Lucene search
+L

3015 matches found

CNVD
CNVD
added 2021/12/01 12:0 a.m.53 views

Open Design Alliance Drawings SDK Post-release Reuse Vulnerability (CNVD-2022-00615)

The Open Design Alliance Drawings SDK is a software development kit for drawing design from Open Design Alliance, Inc. The Open Design Alliance Drawings SDK is vulnerable to a post-release reuse vulnerability caused by failure to verify the existence of an object before performing operations on i...

7.8CVSS3.5AI score0.00855EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/12/01 12:0 a.m.52 views

Open Design Alliance (ODA) Drawings Explorer Out-of-Bounds Writing Vulnerability

Open Design Alliance ODA Drawings Explorer is a browser. An out-of-bounds write vulnerability exists in Open Design Alliance ODA Drawings Explorer, which can be exploited by attackers to execute code in the context of the current process...

7.8CVSS6.2AI score0.00814EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/11/30 12:0 a.m.21 views

Open Design Alliance (ODA) ODAViewer DGN File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA ODAViewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

7.8CVSS6AI score0.01641EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/11/30 12:0 a.m.25 views

Open Design Alliance (ODA) ODAViewer DWF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA ODAViewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

7.8CVSS6.8AI score0.03517EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/11/29 12:0 a.m.21 views

Open Design Alliance (ODA) Drawings Explorer DWF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA Drawings Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist...

7.8CVSS6.5AI score0.01837EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/11/29 12:0 a.m.23 views

Open Design Alliance (ODA) Drawings Explorer TIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA Drawings Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist...

7.8CVSS5.6AI score0.00814EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/11/29 12:0 a.m.27 views

Open Design Alliance (ODA) Drawings Explorer DWG File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA Drawings Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist...

7.8CVSS5.3AI score0.01339EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/11/19 12:0 a.m.69 views

Open Design Alliance Drawings SDK Out-of-Bounds Reading Vulnerability (CNVD-2022-01430)

Open Design Alliance Drawings SDK is a software development kit for drawing design applications from Open Design Alliance, Inc. The SDK provides access to data in .dwg and .dgn through a convenient, object-oriented API that provides a C API, support for repair files, support for . The vulnerabili...

8.8CVSS3.6AI score0.01201EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/11/18 12:0 a.m.29 views

WECON PLC Editor WCP File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of WECON PLC Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of WC...

7.8CVSS7.7AI score0.00912EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/11/17 12:0 a.m.31 views

(0Day) Autodesk Design Review PNG File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Design Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS7.7AI score0.01606EPSS
SaveExploits0References1
NVD
NVD
added 2021/11/14 9:15 p.m.37 views

CVE-2021-43276

An Out-of-bounds Read vulnerability exists in Open Design Alliance ODA Viewer before 2022.8. Crafted data in a DWF file can trigger a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the...

7.8CVSS0.00814EPSS
SaveExploits0References1
Prion
Prion
added 2021/11/14 9:15 p.m.16 views

Cross site scripting

An Out-of-bounds Read vulnerability exists in Open Design Alliance ODA Viewer before 2022.8. Crafted data in a DWF file can trigger a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the...

6.8CVSS7.7AI score0.00814EPSS
SaveExploits0References1Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2021/11/11 12:0 a.m.51 views

Microsoft Access ACCDB File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Access. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS7.5AI score0.03521EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/11/10 12:0 a.m.27 views

Open Design Alliance (ODA) ODAViewer DWF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA ODAViewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

7.8CVSS7.7AI score0.00855EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/11/10 12:0 a.m.24 views

Open Design Alliance (ODA) ODAViewer U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Open Design Alliance ODA ODAViewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist...

3.3CVSS6.8AI score0.00814EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/11/10 12:0 a.m.25 views

Open Design Alliance (ODA) ODAViewer U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA ODAViewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

7.8CVSS7.7AI score0.01293EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/11/10 12:0 a.m.25 views

Open Design Alliance (ODA) ODAViewer DWF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA ODAViewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

7.8CVSS7.7AI score0.00855EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/11/10 12:0 a.m.27 views

Open Design Alliance (ODA) ODAViewer U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA ODAViewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

7.8CVSS7.6AI score0.00814EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/11/10 12:0 a.m.32 views

Open Design Alliance (ODA) ODAViewer U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA ODAViewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

7.8CVSS7.7AI score0.01293EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/11/10 12:0 a.m.22 views

Open Design Alliance (ODA) ODAViewer U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA ODAViewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

7.8CVSS7.6AI score0.00814EPSS
SaveExploits0References1
Rows per page
Query Builder