Lucene search
+L

382 matches found

Zero Day Initiative
Zero Day Initiative
added 2021/12/08 12:0 a.m.38 views

Bentley View DGN File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DGN...

7.8CVSS6AI score0.02123EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/12/08 12:0 a.m.38 views

Bentley View DGN File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

3.3CVSS2.7AI score0.0161EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/12/08 12:0 a.m.42 views

Bentley View DGN File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DGN...

7.8CVSS6AI score0.02113EPSS
SaveExploits0References1
NVD
NVD
added 2021/12/05 9:15 p.m.32 views

CVE-2021-44045

An out-of-bounds write vulnerability exists when reading a DGN file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists within the parsing of DGN files. Crafted data in a DGN file and lack of proper validation for the XFAT sectors count can trigger a write operation...

7.8CVSS0.00814EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/12/05 9:15 p.m.4 views

CVE-2021-44045

An out-of-bounds write vulnerability exists when reading a DGN file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists within the parsing of DGN files. Crafted data in a DGN file and lack of proper validation for the XFAT sectors count can trigger a write operation...

7.8CVSS7.2AI score0.00814EPSS
SaveExploits0References2
OSV
OSV
added 2021/12/05 9:15 p.m.7 views

CVE-2021-44045

An out-of-bounds write vulnerability exists when reading a DGN file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists within the parsing of DGN files. Crafted data in a DGN file and lack of proper validation for the XFAT sectors count can trigger a write operation...

7.8CVSS7.2AI score0.00814EPSS
SaveExploits0References1
Prion
Prion
added 2021/12/05 9:15 p.m.16 views

Cross site scripting

An out-of-bounds write vulnerability exists when reading a DGN file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists within the parsing of DGN files. Crafted data in a DGN file and lack of proper validation for the XFAT sectors count can trigger a write operation...

6.8CVSS7.8AI score0.00814EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2021/12/05 8:30 p.m.66 views

CVE-2021-44045

Open Design Alliance Drawings SDK (ODA) prior to 2022.11 is affected. The issue lies in DGN file parsing where crafted data and a lack of validation for XFAT sectors count trigger an out-of-bounds write past an allocated buffer, allowing code execution in the current process. Related advisories (...

7.8CVSS7.7AI score0.00814EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/12/05 8:30 p.m.39 views

CVE-2021-44045

An out-of-bounds write vulnerability exists when reading a DGN file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists within the parsing of DGN files. Crafted data in a DGN file and lack of proper validation for the XFAT sectors count can trigger a write operation...

8AI score0.00814EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/12/03 12:0 a.m.13 views

OpenText Brava! Desktop DGN File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.6AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2021/12/03 12:0 a.m.16 views

OpenText Brava! Desktop DGN File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of OpenText Brava! Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

3.3CVSS2.5AI score
SaveExploits0
CNVD
CNVD
added 2021/12/01 12:0 a.m.58 views

Open Design Alliance Drawings SDK Out-of-Bounds Writing Vulnerability (CNVD-2022-01426)

Open Design Alliance Drawings SDK is a software development kit for drawing design applications from Open Design Alliance, Inc. The package provides access to data in .dwg and .dgn through a convenient, object-oriented API, C API, support for repair files, support for . The vulnerability can be...

7.8CVSS3.6AI score0.00814EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/11/30 12:0 a.m.50 views

Open Design Alliance PRC SDK Out-of-Bounds Writing Vulnerability

Open Design Alliance Drawings SDK is a software development kit for drawing design applications from Open Design Alliance, Inc. The development package provides access to data in .dwg and .dgn through a convenient, object-oriented API that provides a C API, support for repair files, support for...

7.8CVSS3.1AI score0.00814EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/11/30 12:0 a.m.21 views

Open Design Alliance (ODA) ODAViewer DGN File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA ODAViewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

7.8CVSS6AI score0.01641EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2021/11/29 12:0 a.m.13 views

PT-2021-24031 · Open Design Alliance · Open Design Alliance Drawings Sdk

Name of the Vulnerable Software and Affected Versions: Open Design Alliance Drawings SDK versions prior to 2022.11 Description: The issue exists within the parsing of DGN files, where crafted data and a lack of proper validation for the XFAT sectors count can trigger a write operation past the en...

7.8CVSS7.7AI score0.00814EPSS
SaveExploits0References6
Zero Day Initiative
Zero Day Initiative
added 2021/11/29 12:0 a.m.37 views

Open Design Alliance (ODA) Drawings Explorer DGN File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA Drawings Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist...

7.8CVSS5.4AI score0.00814EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/11/29 12:0 a.m.18 views

Open Design Alliance (ODA) ODAViewer DGN File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA ODAViewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

7.8CVSS6AI score0.01641EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/11/29 12:0 a.m.27 views

Open Design Alliance (ODA) Drawings Explorer DGN File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA Drawings Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist...

7.8CVSS5.4AI score0.01641EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/11/29 12:0 a.m.25 views

Open Design Alliance (ODA) Drawings Explorer DGN File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Open Design Alliance ODA Drawings Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific fl...

3.3CVSS3.6AI score0.01405EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/11/29 12:0 a.m.25 views

Open Design Alliance (ODA) Drawings Explorer DGN File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Open Design Alliance ODA Drawings Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific fl...

3.3CVSS3.6AI score0.01405EPSS
SaveExploits0References1
Rows per page
Query Builder