CVE-2023-44431 BlueZ Audio Profile AVRCP Stack-based Buffer Overflow Remote Code Execution Vulnerability

BlueZ Audio Profile AVRCP Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code via Bluetooth on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target...

CVE-2023-44428

CVE-2023-44428 affects MuseScore’s CAP file parser. The issue is a heap-based buffer overflow caused by insufficient validation of the length of user-supplied CAP data before copying it into a heap buffer. This leads to remote code execution in the context of the current process. Exploitation req...

CVE-2023-42104 Ashlar-Vellum Cobalt AR File Parsing Use-After-Free Remote Code Execution Vulnerability

Ashlar-Vellum Cobalt AR File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit...

CVE-2023-40472

CVE-2023-40472 affects PDF-XChange Editor. The vulnerability is an untrusted pointer dereference caused by improper validation of a user-supplied string before it is dereferenced, enabling Remote Code Execution in the context of the current process. Exploitation requires user interaction (target ...

CVE-2023-38114

CVE-2023-38114 is a Foxit PDF Reader/Editor vulnerability described as an AcroForm Doc Object Use-After-Free leading to remote code execution. The flaw stems from not validating the existence of a Doc object before performing operations, allowing an attacker to run code in the user’s context afte...

CVE-2023-38087 Kofax Power PDF clearTimeOut Out-Of-Bounds Write Remote Code Execution Vulnerability

Kofax Power PDF clearTimeOut Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a...

CVE-2023-37347 Kofax Power PDF U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

Kofax Power PDF U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a...

CVE-2023-37342

CVE-2023-37342 affects Kofax Power PDF. The flaw is a heap-based buffer overflow in PNG file parsing due to insufficient validation of user-supplied data length, enabling remote code execution when a user opens a malicious PNG or visits a crafted page. The issue impacts parsing logic in Power PDF...

CVE-2023-37338

Kofax Power PDF GIF file parsing vulnerability (CVE-2023-37338) allows local or remote code execution via an out-of-bounds write during GIF parsing. The flaw stems from insufficient validation of GIF data, enabling a write past the end of an allocated object and arbitrary code execution in the pr...

CVE-2023-37332 Kofax Power PDF PNG File Parsing Memory Corruption Remote Code Execution Vulnerability

Kofax Power PDF PNG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a...

CVE-2023-34309 Ashlar-Vellum Cobalt Untrusted Pointer Dereference Remote Code Execution Vulnerability

Ashlar-Vellum Cobalt Untrusted Pointer Dereference Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit ...

CVE-2023-34305

CVE-2023-34305 affects Ashlar-Vellum Cobalt. The vulnerability is an out-of-bounds write in the parsing of X_B/X_T files caused by insufficient validation of user-supplied data, allowing a remote attacker to execute code in the context of the current process. Exploitation requires user interactio...

CVE-2023-34299

CVE-2023-34299 affects Ashlar-Vellum Cobalt CO file parsing. The flaw is a heap-based buffer overflow caused by insufficient validation of the length of user-supplied data before copying to a heap buffer, enabling remote code execution. Exploitation requires user interaction (visiting a malicious...

CVE-2023-34297

CVE-2023-34297 affects Sante DICOM Viewer Pro. The vulnerability lies in the JP2 file parsing code, where insufficient validation can cause an out-of-bounds write. This can allow an attacker to execute arbitrary code with the privileges of the current process after the target visits a malicious p...

CVE-2023-35711: Untrusted Pointer Dereference

Ashlar-Vellum Cobalt XE File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the...

CVE-2024-30306

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context ...

PT-2024-9031 · Trimble · Trimble Sketchup Viewer

Name of the Vulnerable Software and Affected Versions: Trimble SketchUp Viewer affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this issue, where...

PT-2024-6645 · Adobe · Illustrator

Name of the Vulnerable Software and Affected Versions: Adobe Illustrator versions 28.5, 27.9.4 and earlier Description: The issue is related to an improper input validation that could lead to an application denial-of-service condition. An attacker could exploit this to render the application...

CVE-2024-29003

The SolarWinds Platform was susceptible to a XSS vulnerability that affects the maps section of the user interface. This vulnerability requires authentication and requires user interaction...

PT-2024-16907

Name of the Vulnerable Software and Affected Versions Keycloak affected versions not specified Description A flaw was found in Keycloak, where it does not properly validate URLs included in a redirect. This issue could allow an attacker to construct a malicious request to bypass validation and...