the device cont...
CVE-2021-34324
A vulnerability has been identified in JT2Go All versions V13.2, Teamcenter Visualization All versions V13.2. The Jt981.dll library in affected applications lacks proper validation of user-supplied data prior to performing further free operations on an object when parsing JT files. An attacker...