Lucene search
+L

908 matches found

OSV
OSV
•added 2022/01/13 10:15 p.m.•18 views

CVE-2021-34916

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

3.3CVSS4.9AI score0.01521EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2022/01/13 10:15 p.m.•13 views

CVE-2021-34916

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

4.3CVSS4.9AI score0.01521EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2022/01/13 10:15 p.m.•17 views

CVE-2021-34902

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

3.3CVSS4.9AI score0.0161EPSS
SaveExploits0References2
CNVD
CNVD
•added 2021/12/22 12:00 a.m.•86 views

Open Design Alliance Drawings SDK Out-of-Bounds Writing Vulnerability (CNVD-2022-01424)

Open Design Alliance Drawings SDK is a software development kit for drawing design applications from Open Design Alliance, Inc. The SDK provides access to data in .dwg and .dgn through a convenient, object-oriented API, providing a C API, support for repair files, support for the . The...

7.8CVSS4.2AI score0.00814EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/12/21 12:00 a.m.•17 views

Open Design Alliance (ODA) Drawings Explorer 缓冲区错误漏洞

Open Design Alliance Drawings SDK is a software development kit for drawing design applications from Open Design Alliance, Inc. The SDK provides access to data in .dwg and .dgn through a convenient, object-oriented API, providing a C API, support for repair files, support for the . The...

7.8CVSS6.1AI score0.00814EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2021/12/13 12:00 a.m.•17 views

The vulnerability of the `dwgCompressor :: copyCompBytes21` function in the `libdfxfw` library of the LibreCAD automated design system allows a attacker to execute arbitrary code.

The vulnerability of the dwgCompressor :: copyCompBytes21 function in the libdfxfw library of the LibreCAD automated design system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using...

9.3CVSS8.5AI score0.02762EPSS
SaveExploits1References8Affected Software4
BDU FSTEC
BDU FSTEC
•added 2021/12/13 12:00 a.m.•21 views

The vulnerability of the dxfRW function in the processLType() method of the libdfxfw library in the LibreCad automated design system allows a perpetrator to execute arbitrary code.

The vulnerability of the dxfRW function in the processLType method of the libdfxfw library in the LibreCad automated design system is related to its use after release. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially created .dxf format...

9.3CVSS8.1AI score0.02537EPSS
SaveExploits1References7Affected Software3
CNNVD
CNNVD
•added 2021/12/08 12:00 a.m.•14 views

Bentley Systems Bentley View 缓冲区错误漏洞

Bentley View is a free viewer from Bentley Systems, Inc. An out-of-bounds read information disclosure vulnerability exists in Bentley View DWG file parsing, which stems from the lack of proper validation of user-supplied data in the parsing of PDF files resulting in reading beyond the end of the...

4.3CVSS5.5AI score0.0161EPSS
SaveExploits0References4
CNVD
CNVD
•added 2021/11/30 12:00 a.m.•58 views

Open Design Alliance PRC SDK Out-of-Bounds Writing Vulnerability

Open Design Alliance Drawings SDK is a software development kit for drawing design applications from Open Design Alliance, Inc. The development package provides access to data in .dwg and .dgn through a convenient, object-oriented API that provides a C API, support for repair files, support for...

7.8CVSS3.1AI score0.0084EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/11/29 12:00 a.m.•22 views

Open Design Alliance Drawings SDK 缓冲区错误漏洞

Open Design Alliance Drawings SDK is a software development kit for drawing design applications from Open Design Alliance, Inc. The development package provides access to data in .dwg and .dgn through a convenient, object-oriented API that provides a C API, support for repair files, support for...

7.8CVSS5.7AI score0.0084EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2021/11/29 12:00 a.m.•23 views

Open Design Alliance Drawings SDK 缓冲区错误漏洞

Open Design Alliance Drawings SDK is a software development kit for drawing design applications from Open Design Alliance, Inc. The package provides access to data in .dwg and .dgn through a convenient, object-oriented API, C API, support for repair files, support for . The vulnerability can be...

7.8CVSS5.9AI score0.0084EPSS
SaveExploits0References3
CNVD
CNVD
•added 2021/11/22 12:00 a.m.•96 views

Open Design Alliance Drawings SDK Resource Management Error Vulnerability

Open Design Alliance Drawings SDK is a software development kit for drawing design applications from Open Design Alliance, Inc. The development package provides access to data in .dwg and .dgn through a convenient, object-oriented API that provides a C API, support for repair files, support for t...

7.8CVSS3.7AI score0.01383EPSS
SaveExploits0References1
OSV
OSV
•added 2021/11/19 8:15 p.m.•4 views

DEBIAN-CVE-2021-21898

A code execution vulnerability exists in the dwgCompressor::decompress18 functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dwg file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability...

8.8CVSS8.4AI score0.02597EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2021/11/19 7:15 p.m.•11 views

CVE-2021-21899

A code execution vulnerability exists in the dwgCompressor::copyCompBytes21 functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dwg file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...

8.8CVSS7.8AI score0.02762EPSS
SaveExploits1References9
OSV
OSV
•added 2021/11/19 7:15 p.m.•3 views

DEBIAN-CVE-2021-21900

A code execution vulnerability exists in the dxfRW::processLType functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dxf file can lead to a use-after-free vulnerability. An attacker can provide a malicious file to trigger this vulnerability...

8.8CVSS8.4AI score0.02537EPSS
SaveExploits1References1
OSV
OSV
•added 2021/11/19 7:15 p.m.•11 views

UBUNTU-CVE-2021-21899

A code execution vulnerability exists in the dwgCompressor::copyCompBytes21 functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dwg file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...

8.8CVSS8AI score0.02762EPSS
SaveExploits1References5
OSV
OSV
•added 2021/11/19 7:15 p.m.•11 views

UBUNTU-CVE-2021-21900

A code execution vulnerability exists in the dxfRW::processLType functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dxf file can lead to a use-after-free vulnerability. An attacker can provide a malicious file to trigger this vulnerability...

8.8CVSS7.7AI score0.02537EPSS
SaveExploits1References5
CNVD
CNVD
•added 2021/11/16 12:00 a.m.•65 views

Open Design Alliance Drawings SDK has an unspecified vulnerability (CNVD-2021-89165)

Open Design Alliance Drawings SDK is a software development kit for drawing design applications from Open Design Alliance, Inc. The package provides access to data in .dwg and .dgn through a convenient, object-oriented API, providing a C API, support for repair files, support for . An out - bound...

7.8CVSS4.3AI score0.01681EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/11/16 12:00 a.m.•18 views

PT-2021-23886 · Open Design Alliance · Open Design Alliance Drawings Sdk

Name of the Vulnerable Software and Affected Versions: Open Design Alliance Drawings SDK versions prior to 2022.11 Description: A Use-After-Free Remote issue exists when reading a DWG file using the parsing functionality. The issue results from the lack of validating the existence of an object...

7.8CVSS7.6AI score0.01383EPSS
SaveExploits0References7
OSV
OSV
•added 2021/11/14 9:15 p.m.•13 views

CVE-2021-43336

An Out-of-Bounds Write vulnerability exists when reading a DXF or DWG file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists within the parsing of DXF and DWG files. Crafted data in a DXF or DWG file an invalid number of properties can trigger a write operation pas...

7.8CVSS6AI score0.01695EPSS
SaveExploits0References4
Rows per page
Query Builder