Lucene search
+L

382 matches found

CNVD
CNVD
added 2021/11/22 12:0 a.m.77 views

Open Design Alliance Drawings SDK Resource Management Error Vulnerability

Open Design Alliance Drawings SDK is a software development kit for drawing design applications from Open Design Alliance, Inc. The development package provides access to data in .dwg and .dgn through a convenient, object-oriented API that provides a C API, support for repair files, support for t...

7.8CVSS3.7AI score0.01339EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/11/19 12:0 a.m.69 views

Open Design Alliance Drawings SDK Out-of-Bounds Reading Vulnerability (CNVD-2022-01430)

Open Design Alliance Drawings SDK is a software development kit for drawing design applications from Open Design Alliance, Inc. The SDK provides access to data in .dwg and .dgn through a convenient, object-oriented API that provides a C API, support for repair files, support for . The vulnerabili...

8.8CVSS3.6AI score0.01201EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/11/16 12:0 a.m.41 views

Open Design Alliance Drawings SDK has an unspecified vulnerability (CNVD-2021-89165)

Open Design Alliance Drawings SDK is a software development kit for drawing design applications from Open Design Alliance, Inc. The package provides access to data in .dwg and .dgn through a convenient, object-oriented API, providing a C API, support for repair files, support for . An out - bound...

7.8CVSS4.3AI score0.01627EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/11/16 12:0 a.m.37 views

Open Design Alliance Drawings SDK has an unspecified vulnerability (CNVD-2021-89166)

Open Design Alliance Drawings SDK is a software development kit for drawing design applications from Open Design Alliance, Inc. The package provides access to data in .dwg and .dgn through a convenient, object-oriented API that provides a C API, support for repair files, support for the . An "out...

7.8CVSS2.9AI score0.01641EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/11/15 12:0 a.m.47 views

Drawings SDK out-of-bounds read vulnerability (CNVD-2021-94906)

Drawings SDK is a development kit from the Open Design Alliance that gives you access to all .dwg and .dgn data via an object-oriented API that lets you create and edit any type of .dwg and .dgn drawing file. OBJ file reader in versions of Drawings SDK prior to 2022.11 An out-of-bounds read...

7.8CVSS3.2AI score0.00814EPSS
SaveExploits0References1
NVD
NVD
added 2021/11/14 9:15 p.m.16 views

CVE-2021-43390

An Out-of-Bounds Write vulnerability exists when reading a DGN file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists within the parsing of DGN files. Crafted data in a DGN file and lack of proper validation of input data can trigger a write operation past the end ...

7.8CVSS0.01641EPSS
SaveExploits0References4
OSV
OSV
added 2021/11/14 9:15 p.m.8 views

CVE-2021-43390

An Out-of-Bounds Write vulnerability exists when reading a DGN file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists within the parsing of DGN files. Crafted data in a DGN file and lack of proper validation of input data can trigger a write operation past the end ...

7.8CVSS6AI score0.01641EPSS
SaveExploits0References4
NVD
NVD
added 2021/11/14 9:15 p.m.19 views

CVE-2021-43275

A Use After Free vulnerability exists in the DGN file reading procedure in Open Design Alliance Drawings SDK before 2022.8. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute...

7.8CVSS0.00855EPSS
SaveExploits0References1
NVD
NVD
added 2021/11/14 9:15 p.m.43 views

CVE-2021-43273

An Out-of-bounds Read vulnerability exists in the DGN file reading procedure in Open Design Alliance Drawings SDK before 2022.11. Crafted data in a DGN file and lack of verification of input data can trigger a read past the end of an allocated buffer. An attacker can leverage this vulnerability t...

4.3CVSS0.01405EPSS
SaveExploits0References5
OSV
OSV
added 2021/11/14 9:15 p.m.7 views

CVE-2021-43273

An Out-of-bounds Read vulnerability exists in the DGN file reading procedure in Open Design Alliance Drawings SDK before 2022.11. Crafted data in a DGN file and lack of verification of input data can trigger a read past the end of an allocated buffer. An attacker can leverage this vulnerability t...

3.3CVSS5.9AI score0.01405EPSS
SaveExploits0References5
Prion
Prion
added 2021/11/14 9:15 p.m.19 views

Design/Logic Flaw

A Use After Free vulnerability exists in the DGN file reading procedure in Open Design Alliance Drawings SDK before 2022.8. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute...

6.8CVSS7.7AI score0.00855EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2021/11/14 9:15 p.m.26 views

Cross site scripting

An Out-of-Bounds Write vulnerability exists when reading a DGN file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists within the parsing of DGN files. Crafted data in a DGN file and lack of proper validation of input data can trigger a write operation past the end ...

6.8CVSS7.7AI score0.01641EPSS
SaveExploits0References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/11/14 9:15 p.m.4 views

CVE-2021-43275

A Use After Free vulnerability exists in the DGN file reading procedure in Open Design Alliance Drawings SDK before 2022.8. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute...

7.8CVSS7.2AI score0.00855EPSS
SaveExploits0References2
Prion
Prion
added 2021/11/14 9:15 p.m.16 views

Cross site scripting

An Out-of-bounds Read vulnerability exists in the DGN file reading procedure in Open Design Alliance Drawings SDK before 2022.11. Crafted data in a DGN file and lack of verification of input data can trigger a read past the end of an allocated buffer. An attacker can leverage this vulnerability t...

4.3CVSS4AI score0.01405EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2021/11/14 8:56 p.m.22 views

CVE-2021-43390

An Out-of-Bounds Write vulnerability exists when reading a DGN file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists within the parsing of DGN files. Crafted data in a DGN file and lack of proper validation of input data can trigger a write operation past the end ...

7.9AI score0.01641EPSS
SaveExploits0References4
CVE
CVE
added 2021/11/14 8:56 p.m.52 views

CVE-2021-43390

CVE-2021-43390 refers to an out-of-bounds write in the Open Design Alliance (ODA) Drawings SDK when parsing DGN files. The issue occurs due to improper validation of crafted DGN data, allowing a write past the end of a buffer and potentially enabling code execution in the attacker’s context. Affe...

7.8CVSS7.6AI score0.01641EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2021/11/14 8:50 p.m.34 views

CVE-2021-43275

A Use After Free vulnerability exists in the DGN file reading procedure in Open Design Alliance Drawings SDK before 2022.8. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute...

7.9AI score0.00855EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/11/14 8:48 p.m.39 views

CVE-2021-43273

An Out-of-bounds Read vulnerability exists in the DGN file reading procedure in Open Design Alliance Drawings SDK before 2022.11. Crafted data in a DGN file and lack of verification of input data can trigger a read past the end of an allocated buffer. An attacker can leverage this vulnerability t...

4.5AI score0.01405EPSS
SaveExploits0References5
CVE
CVE
added 2021/11/14 8:48 p.m.56 views

CVE-2021-43273

CVE-2021-43273 concerns Open Design Alliance Drawings SDK (and related ODAViewer/Drawings Explorer) with an Out-of-bounds read/write in DGN file parsing. Exploitation arises from crafted DGN data and insufficient input validation, potentially allowing code execution in the attacker’s context (rem...

4.3CVSS4AI score0.01405EPSS
SaveExploits0References5Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2021/11/10 12:0 a.m.27 views

Open Design Alliance (ODA) ODAViewer DGN File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Open Design Alliance ODA ODAViewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist...

3.3CVSS3.9AI score0.01405EPSS
SaveExploits0References1
Rows per page
Query Builder