CVE-2023-42045

PDF-XChange Editor is affected by an Out-Of-Bounds Read in J2K file parsing that enables Remote Code Execution. The issue stems from inadequate validation while parsing J2K data, allowing reads past allocated objects and arbitrary code execution in the process context. Public disclosures (ZDI-23-...

CVE-2023-42041

CVE-2023-42041 is a Use-After-Free vulnerability in PDF-XChange Editor related to annotation handling. The flaw stems from failing to validate the existence of an Annotation object before operating on it, enabling an attacker to execute arbitrary code with the current process once the user visits...

CVE-2023-42040

CVE-2023-42040 affects PDF-XChange Editor. The vulnerability is a Use-After-Free in the mailForm method , caused by not validating the existence of an object before performing operations. This can allow an attacker to execute arbitrary code with the current process context. Exploitation requires ...

CVE-2023-42038

The CVE-2023-42038 issue affects Kofax Power PDF (and Power PDF Advanced) and is a heap-based buffer overflow in PDF file parsing. The root cause is improper validation of the length of user-supplied data before copying it into a fixed-length heap buffer, enabling remote code execution when a use...

CVE-2023-42036

CVE-2023-42036 affects Kofax Power PDF due to a memory corruption in the PDF file parsing path. The flaw arises from insufficient validation of user-supplied data , enabling remote code execution when a user opens a malicious file or visits a malicious page. Impact is described as arbitrary code ...

CVE-2023-42034

Visualware MyConnection Server is affected by CVE-2023-42034 in the doRTAAccessCTConfig path, enabling Cross-Site Scripting that bypasses authentication. The flaw arises from insufficient validation of user-supplied data, permitting injection of arbitrary script and resulting in a remote authenti...

CVE-2023-42033

Visualware MyConnection Server is affected by CVE-2023-42033 via the doPostUploadfiles directory traversal, allowing remote code execution with root context. The flaw is due to insufficient validation of a user-supplied path before file operations. Exploitation requires authentication, but authen...

CVE-2023-41224

The CVE-2023-41224 issue affects D-Link DIR-3040 routers in the prog.cgi SetDeviceSettings path, where a stack-based buffer overflow occurs when handling HNAP requests to the lighttpd webserver on ports 80/443. The root cause is inadequate validation of a user-supplied string copied to a fixed-si...

CVE-2023-41223

D-Link DIR-3040: prog.cgi SetQuickVPNSettings PSK stack-based buffer overflow allows network-adjacent attackers to execute code with root privileges via HNAP requests to lighttpd on ports 80/443. Root cause: improper validation/copy to a fixed-size stack buffer in the PSK handling. Affected versi...

CVE-2023-41219

CVE-2023-41219 affects D-Link DIR-3040, where the prog.cgi SetWanSettings handler on the lighttpd webserver (ports 80/443) contains a stack-based buffer overflow due to improper validation of a user-supplied string. This allows network-adjacent attackers to execute code with root privileges, with...

CVE-2023-41217

CVE-2023-41217 affects D-Link DIR-3040 routers. The vulnerability resides in the prog.cgi handling of HNAP requests to the lighttpd webserver on ports 80/443, where unsafely copied user input into a fixed-length stack buffer leads to a stack-based buffer overflow . This permits remote code execut...

CVE-2023-41205

The CVE-2023-41205 issue affects D-Link DAP-1325 via the SetAPLanSettings SubnetMask handling in the HNAP1 SOAP endpoint. The root cause is a stack-based buffer overflow from insufficient validation of the length of user-supplied XML data, allowing network-adjacent attackers to execute code with ...

CVE-2023-41198

CVE-2023-41198 impacts the D-Link DAP-1325 router. The flaw is in the HNAP1 endpoint under the function SetHostIPv6StaticSettings, specifically the StaticDNS1 parameter. Lack of validation of a user-supplied string leads to command injection and remote code execution with root privileges. Attack ...

CVE-2023-41195

D-Link DAP-1325 is affected by CVE-2023-41195 via the HNAP1 SOAP endpoint, SetHostIPv6Settings IPv6Mode. The flaw allows unauthenticated network-adjacent attackers to trigger a command injection and gain code execution as root by supplying a crafted IPv6Mode value. Affected component: SetHostIPv6...

CVE-2023-41192

CVE-2023-41192 affects D-Link DAP-1325 (HNAP1 SOAP endpoint) with a SetAPLanSettings/PrimaryDNS input handling flaw that allows remote code execution as root. The issue stems from insufficient validation of a user-supplied string used in a system call, enabling network-adjacent attackers to execu...

CVE-2023-41190

CVE-2023-41190 affects D-Link DAP-1325 routers. The flaw resides in the HNAP1 SOAP endpoint handling of the SetAPLanSettings IPAddr parameter, where unsanitized user input is used to invoke a system call, allowing remote code execution with root privileges for network-adjacent attackers and witho...

CVE-2023-41187

CVE-2023-41187 affects D-Link DAP-1325 via HNAP: missing authentication allows network-adjacent attackers to execute arbitrary code with root privileges. The vulnerability stems from unauthenticated access to the HNAP interface. Documented by NVD and ZDI, with no confirmed exploit status or publi...

CVE-2023-41185

The CVE-2023-41185 issue affects Unified Automation UaGateway. The vulnerability is in the processing of client certificates where the certificate length field is not properly validated, allowing an integer overflow that can cause a denial-of-service. Authentication is not required. Exploitation ...

CVE-2023-41186

CVE-2023-41186 concerns the D-Link DAP-1325 router where the CGI interface allows access without authentication. The flaw enables network-adjacent attackers to access functionality that should be restricted, potentially leading to disclosure of stored credentials and further compromise. The vulne...

CVE-2023-41182

The CVE-2023-41182 entry concerns NETGEAR ProSAFE Network Management System with a ZipUtils directory traversal vulnerability leading to remote code execution. The flaw stems from insufficient validation of a user-supplied path before file operations in the ZipUtils class, allowing an attacker to...