Lucene search
+L

14322 matches found

Prion
Prion
added 2022/02/18 8:15 p.m.25 views

Stack overflow

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

6.8CVSS7.8AI score0.02041EPSS
SaveExploits0References2Affected Software3
Prion
Prion
added 2022/02/18 8:15 p.m.24 views

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

6.8CVSS7.8AI score0.01981EPSS
SaveExploits0References2Affected Software3
Prion
Prion
added 2022/02/18 8:15 p.m.24 views

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

6.8CVSS7.8AI score0.02093EPSS
SaveExploits0References2Affected Software3
Prion
Prion
added 2022/02/18 8:15 p.m.25 views

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

6.8CVSS7.8AI score0.02041EPSS
SaveExploits0References2Affected Software3
OSV
OSV
added 2022/02/18 8:15 p.m.9 views

UBUNTU-CVE-2022-24050

MariaDB CONNECT Storage Engine Use-After-Free Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL...

7.8CVSS7.5AI score0.00644EPSS
SaveExploits0References3
CVE
CVE
added 2022/02/18 7:51 p.m.478 views

CVE-2022-24052

CVE-2022-24052 is a MariaDB CONNECT Storage Engine heap-based buffer overflow privilege-escalation flaw. The issue arises from insufficient validation of user-supplied data length before copying into a fixed-size heap buffer during SQL query processing, allowing an authenticated, local attacker t...

7.8CVSS7.7AI score0.00689EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2022/02/18 7:51 p.m.39 views

CVE-2022-24051

MariaDB CONNECT Storage Engine Format String Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL...

7CVSS7.8AI score
SaveExploits0References8
MariaDBUnix
MariaDBUnix
added 2022/02/18 7:51 p.m.68 views

CVE-2022-24051

Disclaimer: This data contains information about vulnerable...

7.8CVSS7.4AI score0.00657EPSS
SaveExploits0
CVE
CVE
added 2022/02/18 7:51 p.m.420 views

CVE-2022-24051

CVE-2022-24051 corresponds to a MariaDB CONNECT Storage Engine vulnerability described as a Format String Privilege Escalation. The issue stems from inadequate validation of a user-supplied string when it is used as a format specifier during SQL processing, which can allow a local attacker to esc...

7.8CVSS7.7AI score0.00657EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2022/02/18 7:51 p.m.34 views

CVE-2022-24050

MariaDB CONNECT Storage Engine Use-After-Free Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL...

7CVSS7.8AI score
SaveExploits0References8
CVE
CVE
added 2022/02/18 7:51 p.m.355 views

CVE-2022-24050

CVE-2022-24050 : MariaDB CONNECT Storage Engine Use-After-Free Privilege Escalation. The issue stems from failing to validate the existence of an object before operating on it, enabling a local attacker (authentication required) to escalate privileges and potentially execute code in the service a...

7.8CVSS7.7AI score0.00644EPSS
SaveExploits0References6Affected Software1
CVE
CVE
added 2022/02/18 7:51 p.m.376 views

CVE-2022-24048

CVE-2022-24048 corresponds to a MariaDB CONNECT Storage Engine Stack-based Buffer Overflow Privilege Escalation. The issue arises from insufficient validation of user-supplied data length before copying it into a fixed-length stack buffer, enabling a local attacker with authentication to escalate...

7.8CVSS7.7AI score0.00689EPSS
SaveExploits0References6Affected Software1
CVE
CVE
added 2022/02/18 7:46 p.m.121 views

CVE-2021-46649

Bentley MicroStation CONNECT 10.16.0.80 is affected by CVE-2021-46649 due to an out-of-bounds read while parsing DGN files. The flaw stems from insufficient validation of user-supplied data, allowing reading beyond the end of an allocated buffer. This can disclose sensitive information and, in co...

5.5CVSS5.2AI score0.01678EPSS
SaveExploits0References2Affected Software3
CVE
CVE
added 2022/02/18 7:46 p.m.119 views

CVE-2021-46647

The CVE-2021-46647 entry concerns Bentley MicroStation CONNECT (10.16.0.80). The vulnerability is a heap-based buffer overflow during BMP image parsing caused by insufficient validation of the length of user-supplied data prior to copying it into a heap buffer. This flaw can allow an attacker to ...

7.8CVSS7.8AI score0.02087EPSS
SaveExploits0References2Affected Software3
CVE
CVE
added 2022/02/18 7:46 p.m.124 views

CVE-2021-46646

CVE-2021-46646 affects Bentley MicroStation CONNECT 10.16.0.80. The issue is an out-of-bounds write in the DGN file parser, allowing code execution in the context of the current process. Exploitation requires user interaction (visiting a malicious page or opening a malicious file) and crafted DGN...

7.8CVSS7.8AI score0.02087EPSS
SaveExploits0References2Affected Software3
Cvelist
Cvelist
added 2022/02/18 7:46 p.m.37 views

CVE-2021-46645

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

7.8CVSS8AI score0.02087EPSS
SaveExploits0References2
CVE
CVE
added 2022/02/18 7:46 p.m.98 views

CVE-2021-46635

Bentley MicroStation CONNECT 10.16.0.80 is affected by a buffer overrun in the DGN file parser. Crafted DGN data can trigger a write past the end of an allocated buffer, enabling remote code execution in the context of the current process after the user visits a malicious page or opens a maliciou...

7.8CVSS7.8AI score0.01981EPSS
SaveExploits0References2Affected Software3
CVE
CVE
added 2022/02/18 7:46 p.m.113 views

CVE-2021-46634

Bentley MicroStation CONNECT 10.16.0.80 is affected by CVE-2021-46634 due to an out-of-bounds write in JT file parsing. The flaw can allow remote code execution in the context of the affected process; exploitation requires user interaction (visiting a malicious page or opening a malicious file). ...

7.8CVSS7.8AI score0.01913EPSS
SaveExploits0References2Affected Software3
Cvelist
Cvelist
added 2022/02/18 7:46 p.m.25 views

CVE-2021-46633

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

7.8CVSS8AI score0.02005EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2022/02/18 7:45 p.m.29 views

CVE-2021-46622

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

7.8CVSS7.9AI score0.02005EPSS
SaveExploits0References2
Rows per page
Query Builder