CVE-2024-8807

CVE-2024-8807 : Cohesive Networks VNS3 has a command injection vulnerability in its web service (listening on port 8000 by default). The flaw stems from insufficient validation of a user-supplied string before it is used to execute a system call, allowing an attacker to run code with root privile...

CVE-2024-9755

Tungsten Automation Power PDF JP2 file parsing flaw leads to an out-of-bounds read that can enable arbitrary code execution. Triggered when a user visits a malicious page or opens a crafted JP2-containing file; the attacker would run code in the target process. Connected sources (e.g., ZDI adviso...

CVE-2024-9735 Tungsten Automation Power PDF JPF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Tungsten Automation Power PDF JPF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tungsten Automation Power PDF. User interaction is required to exploit this vulnerability in th...

CVE-2024-9751 Tungsten Automation Power PDF JP2 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

Tungsten Automation Power PDF JP2 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tungsten Automation Power PDF. User interaction is required to exploit this vulnerability in tha...

CVE-2024-9760

CVE-2024-9760 affects Tungsten Automation Power PDF. The vulnerability stems from parsing PNG files where improper validation allows a read past the end of an allocated object, causing an information disclosure. Exploitation requires user interaction (the target must open a malicious file or visi...

CVE-2024-9754 Tungsten Automation Power PDF PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Tungsten Automation Power PDF PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Tungsten Automation Power PDF. User interaction is required to exploit this vulnerabili...

CVE-2024-9752

CVE-2024-9752 affects Tungsten Automation Power PDF. The issue is in the JPG file parsing path, caused by insufficient validation that can lead to an out-of-bounds read and information disclosure. Exploitation requires user interaction (target user must visit a malicious page or open a malicious ...

CVE-2024-9733 Tungsten Automation Power PDF PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Tungsten Automation Power PDF PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tungsten Automation Power PDF. User interaction is required to exploit this vulnerability in th...

CVE-2024-9750

CVE-2024-9750 concerns Tungsten Automation Power PDF. The collected documents confirm a vulnerability in PNG file parsing that causes an out-of-bounds read, allowing remote code execution. The root cause is the lack of proper validation of user-supplied data within the PNG parsing logic. Exploita...

CVE-2024-9740 Tungsten Automation Power PDF BMP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Tungsten Automation Power PDF BMP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tungsten Automation Power PDF. User interaction is required to exploit this vulnerability in th...

CVE-2024-9740 Tungsten Automation Power PDF BMP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Tungsten Automation Power PDF BMP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tungsten Automation Power PDF. User interaction is required to exploit this vulnerability in th...

CVE-2024-11507

CVE-2024-11507 affects IrfanView and involves a DXF file parsing bug that causes a type confusion due to insufficient input validation. This enables remote code execution when a user opens a malicious DXF or visits a page/file, with exploitation requiring user interaction. The underlying issue is...

CVE-2024-11507 IrfanView DXF File Parsing Type Confusion Remote Code Execution Vulnerability

IrfanView DXF File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or...

CVE-2024-11523

Affected software: IrfanView. Vulnerability: DXF file parsing memory corruption that can lead to remote code execution. Root cause: lack of proper validation of user-supplied data during DXF parsing, enabling memory corruption. Impact: arbitrary code execution in the context of the current proces...

CVE-2024-11534 IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page...

CVE-2024-11535 IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page...

CVE-2024-11560

CVE-2024-11560 concerns IrfanView’s DXF file parsing, where improper validation of DXF data can trigger memory corruption and remote code execution. The vulnerability is described as exploitable when a target opens a malicious DXF file or visits a malicious page, with user interaction required. T...

CVE-2024-11568

CVE-2024-11568 affects IrfanView, where the DXF file parser is vulnerable to an out-of-bounds read. The fault stems from insufficient validation of user-supplied data during DXF parsing, which can cause a read past the end of an allocated buffer and enable remote code execution in the context of ...

CVE-2024-11556 IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability

IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page ...

CVE-2024-11542 IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability

IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page ...