Записи Corel
54 опубликованных записей вендора corel.
Профиль для исследователя
- Попали в KEV
- 0 · 0 %
- С эксплойтом
- 1 · 1,9 %
- Pre-auth RCE
- 8
- С записью об исправлении
- 0 %
- Медиана: публикация → KEV
- Ни одна запись не попала в KEV
Повторяющиеся классы
- CWE-787 Out-of-bounds Write16
- CWE-125 Out-of-bounds Read12
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer4
- CWE-190 Integer Overflow or Wraparound1
- CWE-264 Permissions, Privileges, and Access Controls1
- CWE-427 Uncontrolled Search Path Element1
Классы уязвимостей, которые чаще всего встречаются у этого вендора: куда смотреть.
CWEВсе записи
54 записей| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
43В плане | CVE-2013-3248Готовый эксплойт | Untrusted search path vulnerability in Corel PDF Fusion 1.11 allows local users to gain privileges via a Trojan horse wintab32.dll file in tcorel · pdf fusion | Критическая9,3 | — | 18,5 % | 3 окт. 2013 г. |
40В плане | CVE-2013-0742Proof of concept | Stack-based buffer overflow in Corel PDF Fusion 1.11 allows remote attackers to execute arbitrary code or cause a denial of service (applicacorel · pdf fusion · CWE-119 | Критическая9,3 | — | 9,0 % | 3 окт. 2013 г. |
40В плане | CVE-2007-1735Proof of concept | Stack-based buffer overflow in Corel WordPerfect Office X3 (13.0.0.565) allows user-assisted remote attackers to execute arbitrary code via corel · wordperfect · CWE-119 | Критическая9,3 | — | 8,7 % | 28 мар. 2007 г. |
39Наблюдать | CVE-2007-2366Proof of concept | Buffer overflow in Corel Paint Shop Pro 11.20 allows user-assisted remote attackers to execute arbitrary code via a crafted .PNG file.corel · paint shop pro | Высокая7,4 | — | 33,9 % | 30 апр. 2007 г. |
39Наблюдать | CVE-2009-4251Proof of concept | Stack-based buffer overflow in Jasc Paint Shop Pro 8.10 (aka Corel Paint Shop Pro) allows user-assisted remote attackers to execute arbitrarcorel · paint shop pro · CWE-119 | Критическая9,3 | — | 8,2 % | 9 дек. 2009 г. |
39Наблюдать | CVE-2007-2921Эксплойта нет | Multiple buffer overflows in acgm.dll in the Corel / Micrografx ActiveCGM Browser ActiveX control before 7.1.4.19 allow remote attackers to corel · activecgm browser | Критическая9,3 | — | 7,8 % | 14 июн. 2007 г. |
39Наблюдать | CVE-2013-0733Эксплойта нет | Untrusted search path vulnerability in Corel PaintShop Pro X5 and X6 16.0.0.113, 15.2.0.2, and earlier allows local users to execute arbitracorel · paintshop pro x5 | Критическая9,3 | — | 5,1 % | 5 июн. 2014 г. |
36Наблюдать | CVE-2019-6114Эксплойта нет | An issue was discovered in Corel PaintShop Pro 2019 21.0.0.119.corel · paintshop pro 2019 · CWE-190 | Высокая8,8 | — | 2,6 % | 19 июн. 2019 г. |
34Наблюдать | CVE-2014-8393Proof of concept | DLL Hijacking vulnerability in CorelDRAW X7, Corel Photo-Paint X7, Corel PaintShop Pro X7, Corel Painter 2015, and Corel PDF Fusion.corel · coreldraw · CWE-427 | Высокая7,8 | — | 8,3 % | 28 авг. 2017 г. |
32Наблюдать | CVE-2021-38096Эксплойта нет | Coreip.dll in Corel PDF Fusion 2.6.2.0 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file.corel · pdf fusion · CWE-787 | Высокая7,8 | — | 3,2 % | 1 окт. 2021 г. |
32Наблюдать | CVE-2021-38097Эксплойта нет | Corel PDF Fusion 2.6.2.0 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file.corel · pdf fusion · CWE-787 | Высокая7,8 | — | 2,9 % | 1 окт. 2021 г. |
32Наблюдать | CVE-2016-9043Эксплойта нет | An out of bound write vulnerability exists in the EMF parsing functionality of CorelDRAW X8 (CdrGfx - Corel Graphics Engine (64-Bit) - 18.1.corel · coreldraw · CWE-787 | Высокая7,8 | — | 2,6 % | 24 апр. 2018 г. |
32Наблюдать | CVE-2021-38098Эксплойта нет | Corel PDF Fusion 2.6.2.0 is affected by a Heap Corruption vulnerability when parsing a crafted file.corel · pdf fusion · CWE-787 | Высокая7,8 | — | 2,3 % | 1 окт. 2021 г. |
32Наблюдать | CVE-2021-38103Эксплойта нет | IBJPG2.FLT in Corel Presentations 2020 20.0.0.200 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file.corel · presentations 2020 · CWE-787 | Высокая7,8 | — | 2,2 % | 1 окт. 2021 г. |
32Наблюдать | CVE-2021-38099Эксплойта нет | CDRRip.dll in Corel PhotoPaint Standard 2020 22.0.0.474 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file.corel · photopaint 2020 · CWE-787 | Высокая7,8 | — | 2,2 % | 1 окт. 2021 г. |
32Наблюдать | CVE-2016-8730Эксплойта нет | An of bound write / memory corruption vulnerability exists in the GIF parsing functionality of Core PHOTO-PAINT X8 18.1.0.661.corel · coreldraw photo paint x8 · CWE-787 | Высокая7,8 | — | 2,2 % | 24 апр. 2018 г. |
32Наблюдать | CVE-2021-38110Эксплойта нет | Word97Import200.dll in Corel WordPerfect 2020 20.0.0.200 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file.corel · wordperfect 2020 · CWE-787 | Высокая7,8 | — | 2,0 % | 1 окт. 2021 г. |
32Наблюдать | CVE-2021-38100Эксплойта нет | Corel PhotoPaint Standard 2020 22.0.0.474 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file.corel · photopaint 2020 · CWE-787 | Высокая7,8 | — | 2,0 % | 1 окт. 2021 г. |
32Наблюдать | CVE-2021-38101Эксплойта нет | CDRRip.dll in Corel PhotoPaint Standard 2020 22.0.0.474 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file.corel · photopaint 2020 · CWE-787 | Высокая7,8 | — | 2,0 % | 1 окт. 2021 г. |
31Наблюдать | CVE-2017-2804Эксплойта нет | A remote out of bound write vulnerability exists in the TIFF parsing functionality of Core PHOTO-PAINT X8 18.1.0.661.corel · coreldraw photo paint x8 · CWE-787 | Высокая7,8 | — | 1,2 % | 24 апр. 2018 г. |
31Наблюдать | CVE-2017-2803Эксплойта нет | A remote out of bound write vulnerability exists in the TIFF parsing functionality of Core PHOTO-PAINT X8 version 18.1.0.661.corel · coreldraw photo paint x8 · CWE-787 | Высокая7,8 | — | 1,1 % | 24 апр. 2018 г. |
31Наблюдать | CVE-2022-43613Эксплойта нет | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Corel CorelDRAW Graphics Suite 23.5.0.506.corel · coreldraw · CWE-121 | Высокая7,8 | — | 0,9 % | 29 мар. 2023 г. |
31Наблюдать | CVE-2022-43616Эксплойта нет | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Corel CorelDRAW Graphics Suite 23.5.0.506.corel · coreldraw · CWE-125 | Высокая7,8 | — | 0,9 % | 29 мар. 2023 г. |
31Наблюдать | CVE-2022-43614Эксплойта нет | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Corel CorelDRAW Graphics Suite 23.5.0.506.corel · coreldraw · CWE-787 | Высокая7,8 | — | 0,9 % | 29 мар. 2023 г. |
31Наблюдать | CVE-2022-43617Эксплойта нет | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Corel CorelDRAW Graphics Suite 23.5.0.506.corel · coreldraw · CWE-787 | Высокая7,8 | — | 0,9 % | 29 мар. 2023 г. |
- CVE-2013-324843В плане
Untrusted search path vulnerability in Corel PDF Fusion 1.11 allows local users to gain privileges via a Trojan horse wintab32.dll file in t
КритическаяCVSS 9,3Готовый эксплойтEPSS 18 %corel · pdf fusion3 окт. 2013 г.
- CVE-2013-074240В плане
Stack-based buffer overflow in Corel PDF Fusion 1.11 allows remote attackers to execute arbitrary code or cause a denial of service (applica
КритическаяCVSS 9,3Proof of conceptEPSS 9 %corel · pdf fusion3 окт. 2013 г.
- CVE-2007-173540В плане
Stack-based buffer overflow in Corel WordPerfect Office X3 (13.0.0.565) allows user-assisted remote attackers to execute arbitrary code via
КритическаяCVSS 9,3Proof of conceptEPSS 9 %corel · wordperfect28 мар. 2007 г.
- CVE-2007-236639Наблюдать
Buffer overflow in Corel Paint Shop Pro 11.20 allows user-assisted remote attackers to execute arbitrary code via a crafted .PNG file.
ВысокаяCVSS 7,4Proof of conceptEPSS 34 %corel · paint shop pro30 апр. 2007 г.
- CVE-2009-425139Наблюдать
Stack-based buffer overflow in Jasc Paint Shop Pro 8.10 (aka Corel Paint Shop Pro) allows user-assisted remote attackers to execute arbitrar
КритическаяCVSS 9,3Proof of conceptEPSS 8 %corel · paint shop pro9 дек. 2009 г.
- CVE-2007-292139Наблюдать
Multiple buffer overflows in acgm.dll in the Corel / Micrografx ActiveCGM Browser ActiveX control before 7.1.4.19 allow remote attackers to
КритическаяCVSS 9,3Эксплойта нетEPSS 8 %corel · activecgm browser14 июн. 2007 г.
- CVE-2013-073339Наблюдать
Untrusted search path vulnerability in Corel PaintShop Pro X5 and X6 16.0.0.113, 15.2.0.2, and earlier allows local users to execute arbitra
КритическаяCVSS 9,3Эксплойта нетEPSS 5 %corel · paintshop pro x55 июн. 2014 г.
- CVE-2019-611436Наблюдать
An issue was discovered in Corel PaintShop Pro 2019 21.0.0.119.
ВысокаяCVSS 8,8Эксплойта нетEPSS 3 %corel · paintshop pro 201919 июн. 2019 г.
- CVE-2014-839334Наблюдать
DLL Hijacking vulnerability in CorelDRAW X7, Corel Photo-Paint X7, Corel PaintShop Pro X7, Corel Painter 2015, and Corel PDF Fusion.
ВысокаяCVSS 7,8Proof of conceptEPSS 8 %corel · coreldraw28 авг. 2017 г.
- CVE-2021-3809632Наблюдать
Coreip.dll in Corel PDF Fusion 2.6.2.0 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file.
ВысокаяCVSS 7,8Эксплойта нетEPSS 3 %corel · pdf fusion1 окт. 2021 г.
- CVE-2021-3809732Наблюдать
Corel PDF Fusion 2.6.2.0 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file.
ВысокаяCVSS 7,8Эксплойта нетEPSS 3 %corel · pdf fusion1 окт. 2021 г.
- CVE-2016-904332Наблюдать
An out of bound write vulnerability exists in the EMF parsing functionality of CorelDRAW X8 (CdrGfx - Corel Graphics Engine (64-Bit) - 18.1.
ВысокаяCVSS 7,8Эксплойта нетEPSS 3 %corel · coreldraw24 апр. 2018 г.
- CVE-2021-3809832Наблюдать
Corel PDF Fusion 2.6.2.0 is affected by a Heap Corruption vulnerability when parsing a crafted file.
ВысокаяCVSS 7,8Эксплойта нетEPSS 2 %corel · pdf fusion1 окт. 2021 г.
- CVE-2021-3810332Наблюдать
IBJPG2.FLT in Corel Presentations 2020 20.0.0.200 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file.
ВысокаяCVSS 7,8Эксплойта нетEPSS 2 %corel · presentations 20201 окт. 2021 г.
- CVE-2021-3809932Наблюдать
CDRRip.dll in Corel PhotoPaint Standard 2020 22.0.0.474 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file.
ВысокаяCVSS 7,8Эксплойта нетEPSS 2 %corel · photopaint 20201 окт. 2021 г.
- CVE-2016-873032Наблюдать
An of bound write / memory corruption vulnerability exists in the GIF parsing functionality of Core PHOTO-PAINT X8 18.1.0.661.
ВысокаяCVSS 7,8Эксплойта нетEPSS 2 %corel · coreldraw photo paint x824 апр. 2018 г.
- CVE-2021-3811032Наблюдать
Word97Import200.dll in Corel WordPerfect 2020 20.0.0.200 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file.
ВысокаяCVSS 7,8Эксплойта нетEPSS 2 %corel · wordperfect 20201 окт. 2021 г.
- CVE-2021-3810032Наблюдать
Corel PhotoPaint Standard 2020 22.0.0.474 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file.
ВысокаяCVSS 7,8Эксплойта нетEPSS 2 %corel · photopaint 20201 окт. 2021 г.
- CVE-2021-3810132Наблюдать
CDRRip.dll in Corel PhotoPaint Standard 2020 22.0.0.474 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file.
ВысокаяCVSS 7,8Эксплойта нетEPSS 2 %corel · photopaint 20201 окт. 2021 г.
- CVE-2017-280431Наблюдать
A remote out of bound write vulnerability exists in the TIFF parsing functionality of Core PHOTO-PAINT X8 18.1.0.661.
ВысокаяCVSS 7,8Эксплойта нетEPSS 1 %corel · coreldraw photo paint x824 апр. 2018 г.
- CVE-2017-280331Наблюдать
A remote out of bound write vulnerability exists in the TIFF parsing functionality of Core PHOTO-PAINT X8 version 18.1.0.661.
ВысокаяCVSS 7,8Эксплойта нетEPSS 1 %corel · coreldraw photo paint x824 апр. 2018 г.
- CVE-2022-4361331Наблюдать
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Corel CorelDRAW Graphics Suite 23.5.0.506.
ВысокаяCVSS 7,8Эксплойта нетEPSS 1 %corel · coreldraw29 мар. 2023 г.
- CVE-2022-4361631Наблюдать
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Corel CorelDRAW Graphics Suite 23.5.0.506.
ВысокаяCVSS 7,8Эксплойта нетEPSS 1 %corel · coreldraw29 мар. 2023 г.
- CVE-2022-4361431Наблюдать
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Corel CorelDRAW Graphics Suite 23.5.0.506.
ВысокаяCVSS 7,8Эксплойта нетEPSS 1 %corel · coreldraw29 мар. 2023 г.
- CVE-2022-4361731Наблюдать
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Corel CorelDRAW Graphics Suite 23.5.0.506.
ВысокаяCVSS 7,8Эксплойта нетEPSS 1 %corel · coreldraw29 мар. 2023 г.