Lucene search
+L

1805 matches found

Zero Day Initiative
Zero Day Initiative
•added 2021/12/08 12:00 a.m.•44 views

Bentley View JT File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JT...

7.8CVSS5.2AI score0.02041EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/12/08 12:00 a.m.•41 views

Bentley View JP2 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JP2...

7.8CVSS5.1AI score0.02005EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2021/12/07 12:00 a.m.•14 views

The vulnerability in the socket implementation of the Microsoft Windows operating system allows a hacker to cause a service failure. [source-iocs-preserved const=AF_UNIX]

The vulnerability of the socket implementation in Microsoft Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, working remotely, to cause service failures by sending specially crafted input data to the application...

7.8CVSS7.2AI score0.03253EPSS
SaveExploits0References3
OSV
OSV
•added 2021/12/05 9:15 p.m.•17 views

CVE-2021-44047

A use-after-free vulnerability exists when reading a DWF/DWFX file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists with parsing DWF/DWFX files. Crafted data in a DWF/DWFX file and lack of proper validation of input data can trigger a write operation past the end ...

7.8CVSS6AI score0.00884EPSS
SaveExploits0References1
NVD
NVD
•added 2021/12/05 9:15 p.m.•33 views

CVE-2021-44047

A use-after-free vulnerability exists when reading a DWF/DWFX file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists with parsing DWF/DWFX files. Crafted data in a DWF/DWFX file and lack of proper validation of input data can trigger a write operation past the end ...

7.8CVSS0.00884EPSS
SaveExploits0References1
Prion
Prion
•added 2021/12/05 9:15 p.m.•33 views

Cross site scripting

An out-of-bounds write vulnerability exists when reading a JPG file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists with parsing JPG files. Crafted data in a JPG 4 extraneous bytes before the marker 0xca can trigger a write operation past the end of an allocated...

6.8CVSS7.7AI score0.0084EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2021/12/05 9:15 p.m.•32 views

Design/Logic Flaw

A use-after-free vulnerability exists when reading a DWF/DWFX file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists with parsing DWF/DWFX files. Crafted data in a DWF/DWFX file and lack of proper validation of input data can trigger a write operation past the end ...

6.8CVSS7.7AI score0.00884EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2021/12/05 9:15 p.m.•23 views

Cross site scripting

An out-of-bounds write vulnerability exists when reading a TIF file using Open Design Alliance ODA Drawings Explorer before 2022.11. The specific issue exists after loading TIF files. Crafted data in a TIF file can trigger a write operation past the end of an allocated buffer. An attacker can...

6.8CVSS7.7AI score0.0084EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/12/05 8:30 p.m.•40 views

CVE-2021-44047

A use-after-free vulnerability exists when reading a DWF/DWFX file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists with parsing DWF/DWFX files. Crafted data in a DWF/DWFX file and lack of proper validation of input data can trigger a write operation past the end ...

7.9AI score0.00884EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2021/12/05 8:29 p.m.•38 views

CVE-2021-44044

An out-of-bounds write vulnerability exists when reading a JPG file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists with parsing JPG files. Crafted data in a JPG 4 extraneous bytes before the marker 0xca can trigger a write operation past the end of an allocated...

7.9AI score0.0084EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/12/03 12:00 a.m.•25 views

OpenText Brava! Desktop DWG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS6.8AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2021/11/30 12:00 a.m.•25 views

Open Design Alliance (ODA) ODAViewer DGN File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA ODAViewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

7.8CVSS6AI score0.01695EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/11/29 12:00 a.m.•31 views

Open Design Alliance (ODA) Drawings Explorer DWF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA Drawings Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist...

7.8CVSS5.5AI score0.01897EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/11/28 12:00 a.m.•67 views

Dell Networking X-Series Input Validation Error Vulnerability

Dell Networking X-Series is a series of intelligent managed switches from Dell, U.S.A. The Dell Networking X-Series is vulnerable to an input validation error that could be exploited by a remote, unauthenticated attacker to trigger a denial of service by sending specially crafted data...

7.5CVSS3.7AI score0.01289EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/11/22 9:15 a.m.•9 views

CVE-2021-43581

An Out-of-Bounds Read vulnerability exists when reading a U3D file using Open Design Alliance PRC SDK before 2022.11. The specific issue exists within the parsing of U3D files. Incorrect use of the LibJpeg source manager inside the U3D library, and crafted data in a U3D file, can trigger a read...

8.8CVSS6.2AI score0.01241EPSS
SaveExploits0References2
Prion
Prion
•added 2021/11/22 9:15 a.m.•26 views

Design/Logic Flaw

An Out-of-Bounds Read vulnerability exists when reading a U3D file using Open Design Alliance PRC SDK before 2022.11. The specific issue exists within the parsing of U3D files. Incorrect use of the LibJpeg source manager inside the U3D library, and crafted data in a U3D file, can trigger a read...

6.8CVSS8.7AI score0.01241EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2021/11/20 12:00 a.m.•18 views

Dell Networking X-Series 输入验证错误漏洞

Dell Networking X-Series is a series of intelligent managed switches from Dell, U.S.A. The Dell Networking X-Series is vulnerable to an input validation error that could be exploited by a remote, unauthenticated attacker to trigger a denial of service by sending specially crafted data...

7.5CVSS5.5AI score0.01289EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2021/11/17 12:00 a.m.•34 views

(0Day) Autodesk Design Review PDF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Design Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS7.6AI score0.01708EPSS
SaveExploits0References1
NVD
NVD
•added 2021/11/14 9:15 p.m.•27 views

CVE-2021-43391

An Out-of-Bounds Read vulnerability exists when reading a DXF file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists within the parsing of DXF files. Crafted data in a DXF file an invalid dash counter in line types can trigger a read past the end of an allocated...

7.8CVSS0.01681EPSS
SaveExploits0References4
NVD
NVD
•added 2021/11/14 9:15 p.m.•19 views

CVE-2021-43336

An Out-of-Bounds Write vulnerability exists when reading a DXF or DWG file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists within the parsing of DXF and DWG files. Crafted data in a DXF or DWG file an invalid number of properties can trigger a write operation pas...

7.8CVSS0.01695EPSS
SaveExploits0References4
Rows per page
Query Builder