Lucene search
+L

706 matches found

OSV
OSV
•added 2022/09/15 4:15 p.m.•18 views

CVE-2022-40639

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

7.8CVSS6.2AI score0.00616EPSS
SaveExploits0References1
NVD
NVD
•added 2022/09/15 4:15 p.m.•28 views

CVE-2022-40639

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

7.8CVSS0.00616EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2022/09/15 3:26 p.m.•35 views

CVE-2022-40639

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

7.8CVSS8AI score0.00616EPSS
SaveExploits0References1
CVE
CVE
•added 2022/09/15 3:26 p.m.•71 views

CVE-2022-40639

CVE-2022-40639 affects Ansys SpaceClaim 2022 R1. The vulnerability is a use-after-free in the SKP file parsing path caused by not validating object existence before operations, enabling remote code execution when a user visits a malicious page or opens a malicious file. Exploitation requires user...

7.8CVSS7.8AI score0.00616EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/15 12:00 a.m.•8 views

CVE-2022-40639: Use After Free

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

7.8CVSS7.8AI score0.00616EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/09/14 12:00 a.m.•12 views

PT-2022-25435 · Ansys · Ansys Spaceclaim

Name of the Vulnerable Software and Affected Versions: Ansys SpaceClaim version 2022 R1 Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The fla...

7.8CVSS7.8AI score0.00616EPSS
SaveExploits0References3
Zero Day Initiative
Zero Day Initiative
•added 2022/09/14 12:00 a.m.•34 views

(0Day) Ansys SpaceClaim SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SK...

7.8CVSS4.8AI score0.00616EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2022/05/10 12:00 a.m.•20 views

(0Day) Autodesk Navisworks Manage SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Navisworks Manage. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2022/04/12 12:00 a.m.•15 views

PT-2022-18941 · Bentley · Bentley View

Name of the Vulnerable Software and Affected Versions: Bentley View version 10.16.02.022 Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The fl...

7.8CVSS7.8AI score0.00951EPSS
SaveExploits0References3
Zero Day Initiative
Zero Day Initiative
•added 2022/04/12 12:00 a.m.•34 views

Bentley View SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SKP...

7.8CVSS4.3AI score0.00951EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/04/12 12:00 a.m.•40 views

Bentley MicroStation CONNECT SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS4.2AI score0.00959EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/04/12 12:00 a.m.•22 views

PT-2022-18949 · Bentley · Microstation Connect

Name of the Vulnerable Software and Affected Versions: Bentley MicroStation CONNECT version 10.16.02.034 Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a...

7.8CVSS7.8AI score0.00959EPSS
SaveExploits0References4
NVD
NVD
•added 2022/04/11 8:15 p.m.•36 views

CVE-2022-27528

A maliciously crafted DWFX and SKP files in Autodesk Navisworks 2022 can be used to trigger use-after-free vulnerability. Exploitation of this vulnerability may lead to code execution...

7.8CVSS0.01169EPSS
SaveExploits0References1
CVE
CVE
•added 2022/04/11 7:37 p.m.•111 views

CVE-2022-27528

Autodesk Navisworks 2022 is affected by a use-after-free vulnerability in the parsing of DWFX and SKP files, enabling potential code execution. The referenced advisories (ZDI for Navisworks Freedom/Manage, Red Hat and NVD variants) describe the fault as a parsing-time use-after-free in DWFX/SKP h...

7.8CVSS7.7AI score0.01169EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/11 12:00 a.m.•7 views

CVE-2022-27528: Use After Free

A maliciously crafted DWFX and SKP files in Autodesk Navisworks 2022 can be used to trigger use-after-free vulnerability. Exploitation of this vulnerability may lead to code execution...

7.8CVSS7.8AI score0.01169EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/04/07 12:00 a.m.•23 views

Bentley Systems MicroStation 资源管理错误漏洞

Bentley Systems MicroStation is a Cad software platform for 2D and 3D design and drafting from Bentley Systems, USA. A resource management error vulnerability exists in Bentley MicroStation CONNECT version 10.16.02.034, which could allow a remote attacker to execute arbitrary code on the target...

7.8CVSS8AI score0.00959EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2022/04/05 12:00 a.m.•4 views

PT-2022-18467

Name of the Vulnerable Software and Affected Versions Autodesk Navisworks version 2022 Description The issue is related to a use-after-free vulnerability that can be triggered by maliciously crafted DWFX and SKP files in Autodesk Navisworks. Exploitation of this issue may lead to code execution...

7.8CVSS6.1AI score0.01169EPSS
SaveExploits0References7
Zero Day Initiative
Zero Day Initiative
•added 2022/04/05 12:00 a.m.•32 views

Autodesk Navisworks Manage SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Navisworks Manage. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.2AI score0.01169EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/04/05 12:00 a.m.•32 views

Autodesk Navisworks Manage SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Navisworks Manage. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.2AI score0.01169EPSS
SaveExploits0References1
OSV
OSV
•added 2022/01/13 10:15 p.m.•16 views

CVE-2021-34872

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS7.5AI score0.02015EPSS
SaveExploits0References2
Rows per page
Query Builder