382 matches found
Design/Logic Flaw
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
Design/Logic Flaw
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...
Design/Logic Flaw
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...
Design/Logic Flaw
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
Design/Logic Flaw
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...
Design/Logic Flaw
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...
CVE-2021-46654
Bentley View 10.15.0.75 is affected by a DGN file parsing flaw that can read past the end of an allocated buffer, enabling information disclosure. The issue requires user interaction (visiting a malicious page or opening a malicious file) and can be leveraged with other vulnerabilities to execute...
CVE-2021-46652
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...
CVE-2021-46652
The CVE-2021-46652 entry concerns Bentley View 10.15.0.75 with a vulnerability in DGN file parsing. The underlying flaw is an out-of-bounds write (-write past the end of an allocated buffer-) triggered by crafted DGN data, enabling arbitrary code execution in the context of the current process. E...
CVE-2021-46650
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...
CVE-2021-46649
Bentley MicroStation CONNECT 10.16.0.80 is affected by CVE-2021-46649 due to an out-of-bounds read while parsing DGN files. The flaw stems from insufficient validation of user-supplied data, allowing reading beyond the end of an allocated buffer. This can disclose sensitive information and, in co...
CVE-2021-46649
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...
CVE-2021-46648
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
CVE-2021-46646
CVE-2021-46646 affects Bentley MicroStation CONNECT 10.16.0.80. The issue is an out-of-bounds write in the DGN file parser, allowing code execution in the context of the current process. Exploitation requires user interaction (visiting a malicious page or opening a malicious file) and crafted DGN...
CVE-2021-46646
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
CVE-2021-46644
Bentley MicroStation CONNECT 10.16.0.80 is affected by an out-of-bounds write vulnerability in DGN file parsing. The flaw allows remote code execution via crafted DGN data that triggers a write past the end of an allocated buffer; user interaction is required (visit a malicious page or open a mal...
CVE-2021-46644
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
CVE-2021-46643
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...
CVE-2021-46643
CVE-2021-46643 affects Bentley View 10.15.0.75. The vulnerability arises in the DGN file parsing code due to lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer, enabling remote code execution. Exploitation requires user interaction (visiting ...
CVE-2021-46642
Bentley View 10.15.0.75 is affected by a DGN file parsing flaw that allows an out-of-bounds read, leading to information disclosure. The issue stems from insufficient validation of user-supplied data during DGN parsing, enabling a remote attacker to read past the end of an allocated buffer. Explo...