CVE-2023-27357

NETGEAR RAX30 exposes a Missing Authentication Information Disclosure vulnerability in the SOAP handling path (GetInfo). The flaw allows network-adjacent attackers to access functionality without authentication and disclose sensitive information, with pre-authentication access implied. The primar...

CVE-2023-27356

The CVE-2023-27356 issue affects NETGEAR RAX30 routers, specifically in the logCtrl action. The root cause is the lack of proper validation of a user-supplied string before it is used to perform a system call, allowing an attacker with network-adjacent access to execute arbitrary code with root p...

CVE-2023-27349

CVE-2023-27349 affects the BlueZ Bluetooth stack (Audio Profile AVRCP) and is due to improper validation of array indexes in the AVRCP handling path, causing a write past the end of an allocated buffer. The issue enables network-adjacent attackers to execute code with root privileges on vulnerabl...

CVE-2023-27348

PDF-XChange Editor contains a TIF file parsing use-after-free vulnerability (CVE-2023-27348). The flaw arises when parsing TIF files: the code does not validate the existence of an object before performing operations, enabling an attacker to execute code in the context of the current process. Exp...

CVE-2023-27345

CVE-2023-27345 corresponds to a vulnerability in PDF-XChange Editor where crafted PDF data can trigger a write past the end of an allocated buffer during PDF file parsing, enabling arbitrary code execution. The flaw requires user interaction (visiting a malicious page or opening a malicious file)...

CVE-2023-27346

CVE-2023-27346 affects TP-Link AX1800 (Archer AX1800) routers. Root cause: a stack-based buffer overflow in the firmware image parsing due to insufficient validation of the length of user-supplied data before copying into a fixed-length stack buffer. Impact: network-adjacent attackers can run arb...

CVE-2023-27340

PDF-XChange Editor is affected by a PNG file parsing out-of-bounds write vulnerability (CVE-2023-27340). The flaw occurs during PNG data parsing, where crafted PNG content can write past the end of an allocated buffer, enabling arbitrary code execution in the context of the attacker’s process. Ex...

CVE-2023-27337

Summary: CVE-2023-27337 affects PDF-XChange Editor. The vulnerability stems from PDF file parsing where crafted data can cause a read past the end of an allocated buffer, enabling remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a crafted file). ...

CVE-2023-27336

CVE-2023-27336 affects Softing edgeConnector Siemens OPC UA Server via a NULL pointer dereference in the handling of OPC client certificates. This unauthenticated, network-exploitable vulnerability can cause a denial-of-service condition on affected installations. The documented impact is limited...

CVE-2023-27335

Softing edgeAggregator Client is affected by a Cross-Site Scripting/Remote Code Execution vulnerability (CVE-2023-27335). The flaw lies in how the edgeAggregator client handles input parameters, with insufficient validation allowing injection of arbitrary scripts. This can enable remote code exec...

CVE-2023-27333

CVE-2023-27333 concerns TP-Link Archer AX21 routers. The vulnerability is a stack-based buffer overflow in the tmpServer service when handling command 0x422, caused by improper validation of user-supplied data length copying into a fixed-length stack buffer. Exploitation could allow remote code e...

CVE-2023-27334

CVE-2023-27334 concerns the Softing edgeConnector Siemens product. The flaw exists in the handling of OPC UA ConditionRefresh requests, allowing remote attackers to exhaust server resources by sending a large number of requests, resulting in a denial-of-service condition. Authentication is not re...

CVE-2023-27332

CVE-2023-27332 relates to TP-Link Archer AX21, where the tdpServer logging component, listening on UDP port 20002, has a stack-based buffer overflow due to improper validation of user-supplied data length. This allows network-adjacent attackers to achieve remote code execution with root privilege...

CVE-2023-27331

CVE-2023-27331 affects Foxit PDF Reader (annotation handling). The vulnerability is a Use-After-Free in the processing of Annotation objects that can allow remote code execution in the context of the current process. Exploitation requires user interaction (visiting a malicious page or opening a m...

CVE-2023-27329

CVE-2023-27329 affects Foxit PDF Reader. The vulnerability is a Use-After-Free in Annotation handling caused by not validating object existence before operations, enabling arbitrary code execution in the process context. Exploitation requires user interaction (target visits a malicious page or op...

CVE-2023-27330

CVE-2023-27330 describes a remote code execution flaw in Foxit PDF Reader tied to the handling of XFA annotations. The root cause is the lack of validating the existence of an Annotation object before performing operations, enabling an attacker to run code in the process context after a user open...

CVE-2023-27325

The CVE-2023-27325 issue affects Parallels Desktop and specifically the Updater service. The root cause is improper initialization of environment variables, which allows a local attacker with low-privilege code execution to escalate to root privileges and run arbitrary code. Public documentation ...

CVE-2024-33787

CVE-2024-33787 affects Hengan Weighing Management Information Query Platform (versions 2019–2021 53.25). A SQL injection vulnerability exists in the tuser_Number parameter of search_user.aspx, causing potentially high impact (CVE CVSS 3.1 base score 8.2, Confidentiality High, Integrity Low). No e...

CVE-2024-34403

CVE-2024-34403 affects uriparser (through 0.9.7). The vulnerability is an integer overflow in ComposeQueryMallocExMm in UriQuery.c triggered by a long string, potentially causing memory corruption or denial of service as described in multiple advisories. Affected packages include uriparser versio...

CVE-2024-28519

CVE-2024-28519 affects MicroWorld Technologies Inc eScan Antivirus v4.0.0.49. The issue is a kernel handle leak in ProcObsrvesx.sys that could allow privilege escalation for low-privileged users. CVSSv3.1 base score is 7.8 ( HIGH; LOCAL exploit, low complexity, no user interaction; confidentialit...