Lucene search
+L

812 matches found

Zero Day Initiative
Zero Day Initiative
added 2022/01/31 12:00 a.m.42 views

Bentley MicroStation CONNECT PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

3.3CVSS2.7AI score0.01603EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/01/31 12:00 a.m.67 views

Bentley MicroStation CONNECT PDF File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS4.5AI score0.02005EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/01/31 12:00 a.m.5 views

Bentley Systems MicroStation 资源管理错误漏洞

Bentley MicroStation CONNECT is a Cad software platform for 2D and 3D design and drafting from Bentley Systems, Inc. A remote code execution vulnerability exists in Bentley MicroStation CONNECT 10.16.0.80 when parsing PDF files, which stems from failure to verify the existence of an object before...

7.8CVSS6.7AI score0.02005EPSS
SaveExploits0References5
NVD
NVD
added 2022/01/13 10:15 p.m.30 views

CVE-2021-34887

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

4.3CVSS0.01603EPSS
SaveExploits0References2
NVD
NVD
added 2022/01/13 10:15 p.m.31 views

CVE-2021-34873

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS0.01996EPSS
SaveExploits0References2
Prion
Prion
added 2022/01/13 10:15 p.m.24 views

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

6.8CVSS7.8AI score0.01996EPSS
SaveExploits0References2Affected Software2
CVE
CVE
added 2022/01/13 9:43 p.m.76 views

CVE-2021-34887

Bentley View 10.15.0.75 is affected by a PDF parsing out-of-bounds read vulnerability. The issue stems from insufficient validation of user-supplied data, causing a read past the end of an allocated buffer. This can lead to sensitive information disclosure and, in conjunction with other vulnerabi...

4.3CVSS3.4AI score0.01603EPSS
SaveExploits0References2Affected Software2
Cvelist
Cvelist
added 2022/01/13 9:43 p.m.42 views

CVE-2021-34887

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

3.3CVSS3.6AI score0.01603EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2022/01/13 9:42 p.m.30 views

CVE-2021-34873

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS8AI score0.01996EPSS
SaveExploits0References2
CVE
CVE
added 2022/01/13 9:42 p.m.68 views

CVE-2021-34873

CVE-2021-34873 (Bentley View) affects Bentley View 10.15.0.75. The flaw is in the PDF parsing code and is an out-of-bounds write triggered by crafted PDF data, allowing an attacker to run code in the context of the current process. Exploitation requires user interaction (target must visit a malic...

7.8CVSS7.8AI score0.01996EPSS
SaveExploits0References2Affected Software2
Zero Day Initiative
Zero Day Initiative
added 2022/01/06 12:00 a.m.29 views

Siemens JT2Go PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF...

7.8CVSS7.7AI score0.02031EPSS
SaveExploits0References2
OSV
OSV
added 2021/12/21 12:00 a.m.13 views

OSV-2021-1728 UNKNOWN READ in pdfi_dict_get

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42687 Crash type: UNKNOWN READ Crash state: pdfidictget pdfidictgetint pdfireadbareobject...

7.2AI score
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/12/14 12:15 p.m.6 views

CVE-2021-44001

A vulnerability has been identified in JT2Go All versions V13.2.0.5, Teamcenter Visualization All versions V13.2.0.5. The DL180pdfl.dll contains an out of bounds write past the end of an allocated structure while parsing specially crafted PDF files. This could allow an attacker to execute code in...

7.8CVSS7.1AI score0.02031EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2021/12/14 12:06 p.m.37 views

CVE-2021-44001

A vulnerability has been identified in JT2Go All versions V13.2.0.5, Teamcenter Visualization All versions V13.2.0.5. The DL180pdfl.dll contains an out of bounds write past the end of an allocated structure while parsing specially crafted PDF files. This could allow an attacker to execute code in...

7.9AI score0.02031EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
added 2021/12/08 12:00 a.m.65 views

Bentley View PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

3.3CVSS2.7AI score0.01603EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/12/08 12:00 a.m.9 views

Bentley Systems Bentley View 缓冲区错误漏洞

Bentley View is a free viewer from Bentley Systems, Inc. A security vulnerability exists in Bentley View PDF file parsing, which could be exploited by attackers to obtain sensitive information about affected Bentley View installations...

4.3CVSS5.5AI score0.01603EPSS
SaveExploits0References4
Zero Day Initiative
Zero Day Initiative
added 2021/12/03 12:00 a.m.17 views

OpenText Brava! Desktop PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.5AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2021/12/03 12:00 a.m.15 views

OpenText Brava! Desktop PDF File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.6AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2021/11/17 12:00 a.m.31 views

(0Day) Autodesk Design Review PDF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Design Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS7.6AI score0.01708EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/10/15 12:00 a.m.26 views

Foxit PDF Reader PDF File Parsing Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS1.6AI score0.0034EPSS
SaveExploits0References1
Rows per page
Query Builder