Lucene search
+L

841 matches found

ATTACKERKB
ATTACKERKB
added 2022/01/25 1:15 p.m.7 views

CVE-2021-45343

In LibreCAD 2.2.0, a NULL pointer dereference in the HATCH handling of libdxfrw allows an attacker to crash the application using a crafted DXF document...

5.5CVSS5.8AI score0.009EPSS
SaveExploits1References8
CNNVD
CNNVD
added 2022/01/25 12:00 a.m.9 views

LibreCAD 代码问题漏洞

LibreCAD is an open source CAD Computer Aided Design application from the LibreCAD organization. A denial of service vulnerability in LibreCAD version 2.2.0, which originates from a null pointer dereference in the HATCH handling of libdxfrw, can be exploited by an attacker to crash the applicatio...

5.5CVSS5.7AI score0.009EPSS
SaveExploits1References8
ATTACKERKB
ATTACKERKB
added 2022/01/13 10:15 p.m.5 views

CVE-2021-34916

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

4.3CVSS4.9AI score0.01521EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2022/01/13 10:15 p.m.11 views

CVE-2021-34916

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

3.3CVSS4.9AI score0.01521EPSS
SaveExploits0References2
OSV
OSV
added 2022/01/13 10:15 p.m.10 views

CVE-2021-34902

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

3.3CVSS4.9AI score0.0161EPSS
SaveExploits0References2
CNVD
CNVD
added 2021/12/22 12:00 a.m.76 views

Open Design Alliance Drawings SDK Out-of-Bounds Writing Vulnerability (CNVD-2022-01424)

Open Design Alliance Drawings SDK is a software development kit for drawing design applications from Open Design Alliance, Inc. The SDK provides access to data in .dwg and .dgn through a convenient, object-oriented API, providing a C API, support for repair files, support for the . The...

7.8CVSS4.2AI score0.00814EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/12/21 12:00 a.m.9 views

Open Design Alliance (ODA) Drawings Explorer 缓冲区错误漏洞

Open Design Alliance Drawings SDK is a software development kit for drawing design applications from Open Design Alliance, Inc. The SDK provides access to data in .dwg and .dgn through a convenient, object-oriented API, providing a C API, support for repair files, support for the . The...

7.8CVSS6.1AI score0.00814EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2021/12/13 12:00 a.m.10 views

The vulnerability of the `dwgCompressor :: copyCompBytes21` function in the `libdfxfw` library of the LibreCAD automated design system allows a attacker to execute arbitrary code.

The vulnerability of the dwgCompressor :: copyCompBytes21 function in the libdfxfw library of the LibreCAD automated design system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using...

9.3CVSS8.5AI score0.02686EPSS
SaveExploits1References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/12/13 12:00 a.m.16 views

The vulnerability of the dxfRW function in the processLType() method of the libdfxfw library in the LibreCad automated design system allows a perpetrator to execute arbitrary code.

The vulnerability of the dxfRW function in the processLType method of the libdfxfw library in the LibreCad automated design system is related to its use after release. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially created .dxf format...

9.3CVSS8.1AI score0.02465EPSS
SaveExploits1References7Affected Software3
CNNVD
CNNVD
added 2021/12/08 12:00 a.m.8 views

Bentley Systems Bentley View 缓冲区错误漏洞

Bentley View is a free viewer from Bentley Systems, Inc. An out-of-bounds read information disclosure vulnerability exists in Bentley View DWG file parsing, which stems from the lack of proper validation of user-supplied data in the parsing of PDF files resulting in reading beyond the end of the...

4.3CVSS5.5AI score0.0161EPSS
SaveExploits0References4
CNVD
CNVD
added 2021/11/30 12:00 a.m.55 views

Open Design Alliance PRC SDK Out-of-Bounds Writing Vulnerability

Open Design Alliance Drawings SDK is a software development kit for drawing design applications from Open Design Alliance, Inc. The development package provides access to data in .dwg and .dgn through a convenient, object-oriented API that provides a C API, support for repair files, support for...

7.8CVSS3.1AI score0.00814EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/11/29 12:00 a.m.12 views

Open Design Alliance Drawings SDK 缓冲区错误漏洞

Open Design Alliance Drawings SDK is a software development kit for drawing design applications from Open Design Alliance, Inc. The development package provides access to data in .dwg and .dgn through a convenient, object-oriented API that provides a C API, support for repair files, support for...

7.8CVSS5.7AI score0.00814EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/11/29 12:00 a.m.14 views

Open Design Alliance Drawings SDK 缓冲区错误漏洞

Open Design Alliance Drawings SDK is a software development kit for drawing design applications from Open Design Alliance, Inc. The package provides access to data in .dwg and .dgn through a convenient, object-oriented API, C API, support for repair files, support for . The vulnerability can be...

7.8CVSS5.9AI score0.00814EPSS
SaveExploits0References3
CNVD
CNVD
added 2021/11/22 12:00 a.m.90 views

Open Design Alliance Drawings SDK Resource Management Error Vulnerability

Open Design Alliance Drawings SDK is a software development kit for drawing design applications from Open Design Alliance, Inc. The development package provides access to data in .dwg and .dgn through a convenient, object-oriented API that provides a C API, support for repair files, support for t...

7.8CVSS3.7AI score0.01339EPSS
SaveExploits0References1
OSV
OSV
added 2021/11/19 8:15 p.m.2 views

DEBIAN-CVE-2021-21898

A code execution vulnerability exists in the dwgCompressor::decompress18 functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dwg file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability...

8.8CVSS8.4AI score0.02515EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2021/11/19 7:15 p.m.5 views

CVE-2021-21899

A code execution vulnerability exists in the dwgCompressor::copyCompBytes21 functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dwg file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...

8.8CVSS7.8AI score0.02686EPSS
SaveExploits1References9
OSV
OSV
added 2021/11/19 7:15 p.m.1 views

DEBIAN-CVE-2021-21900

A code execution vulnerability exists in the dxfRW::processLType functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dxf file can lead to a use-after-free vulnerability. An attacker can provide a malicious file to trigger this vulnerability...

8.8CVSS8.4AI score0.02465EPSS
SaveExploits1References1
OSV
OSV
added 2021/11/19 7:15 p.m.7 views

UBUNTU-CVE-2021-21899

A code execution vulnerability exists in the dwgCompressor::copyCompBytes21 functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dwg file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...

8.8CVSS8AI score0.02686EPSS
SaveExploits1References5
OSV
OSV
added 2021/11/19 7:15 p.m.6 views

UBUNTU-CVE-2021-21900

A code execution vulnerability exists in the dxfRW::processLType functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dxf file can lead to a use-after-free vulnerability. An attacker can provide a malicious file to trigger this vulnerability...

8.8CVSS7.7AI score0.02465EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2021/11/16 12:00 a.m.9 views

PT-2021-23886 · Open Design Alliance · Open Design Alliance Drawings Sdk

Name of the Vulnerable Software and Affected Versions: Open Design Alliance Drawings SDK versions prior to 2022.11 Description: A Use-After-Free Remote issue exists when reading a DWG file using the parsing functionality. The issue results from the lack of validating the existence of an object...

7.8CVSS7.6AI score0.01339EPSS
SaveExploits0References7
Rows per page
Query Builder