Lucene search
+L

1331 matches found

CNVD
CNVD
added 2021/12/22 12:00 a.m.52 views

Open Design Alliance Drawings SDK Out-of-Bounds Reading Vulnerability (CNVD-2022-01422)

Open Design Alliance Drawings SDK is a software development kit for drawing design applications from Open Design Alliance, Inc. The package provides access to data in .dwg and .dgn through a convenient, object-oriented API, providing a C API, support for repair files, support for the . This...

7.8CVSS4.5AI score0.00817EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/12/22 12:00 a.m.76 views

Open Design Alliance Drawings SDK Out-of-Bounds Writing Vulnerability (CNVD-2022-01424)

Open Design Alliance Drawings SDK is a software development kit for drawing design applications from Open Design Alliance, Inc. The SDK provides access to data in .dwg and .dgn through a convenient, object-oriented API, providing a C API, support for repair files, support for the . The...

7.8CVSS4.2AI score0.00814EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/12/12 12:00 a.m.44 views

Bentley View DWG file parsing out-of-bounds read information disclosure vulnerability

Bentley View is a free viewer from Bentley Systems, Inc. An out-of-bounds read information disclosure vulnerability exists in Bentley View DWG file parsing, which stems from the lack of proper validation of user-supplied data in the parsing of PDF files resulting in reading beyond the end of the...

4.3CVSS2.5AI score0.0161EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/12/08 12:00 a.m.38 views

Bentley View DWG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

3.3CVSS2.5AI score0.0161EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/12/08 12:00 a.m.40 views

Bentley View DWG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

3.3CVSS2.7AI score0.01521EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2021/12/07 12:00 a.m.13 views

The vulnerability of the dwgCompressor function in the libdfxfw library of the LibreCad automated design system allows a hacker to execute arbitrary code.

The vulnerability of the dwgCompressor function in the libdfxfw library of the LibreCAD automated design system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a specially create...

9.3CVSS8.5AI score0.02515EPSS
SaveExploits1References6Affected Software2
Zero Day Initiative
Zero Day Initiative
added 2021/12/03 12:00 a.m.20 views

OpenText Brava! Desktop DWG File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS4.4AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2021/12/03 12:00 a.m.14 views

OpenText Brava! Desktop DWG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.5AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2021/12/03 12:00 a.m.16 views

OpenText Brava! Desktop DWG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of OpenText Brava! Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

3.3CVSS2.4AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2021/12/03 12:00 a.m.19 views

OpenText Brava! Desktop DWG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS6.8AI score
SaveExploits0
CNVD
CNVD
added 2021/12/01 12:00 a.m.69 views

Open Design Alliance Drawings SDK Out-of-Bounds Writing Vulnerability (CNVD-2022-01426)

Open Design Alliance Drawings SDK is a software development kit for drawing design applications from Open Design Alliance, Inc. The package provides access to data in .dwg and .dgn through a convenient, object-oriented API, C API, support for repair files, support for . The vulnerability can be...

7.8CVSS3.6AI score0.00814EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/11/30 12:00 a.m.55 views

Open Design Alliance PRC SDK Out-of-Bounds Writing Vulnerability

Open Design Alliance Drawings SDK is a software development kit for drawing design applications from Open Design Alliance, Inc. The development package provides access to data in .dwg and .dgn through a convenient, object-oriented API that provides a C API, support for repair files, support for...

7.8CVSS3.1AI score0.00814EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/11/29 12:00 a.m.29 views

Open Design Alliance (ODA) Drawings Explorer DWG File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA Drawings Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist...

7.8CVSS5.3AI score0.01339EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/11/22 9:15 a.m.3 views

CVE-2021-43582

A Use-After-Free Remote Vulnerability exists when reading a DWG file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists within the parsing of DWG files. The issue results from the lack of validating the existence of an object prior to performing operations on the...

7.8CVSS6.8AI score0.01339EPSS
SaveExploits0References3
NVD
NVD
added 2021/11/22 9:15 a.m.50 views

CVE-2021-43582

A Use-After-Free Remote Vulnerability exists when reading a DWG file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists within the parsing of DWG files. The issue results from the lack of validating the existence of an object prior to performing operations on the...

7.8CVSS0.01339EPSS
SaveExploits0References2
OSV
OSV
added 2021/11/22 9:15 a.m.10 views

CVE-2021-43582

A Use-After-Free Remote Vulnerability exists when reading a DWG file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists within the parsing of DWG files. The issue results from the lack of validating the existence of an object prior to performing operations on the...

7.8CVSS6AI score0.01339EPSS
SaveExploits0References2
Prion
Prion
added 2021/11/22 9:15 a.m.19 views

Design/Logic Flaw

A Use-After-Free Remote Vulnerability exists when reading a DWG file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists within the parsing of DWG files. The issue results from the lack of validating the existence of an object prior to performing operations on the...

6.8CVSS7.7AI score0.01339EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2021/11/22 8:55 a.m.45 views

CVE-2021-43582

A Use-After-Free Remote Vulnerability exists when reading a DWG file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists within the parsing of DWG files. The issue results from the lack of validating the existence of an object prior to performing operations on the...

7.9AI score0.01339EPSS
SaveExploits0References2
CVE
CVE
added 2021/11/22 8:55 a.m.70 views

CVE-2021-43582

CVE-2021-43582 is an Use-After-Free vulnerability in the Open Design Alliance Drawings SDK (and related ODA tools) related to DWG file parsing prior to 2022.11. The issue arises from not validating an object's existence before performing operations, enabling an attacker to execute code in the cur...

7.8CVSS7.6AI score0.01339EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
added 2021/11/22 12:00 a.m.90 views

Open Design Alliance Drawings SDK Resource Management Error Vulnerability

Open Design Alliance Drawings SDK is a software development kit for drawing design applications from Open Design Alliance, Inc. The development package provides access to data in .dwg and .dgn through a convenient, object-oriented API that provides a C API, support for repair files, support for t...

7.8CVSS3.7AI score0.01339EPSS
SaveExploits0References1
Rows per page
Query Builder