CVE-2023-34296

CVE-2023-34296 – Sante DICOM Viewer Pro : The vulnerability lies in the parsing of DCM files, where insufficient validation can cause a write past the end of an allocated object, enabling remote code execution in the context of the affected process. Documented impact is high and requires user int...

CVE-2023-34292

Ashlar-Vellum Cobalt is affected by CVE-2023-34292, where an out-of-bounds write in parsing X_B/X_T files can allow remote code execution. The flaw arises from insufficient validation of user-supplied data, causing a write before the start of an allocated buffer. Exploitation requires user intera...

CVE-2023-34290

Ashlar-Vellum Cobalt contains an out-of-bounds write vulnerability in the 3DS file parsing path that can lead to remote code execution. The flaw arises from insufficient validation of user-supplied data, allowing a write past the end of an allocated buffer. Exploitation requires user interaction ...

CVE-2023-34291

Ashlar-Vellum Cobalt is affected by CVE-2023-34291 due to an out-of-bounds write in the parsing of X_B or X_T files caused by insufficient validation of user-supplied data. This can allow remote attackers to execute arbitrary code in the context of the current process when a target visits a malic...

CVE-2023-34291 Ashlar-Vellum Cobalt Out-Of-Bounds Write Remote Code Execution Vulnerability

Ashlar-Vellum Cobalt Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a maliciou...

CVE-2023-34273 Fatek Automation FvDesigner FPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Fatek Automation FvDesigner FPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fatek Automation FvDesigner. User interaction is required to exploit this vulnerability in that t...

CVE-2023-34273

CVE-2023-34273 affects Fatek Automation FvDesigner via FPJ file parsing. The flaw is an out-of-bounds write caused by insufficient validation of FPJ file data, allowing arbitrary code execution in the current process. Exploitation requires user interaction (target visits a malicious page or opens...

CVE-2023-34270

Summary: CVE-2023-34270affects Fatek Automation FvDesigner via FPJ file parsing. The issue arises from lack of input validation in FPJ parsing, causing an out-of-bounds write and enabling remote code execution in the current process. Exploitation requires user interaction (visiting a malicious pa...

CVE-2023-34268

The CVE-2023-34268 issue affects Fatek Automation FvDesigner, specifically FPJ file parsing. The vulnerability arises from inadequate validation of user-supplied data, causing a write past the end of an allocated structure (out-of-bounds write) and enabling remote code execution in the context of...

CVE-2023-34267 Fatek Automation FvDesigner FPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Fatek Automation FvDesigner FPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fatek Automation FvDesigner. User interaction is required to exploit this vulnerability in that t...

CVE-2023-34267

CVE-2023-34267 affects Fatek Automation FvDesigner, specifically FPJ file parsing. The vulnerability arises from insufficient validation that can cause a write past the end of an allocated data structure, enabling arbitrary code execution in the context of the current process. Exploitation requir...

CVE-2023-34266

CVE-2023-34266 affects Fatek Automation FvDesigner; vulnerability lies in FPJ file parsing where lack of input validation enables an out-of-bounds write, allowing remote code execution in the target process. Exploitation requires user interaction (visiting a crafted page or opening a malicious FP...

CVE-2023-34265 Fatek Automation FvDesigner FPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Fatek Automation FvDesigner FPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fatek Automation FvDesigner. User interaction is required to exploit this vulnerability in that t...

CVE-2023-34265

CVE-2023-34265 concerns a flaw in Fatek Automation’s FvDesigner FPJ file parsing. The root cause is a lack of proper validation of user-supplied data, which can cause a write past the end of an allocated data structure (an out-of-bounds write). This vulnerability can enable an attacker to execute...

CVE-2023-34265 Fatek Automation FvDesigner FPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Fatek Automation FvDesigner FPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fatek Automation FvDesigner. User interaction is required to exploit this vulnerability in that t...

CVE-2023-34264 Fatek Automation FvDesigner FPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Fatek Automation FvDesigner FPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fatek Automation FvDesigner. User interaction is required to exploit this vulnerability in that t...

CVE-2023-34264

CVE-2023-34264 affects Fatek Automation FvDesigner FPJ file parsing. The flaw is an out-of-bounds write caused by insufficient validation of FPJ data, enabling code execution in the affected process. Exploitation requires user interaction (target must open a malicious page/file). Public documents...

CVE-2023-34262 Fatek Automation FvDesigner FPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Fatek Automation FvDesigner FPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fatek Automation FvDesigner. User interaction is required to exploit this vulnerability in that t...

CVE-2023-27348

PDF-XChange Editor contains a TIF file parsing use-after-free vulnerability (CVE-2023-27348). The flaw arises when parsing TIF files: the code does not validate the existence of an object before performing operations, enabling an attacker to execute code in the context of the current process. Exp...

FATEK FvDesigner 安全漏洞

FATEK FvDesigner is a hardware device from the Chinese company Yonghong Electric FATEK. It provides a human-machine interface. A security vulnerability exists in FATEK FvDesigner that stems from a lack of proper validation of user-supplied data. An attacker can exploit the vulnerability to execut...