14322 matches found
Stack overflow
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
Design/Logic Flaw
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
Design/Logic Flaw
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
Design/Logic Flaw
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
UBUNTU-CVE-2022-24050
MariaDB CONNECT Storage Engine Use-After-Free Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL...
CVE-2022-24052
CVE-2022-24052 is a MariaDB CONNECT Storage Engine heap-based buffer overflow privilege-escalation flaw. The issue arises from insufficient validation of user-supplied data length before copying into a fixed-size heap buffer during SQL query processing, allowing an authenticated, local attacker t...
CVE-2022-24051
MariaDB CONNECT Storage Engine Format String Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL...
CVE-2022-24051
Disclaimer: This data contains information about vulnerable...
CVE-2022-24051
CVE-2022-24051 corresponds to a MariaDB CONNECT Storage Engine vulnerability described as a Format String Privilege Escalation. The issue stems from inadequate validation of a user-supplied string when it is used as a format specifier during SQL processing, which can allow a local attacker to esc...
CVE-2022-24050
MariaDB CONNECT Storage Engine Use-After-Free Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL...
CVE-2022-24050
CVE-2022-24050 : MariaDB CONNECT Storage Engine Use-After-Free Privilege Escalation. The issue stems from failing to validate the existence of an object before operating on it, enabling a local attacker (authentication required) to escalate privileges and potentially execute code in the service a...
CVE-2022-24048
CVE-2022-24048 corresponds to a MariaDB CONNECT Storage Engine Stack-based Buffer Overflow Privilege Escalation. The issue arises from insufficient validation of user-supplied data length before copying it into a fixed-length stack buffer, enabling a local attacker with authentication to escalate...
CVE-2021-46649
Bentley MicroStation CONNECT 10.16.0.80 is affected by CVE-2021-46649 due to an out-of-bounds read while parsing DGN files. The flaw stems from insufficient validation of user-supplied data, allowing reading beyond the end of an allocated buffer. This can disclose sensitive information and, in co...
CVE-2021-46647
The CVE-2021-46647 entry concerns Bentley MicroStation CONNECT (10.16.0.80). The vulnerability is a heap-based buffer overflow during BMP image parsing caused by insufficient validation of the length of user-supplied data prior to copying it into a heap buffer. This flaw can allow an attacker to ...
CVE-2021-46646
CVE-2021-46646 affects Bentley MicroStation CONNECT 10.16.0.80. The issue is an out-of-bounds write in the DGN file parser, allowing code execution in the context of the current process. Exploitation requires user interaction (visiting a malicious page or opening a malicious file) and crafted DGN...
CVE-2021-46645
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
CVE-2021-46635
Bentley MicroStation CONNECT 10.16.0.80 is affected by a buffer overrun in the DGN file parser. Crafted DGN data can trigger a write past the end of an allocated buffer, enabling remote code execution in the context of the current process after the user visits a malicious page or opens a maliciou...
CVE-2021-46634
Bentley MicroStation CONNECT 10.16.0.80 is affected by CVE-2021-46634 due to an out-of-bounds write in JT file parsing. The flaw can allow remote code execution in the context of the affected process; exploitation requires user interaction (visiting a malicious page or opening a malicious file). ...
CVE-2021-46633
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
CVE-2021-46622
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...