CVE-2023-51583

CVE-2023-51583 affects Voltronic Power ViewPower; the flaw is in the UpsScheduler class due to an exposed dangerous method, enabling remote code execution with SYSTEM context. It requires no authentication and is exploitable over the network (per ZDI advisory). The available documents confirm the...

CVE-2023-51581

CVE-2023-51581 affects Voltronic Power ViewPower, specifically the MacMonitorConsole class, where an exposed dangerous method enables remote code execution with no authentication. The ZDI advisory and NVD/NVD-derived metrics indicate a high-severity, remote code execution vulnerability (CVSSv3.0:...

CVE-2023-51579

CVE-2023-51579 affects Voltronic Power ViewPower. Root cause: incorrect permissions on folders in the product installer, enabling local privilege escalation to SYSTEM when an attacker can execute low-privileged code. Exploitation is local with low complexity and no user interaction; no patch/vers...

CVE-2023-51578

CVE-2023-51578 affects Voltronic Power ViewPower MonitorConsole. The flaw is an exposed dangerous method in the MonitorConsole class enabling remote DoS without authentication. Public sources (ZDI-23-1884) confirm the issue, but no concrete remediation/version fix is provided in the connected doc...

CVE-2023-51576

Summary: CVE-2023-51576 affects Voltronic Power ViewPower. The vulnerability exists in the RMI interface listening by default on TCP port 51099 and stems from improper validation of user-supplied data, allowing deserialization of untrusted data and resulting in remote code execution in the contex...

CVE-2023-51567

Kofax Power PDF contains an OXPS file parsing out-of-bounds read information-disclosure vulnerability. The flaw arises from insufficient validation during OXPS parsing, enabling read past the end of an allocated object. Exploitation requires user interaction (target must open a malicious file or ...

CVE-2023-51563

CVE-2023-51563 : Kofax Power PDF XPS File Parsing Use-After-Free Remote Code Execution vulnerability in the XPS parsing path. The flaw arises from not validating the existence of an object before operating on it, causing a use-after-free that enables code execution in the current process. Exploit...

CVE-2023-51560

CVE-2023-51560 is a Foxit PDF Reader/Editor vulnerability where the handling of Annotation objects allows a type confusion that can lead to arbitrary code execution. The flaw stems from insufficient validation of user-supplied data within Annotations, enabling an attacker to execute code in the c...

CVE-2023-51557

CVE-2023-51557 affects Foxit PDF Reader/Editor (AcroForm Doc handling). The flaw is a Use-After-Free in Doc objects due to not validating the existence of an object before operations, allowing code execution in the current process. Exploitation requires user interaction (visiting a malicious page...

CVE-2023-51555

CVE-2023-51555 is a Foxit PDF Reader/Editor vulnerability described as a Doc object handling out-of-bounds read that can disclose sensitive information. The NVD entry notes that user interaction is required (target must visit a malicious page or open a malicious file) and that the flaw can be lev...

CVE-2023-51554

CVE-2023-51554 affects Foxit PDF Reader (signature handling). The vulnerability is a use-after-free in Signature objects caused by not validating an object’s existence before operations, enabling information disclosure. Exploitation requires user interaction (target must open a malicious file or ...

CVE-2023-51552

CVE-2023-51552 affects Foxit PDF Reader/Editor (AcroForm Signature) and is a Use-After-Free in how Signature objects are handled. The flaw stems from not validating object existence before operations, enabling code execution in the process context when a user opens a malicious file or visits a ma...

CVE-2023-51551

CVE-2023-51551 concerns Foxit PDF Reader/Editor components handling AcroForm signatures. The vulnerability is a use-after-free in Signature object processing, arising from not validating the existence of an object before use, which can lead to remote code execution in the process context. Exploit...

CVE-2023-51550

CVE-2023-51550 affects Foxit PDF Reader/Editor. The issue lies in how combobox fields are handled, due to insufficient validation of user data, which can cause an out-of-bounds read and information disclosure. The description notes that this could be leveraged (in conjunction with other vulnerabi...

CVE-2023-50234

Summary of CVE-2023-50234 : Hancom Office Cell is affected by a stack-based buffer overflow in the XLS file parsing functionality, leading to remote code execution. The issue stems from insufficient validation of the length of user-supplied data before it is copied into a stack-based buffer. Expl...

CVE-2023-50233

CVE-2023-50233 concerns Inductive Automation Ignition, specifically the getJavaExecutable directory traversal vulnerability. The flaw stems from inadequate validation of a user-supplied path before performing file operations, enabling an attacker to execute arbitrary code in the context of the cu...

CVE-2023-50232

CVE-2023-50232 exposes a remote code execution in Inductive Automation Ignition via a getParams argument injection. The flaw stems from insufficient validation of a user-supplied string used to form a system-call argument, allowing code execution in the context of the current user. Exploitation r...

CVE-2023-50227

CVE-2023-50227 describes a vulnerability in Parallels Desktop affecting the virtio-gpu virtual device. The issue is an out-of-bounds write caused by improper validation of user-supplied data, enabling a remote attacker to execute code in the hypervisor. Exploitation requires user interaction (the...

CVE-2023-50223

Inductive Automation Ignition is affected. The ExtendedDocumentCodec deserialization flaw stems from inadequate validation of untrusted input, enabling remote code execution with SYSTEM privileges. Authentication is required to exploit. No explicit patch/version details are provided here; refer t...

CVE-2023-50222

CVE-2023-50222 concerns Inductive Automation Ignition’s ResponseParser Notification: deserialization of untrusted data enables remote code execution. The flaw stems from insufficient validation of user-supplied data in the ResponseParser method, allowing an attacker to execute code in the context...