Bentley View BMP File Parsing Heap Buffer Overflow Remote Code Execution Vulnerability (CNVD-2021-102036)

Bentley View is a free viewer from Bentley Systems, Inc. Bentley View BMP file parsing heap buffer overflow remote code execution vulnerability is due to a failure to properly validate the length of user-supplied data before copying it to the heap buffer. An attacker could exploit this...

Bentley View JT File Parsing Out-of-Bounds Write Remote Code Execution Vulnerability (CNVD-2021-102039)

Bentley View is a free viewer from Bentley Systems, Inc. A security vulnerability exists in Bentley View JT file parsing, which can be exploited by attackers to execute code in the context of the current process...

Bentley View JT File Parsing Out-of-Bounds Read Remote Code Execution Vulnerability (CNVD-2021-102019)

Bentley View is a free viewer from Bentley Systems, Inc. A security vulnerability exists in Bentley View JT file parsing, which can be exploited by attackers to execute code in the context of the current process...

Incorrect safeApprove usage

Handle Jujic Vulnerability details Impact safeApprove won't work when current allowance 0, there may be cases when strategies will not use all allowance, so switch to new strategy will be blocked. Proof of Concept Tools Used Recommended Mitigation Steps I recommend approving to zero and then...

Bentley View JT File Parsing Out-of-Bounds Write Remote Code Execution Vulnerability (CNVD-2021-102022)

Bentley View is a free viewer from Bentley Systems, Inc. A security vulnerability exists in Bentley View JT file parsing, which can be exploited by attackers to execute code in the context of the current process...

Bentley View 3DS File Parsing Out-of-Bounds Write Remote Code Execution Vulnerability

Bentley View is a free viewer from Bentley Systems, Inc. A security vulnerability exists in Bentley View 3DS file parsing, which can be exploited by attackers to execute code in the context of the current process...

Bentley View JT File Parsing Out-of-Bounds Write Remote Code Execution Vulnerability (CNVD-2021-102021)

Bentley View is a free viewer from Bentley Systems, Inc. A security vulnerability exists in Bentley View JT file parsing, which can be exploited by attackers to execute code in the context of the current process...

Visual Studio 2022 version 17.0.3 update

Visual Studio 2022 version 17.0.3 security update. This update applies to all affected editions of Visual Studio 2022 version lower than 17.0.3 on the Current channel. The client machines must be enabled to receive this administrator update, and by default Visual Studio must be closed on the clie...

CVE-2021-44450

A vulnerability has been identified in JT Utilities All versions V12.8.1.1, JTTK All versions V10.8.1.1. JTTK library in affected products is vulnerable to an out of bounds read past the end of an allocated buffer when parsing JT files. An attacker could leverage this vulnerability to leak...

CVE-2021-44008

A vulnerability has been identified in JT2Go All versions V13.2.0.5, Teamcenter Visualization All versions V13.2.0.5. The TiffLoader.dll is vulnerable to an out of bounds read past the end of an allocated buffer when parsing TIFF files. An attacker could leverage this vulnerability to leak...

Bentley View JT File Parsing Out-of-Bounds Write Remote Code Execution Vulnerability

Bentley View is a free viewer from Bentley Systems, Inc. A security vulnerability exists in Bentley View JT file parsing, which can be exploited by attackers to execute code in the context of the current process...

Adobe Media Encoder 缓冲区错误漏洞

Adobe Media Encoder, an audio and video encoding application from Adobe, is vulnerable to a memory corruption vulnerability that could be exploited by attackers to execute arbitrary code in the context of the current user...

Adobe Dimension 缓冲区错误漏洞

Adobe Dimension is a set of 2D and 3D composite design tools from Adobe, Inc. An out-of-bounds write vulnerability exists in Adobe Dimension, which can be exploited by attackers to cause arbitrary code to be executed in the context of the current user...

Adobe Dimension 缓冲区错误漏洞

Adobe Dimension is a set of 2D and 3D composite design tools from Adobe, Inc. A memory corruption vulnerability exists in Adobe Dimension, which can be exploited by attackers to cause arbitrary code to be executed in the context of the current user...

Bentley View JT File Parsing Memory Corruption Remote Code Execution Vulnerability

Bentley View is a free viewer from Bentley Systems, Inc. A security vulnerability exists in Bentley View JT file parsing, which is caused by a lack of proper validation of user-supplied data and can be exploited by an attacker to execute code in the context of the current process...

Adobe Dimension 缓冲区错误漏洞

Adobe Dimension is a set of 2D and 3D composite design tools from Adobe, Inc. An out-of-bounds write vulnerability exists in Adobe Dimension, which can be exploited by attackers to cause arbitrary code to be executed in the context of the current user...

CVE-2021-24925

The Modern Events Calendar Lite WordPress plugin before 6.1.5 does not sanitise and escape the currentmonthdivider parameter of its meclistloadmore AJAX call available to both unauthenticated and authenticated users before outputting it back in the response, leading to a Reflected Cross-Site...

CVE-2021-24925

The Modern Events Calendar Lite WordPress plugin before 6.1.5 does not sanitise and escape the currentmonthdivider parameter of its meclistloadmore AJAX call available to both unauthenticated and authenticated users before outputting it back in the response, leading to a Reflected Cross-Site...

PT-2021-16370

Name of the Vulnerable Software and Affected Versions: The Modern Events Calendar Lite WordPress plugin versions prior to 6.1.5 Description: The issue concerns a Reflected Cross-Site Scripting problem. It arises because the current month divider parameter of the "mec list load more" AJAX call is...

Bentley View Buffer Overflow Vulnerability (CNVD-2021-101860)

Bentley View is a free viewer from Bentley Systems, U.S.A. Bentley View is vulnerable to a buffer overflow vulnerability that stems from a boundary error when processing JT files. An attacker could exploit this vulnerability to execute code in the context of the current process...