Lucene search
+L

1331 matches found

CNVD
CNVD
added 2021/09/23 12:00 a.m.40 views

LibreDWG double release vulnerability

LibreDWG is a free C library for reading and writing DWG files. a double-release vulnerability exists in LibreDWG. No detailed vulnerability details are currently available...

8.8CVSS1.5AI score0.01077EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/09/23 12:00 a.m.41 views

LibreDWG Heap Buffer Overflow Vulnerability (CNVD-2021-74013)

LibreDWG is a free C library for reading and writing DWG files. a heap buffer overflow vulnerability exists in LibreDWG. No detailed vulnerability details are currently available...

8.8CVSS2AI score0.01065EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/09/23 12:00 a.m.29 views

LibreDWG Heap Buffer Overflow Vulnerability (CNVD-2021-74014)

LibreDWG is a free C library for reading and writing DWG files. LibreDWG suffers from a heap buffer overflow vulnerability. No detailed vulnerability details are provided at this time...

8.8CVSS9.1AI score0.01065EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2021/09/20 12:00 a.m.8 views

Libredwg 缓冲区错误漏洞

LibreDWG is a free C library for reading and writing DWG files. a heap buffer overflow vulnerability exists in LibreDWG. No detailed vulnerability details are currently available...

8.8CVSS8.2AI score0.01077EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2021/09/17 12:00 a.m.10 views

Vulnerability of software for modeling, designing, and drawing in AutoCAD, related to incorrect handling of exceptional states, allowing a violator to execute arbitrary code.

The vulnerability of software for modeling, designing, and drawing in AutoCAD is related to incorrect processing of exceptional states during syntax analysis of DWG files. Exploiting this vulnerability can allow attackers to execute arbitrary code using a specially created malicious DWG file...

7.8CVSS7.7AI score0.01797EPSS
SaveExploits0References4Affected Software11
CNVD
CNVD
added 2021/09/17 12:00 a.m.49 views

Autodesk Navisworks Buffer Overflow Vulnerability

Autodesk Navisworks, Autodesk's 3D model review software for architecture, engineering and construction, is vulnerable to a buffer overflow vulnerability that originates when a maliciously crafted DWG file may be forced to write outside of the allocated boundaries when parsing the DWG file, and a...

7.8CVSS5.4AI score0.00988EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/09/17 12:00 a.m.67 views

Autodesk Navisworks Buffer Overflow Vulnerability (CNVD-2022-05702)

Autodesk Navisworks, Autodesk's 3D model review software for architecture, engineering and construction, is vulnerable to a buffer overflow vulnerability that originates when a maliciously crafted DWG file may be forced to read beyond its allocated boundaries when parsing the DWG file, allowing a...

7.8CVSS5.3AI score0.00988EPSS
SaveExploits0References1
OSV
OSV
added 2021/09/15 5:15 p.m.7 views

CVE-2021-40155

A maliciously crafted DWG file in Autodesk Navisworks 2019, 2020, 2021, 2022 can be forced to read beyond allocated boundaries when parsing the DWG files. This vulnerability can be exploited to execute arbitrary code...

7.8CVSS6AI score0.00988EPSS
SaveExploits0References1
Prion
Prion
added 2021/09/15 5:15 p.m.20 views

Code injection

A maliciously crafted DWG file in Autodesk Navisworks 2019, 2020, 2021, 2022 can be forced to read beyond allocated boundaries when parsing the DWG files. This vulnerability can be exploited to execute arbitrary code...

6.8CVSS7.7AI score0.00988EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2021/09/15 5:15 p.m.25 views

Code injection

A maliciously crafted DWG file in Autodesk Navisworks 2019, 2020, 2021, 2022 can be forced to write beyond allocated boundaries when parsing the DWG files. This vulnerability can be exploited to execute arbitrary code...

6.8CVSS7.8AI score0.00988EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/09/15 4:35 p.m.35 views

CVE-2021-40156

A maliciously crafted DWG file in Autodesk Navisworks 2019, 2020, 2021, 2022 can be forced to write beyond allocated boundaries when parsing the DWG files. This vulnerability can be exploited to execute arbitrary code...

8AI score0.00988EPSS
SaveExploits0References1
CVE
CVE
added 2021/09/15 4:35 p.m.60 views

CVE-2021-40156

CVE-2021-40156 affects Autodesk Navisworks 2019–2022. The issue is a buffer overflow/out-of-bounds write when parsing malicious DWG files, forcing writes beyond allocated boundaries and enabling arbitrary code execution. Some sources describe remote code execution requiring user interaction (e.g....

7.8CVSS7.8AI score0.00988EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/09/15 4:35 p.m.42 views

CVE-2021-40155

A maliciously crafted DWG file in Autodesk Navisworks 2019, 2020, 2021, 2022 can be forced to read beyond allocated boundaries when parsing the DWG files. This vulnerability can be exploited to execute arbitrary code...

7.9AI score0.00988EPSS
SaveExploits0References1
CVE
CVE
added 2021/09/15 4:35 p.m.80 views

CVE-2021-40155

Autodesk Navisworks is affected by CVE-2021-40155 due to a parsing vulnerability in DWG files that can cause a read past the allocation boundary, effectively a buffer overflow/out-of-bounds read. Multiple sources (NVD entry and third-party advisories) describe that parsing malicious DWG data can ...

7.8CVSS7.7AI score0.00988EPSS
SaveExploits0References1Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2021/09/14 12:00 a.m.47 views

(0Day) Autodesk Navisworks DWG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Navisworks. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS4.8AI score0.00988EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/09/14 12:00 a.m.31 views

(0Day) Autodesk Navisworks DWG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Navisworks. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS5.4AI score0.00988EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/09/14 12:00 a.m.37 views

(0Day) Autodesk Navisworks DWG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Autodesk Navisworks. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS3.6AI score0.00988EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/08/18 12:00 a.m.28 views

Siemens JT2Go DWG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DWG...

7.8CVSS4.1AI score0.02705EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
added 2021/08/18 12:00 a.m.30 views

Siemens JT2Go DWG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing ...

3.3CVSS2.9AI score0.0205EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
added 2021/08/18 12:00 a.m.24 views

Siemens JT2Go DWG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing ...

3.3CVSS2.9AI score0.01443EPSS
SaveExploits0References2
Rows per page
Query Builder