CVE-2022-24048

MariaDB CONNECT Storage Engine Stack-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the...

CVE-2022-24048

MariaDB CONNECT Storage Engine Stack-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the...

CVE-2022-24048

MariaDB CONNECT Storage Engine Stack-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the...

CVE-2022-24048

CVE-2022-24048 corresponds to a MariaDB CONNECT Storage Engine Stack-based Buffer Overflow Privilege Escalation. The issue arises from insufficient validation of user-supplied data length before copying it into a fixed-length stack buffer, enabling a local attacker with authentication to escalate...

CVE-2022-24047

This vulnerability allows remote attackers to bypass authentication on affected installations of BMC Track-It! 20.21.01.102. Authentication is not required to exploit this vulnerability. The specific flaw exists within the authorization of HTTP requests. The issue results from the lack of...

CVE-2022-24046

Summary: CVE-2022-24046 affects Sonos One Speaker (S2 apps before 3.4.1; S1 apps before 11.2.13 build 57923290). The flaw is in the anacapd daemon and stems from improper validation of user-supplied data, causing an integer underflow and allowing code execution with root privileges. The vulnerabi...

CVE-2021-46656

CVE-2021-46656 affects Bentley View 10.15.0.75. The flaw is a JT file parsing buffer overflow that can lead to remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a malicious file). The issue is documented across multiple sources (e.g., ZDI-22-243, ...

CVE-2021-46655

Bentley View 10.15.0.75 is affected by CVE-2021-46655. The flaw occurs in JT file parsing due to not validating the existence of an object before operations, enabling remote code execution in the context of the current process. Exploitation requires user interaction (visiting a malicious page or ...

CVE-2021-46655

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2021-46654

Bentley View 10.15.0.75 is affected by a DGN file parsing flaw that can read past the end of an allocated buffer, enabling information disclosure. The issue requires user interaction (visiting a malicious page or opening a malicious file) and can be leveraged with other vulnerabilities to execute...

CVE-2021-46653

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2021-46653

Bentley View 10.15.0.75 is affected by a heap-based buffer overflow in BMP image parsing due to insufficient validation of the length of user-supplied data. This allows remote attackers to execute arbitrary code in the context of the current process, with user interaction required (target must vi...

CVE-2021-46652

The CVE-2021-46652 entry concerns Bentley View 10.15.0.75 with a vulnerability in DGN file parsing. The underlying flaw is an out-of-bounds write (-write past the end of an allocated buffer-) triggered by crafted DGN data, enabling arbitrary code execution in the context of the current process. E...

CVE-2021-46650

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

CVE-2021-46648

Bentley MicroStation CONNECT 10.16.0.80 is affected by a heap-based buffer overflow in DGN file parsing due to improper validation of the length of user-supplied data. This allows remote code execution in the context of the current process, with exploitation requiring user interaction (target mus...

CVE-2021-46647

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2021-46646

CVE-2021-46646 affects Bentley MicroStation CONNECT 10.16.0.80. The issue is an out-of-bounds write in the DGN file parser, allowing code execution in the context of the current process. Exploitation requires user interaction (visiting a malicious page or opening a malicious file) and crafted DGN...

CVE-2021-46645

CVE-2021-46645 affects Bentley MicroStation CONNECT 10.16.0.80. The vulnerability resides in BMP image parsing, where crafted BMP data can trigger a write past the end of an allocated buffer, allowing remote code execution in the context of the current process. User interaction is required (targe...

CVE-2021-46644

Bentley MicroStation CONNECT 10.16.0.80 is affected by an out-of-bounds write vulnerability in DGN file parsing. The flaw allows remote code execution via crafted DGN data that triggers a write past the end of an allocated buffer; user interaction is required (visit a malicious page or open a mal...

CVE-2021-46643

CVE-2021-46643 affects Bentley View 10.15.0.75. The vulnerability arises in the DGN file parsing code due to lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer, enabling remote code execution. Exploitation requires user interaction (visiting ...