Lucene search
+L

549 matches found

CNVD
CNVD
added 2022/02/08 12:0 a.m.70 views

Siemens Simcenter Femap Stack Buffer Overflow Vulnerability (CNVD-2022-10011)

Siemens Simcenter Femap is a cutting-edge engineering simulation application from Siemens, Germany. Siemens Simcenter Femap is vulnerable to a stack buffer overflow when parsing NEU files, which could be exploited to execute code in the context of the current process...

7.8CVSS5.4AI score0.01774EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/01/31 12:0 a.m.6 views

Bentley Systems MicroStation 资源管理错误漏洞

Bentley Systems MicroStation is a Cad software platform for 2D and 3D design and drafting from Bentley Systems, USA. A resource management error vulnerability exists in Bentley Systems MicroStation, which can be exploited by an attacker to execute code in the context of the current process...

7.8CVSS5.9AI score0.0237EPSS
SaveExploits0References5
Zero Day Initiative
Zero Day Initiative
added 2022/01/31 12:0 a.m.44 views

Bentley MicroStation CONNECT JT File Parsing Uninitialized Variable Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.7AI score0.02041EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/01/31 12:0 a.m.54 views

Bentley View JT File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JT...

7.8CVSS4.5AI score0.01913EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/01/31 12:0 a.m.58 views

Bentley MicroStation CONNECT JT File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS4.4AI score0.02041EPSS
SaveExploits0References1
OSV
OSV
added 2022/01/25 8:15 p.m.5 views

CVE-2021-40159

An Information Disclosure vulnerability for JT files in Autodesk Inventor 2022, 2021, 2020, 2019 in conjunction with other vulnerabilities may lead to code execution through maliciously crafted JT files in the context of the current process...

7.8CVSS6AI score0.02296EPSS
SaveExploits0References3
NVD
NVD
added 2022/01/13 10:15 p.m.18 views

CVE-2021-34858

This vulnerability allows remote attackers to execute arbitrary code on affected installations of TeamViewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of TVS file...

7.8CVSS0.03756EPSS
SaveExploits0References2
Prion
Prion
added 2022/01/13 10:15 p.m.25 views

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

6.8CVSS7.8AI score0.01937EPSS
SaveExploits0References2Affected Software2
CNVD
CNVD
added 2021/12/23 12:0 a.m.66 views

Horner Automation Cscape EnvisionRV Input Validation Error Vulnerability

Horner Automation Cscape EnvisionRV is a programming software for industrial control system development from Horner Automation, U.S. An input validation error vulnerability exists in Horner Automation Cscape EnvisionRV, which could be exploited by an attacker to execute arbitrary code in the...

7.8CVSS3.6AI score0.00702EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/12/14 12:6 p.m.34 views

CVE-2021-44430

A vulnerability has been identified in JT Utilities All versions V13.1.1.0, JTTK All versions V11.1.1.0. JTTK library in affected products is vulnerable to an out of bounds write past the end of an allocated structure while parsing specially crafted JT files. This could allow an attacker to execu...

7.9AI score0.00814EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/12/13 12:0 a.m.60 views

Bentley View Buffer Overflow Vulnerability (CNVD-2021-101861)

Bentley View is a free viewer from Bentley Systems, U.S.A. Bentley View is vulnerable to a buffer error vulnerability that stems from a boundary error when processing JT files. An attacker could exploit this vulnerability to execute code in the context of the current process...

7.8CVSS4.4AI score0.02041EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/12/12 12:0 a.m.43 views

Bentley View SKP File Parsing Memory Misreference Vulnerability

Bentley View is a free viewer from Bentley Systems, Inc. A memory mis-reference vulnerability exists in Bentley View SKP file parsing, which results from not verifying the existence of an object before operating on the SKP file. An attacker could exploit this vulnerability to execute code in the...

7.8CVSS5AI score0.02015EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/12/08 12:0 a.m.43 views

Bentley View JT File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JT...

7.8CVSS5.2AI score0.02041EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/12/08 12:0 a.m.39 views

Bentley View JT File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JT...

7.8CVSS5AI score0.01937EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/12/05 8:30 p.m.42 views

CVE-2021-44045

An out-of-bounds write vulnerability exists when reading a DGN file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists within the parsing of DGN files. Crafted data in a DGN file and lack of proper validation for the XFAT sectors count can trigger a write operation...

8AI score0.00814EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/12/03 12:0 a.m.17 views

OpenText Brava! Desktop pdf2dl Uninitialized Pointer Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS5.7AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2021/12/03 12:0 a.m.14 views

OpenText Brava! Desktop DWF File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.9AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2021/12/03 12:0 a.m.15 views

OpenText Brava! Desktop DXF File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS5.1AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2021/12/03 12:0 a.m.18 views

OpenText Brava! Desktop DWF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.6AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2021/11/29 12:0 a.m.28 views

Open Design Alliance (ODA) Drawings Explorer DWF File Parsing Out-Of-Based Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA Drawings Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist...

7.8CVSS5.5AI score0.01837EPSS
SaveExploits0References1
Rows per page
Query Builder