Lucene search
+L

344 matches found

Zero Day Initiative
Zero Day Initiative
added 2022/04/05 12:0 a.m.31 views

Autodesk Navisworks Manage DWF File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Navisworks Manage. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.6AI score0.0062EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/04/05 12:0 a.m.32 views

Autodesk Navisworks Freedom DWF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Navisworks Freedom. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.4AI score0.01463EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/04/05 12:0 a.m.36 views

Autodesk Navisworks Freedom DWF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Navisworks Freedom. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.4AI score0.01463EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/04/05 12:0 a.m.31 views

Autodesk Navisworks Freedom DWF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Navisworks Freedom. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.4AI score0.01463EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/04/05 12:0 a.m.29 views

Autodesk Navisworks Freedom DWF File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Navisworks Freedom. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.6AI score0.0062EPSS
SaveExploits0References1
Debian
Debian
added 2022/03/07 12:10 p.m.57 views

[SECURITY] [DLA 2934-1] freecad security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2934-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort March 07, 2022 https://wiki.debian.org/LTS -...

7.8CVSS7.6AI score0.01102EPSS
SaveExploits1
Zero Day Initiative
Zero Day Initiative
added 2022/03/07 12:0 a.m.34 views

Autodesk AutoCAD DWF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DW...

7.8CVSS5.7AI score0.01462EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/03/07 12:0 a.m.31 views

Autodesk AutoCAD DWF File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DW...

7.8CVSS5.4AI score0.0062EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/03/07 12:0 a.m.37 views

Autodesk AutoCAD DWF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DW...

7.8CVSS5AI score0.01463EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/03/07 12:0 a.m.18 views

Autodesk AutoCAD DWF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DW...

7.8CVSS5AI score0.01463EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/03/07 12:0 a.m.28 views

Autodesk AutoCAD DWF File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DW...

7.8CVSS4.4AI score0.01538EPSS
SaveExploits0References1
OSV
OSV
added 2022/01/25 8:15 p.m.4 views

CVE-2021-40167

A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process...

7.8CVSS6AI score0.07734EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/01/25 8:15 p.m.3 views

CVE-2021-40167

A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process...

7.8CVSS7.2AI score0.07734EPSS
SaveExploits0References2
CVE
CVE
added 2022/01/25 7:11 p.m.88 views

CVE-2021-40167

Autodesk Design Review is affected by CVE-2021-40167 through memory corruption in the DWF/.pct file parsing pathway, potentially enabling code execution. Multiple sources (NVD, ZDI, CNA/CNNVD) describe a vulnerability in the DesignReview.exe parser that can be triggered by maliciously crafted DWF...

7.8CVSS7.8AI score0.07734EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2021/12/05 9:15 p.m.22 views

CVE-2021-44047

A use-after-free vulnerability exists when reading a DWF/DWFX file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists with parsing DWF/DWFX files. Crafted data in a DWF/DWFX file and lack of proper validation of input data can trigger a write operation past the end ...

7.8CVSS0.00855EPSS
SaveExploits0References1
Prion
Prion
added 2021/12/05 9:15 p.m.25 views

Design/Logic Flaw

A use-after-free vulnerability exists when reading a DWF/DWFX file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists with parsing DWF/DWFX files. Crafted data in a DWF/DWFX file and lack of proper validation of input data can trigger a write operation past the end ...

6.8CVSS7.7AI score0.00855EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/12/05 8:30 p.m.31 views

CVE-2021-44047

A use-after-free vulnerability exists when reading a DWF/DWFX file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists with parsing DWF/DWFX files. Crafted data in a DWF/DWFX file and lack of proper validation of input data can trigger a write operation past the end ...

7.9AI score0.00855EPSS
SaveExploits0References1
CVE
CVE
added 2021/12/05 8:30 p.m.59 views

CVE-2021-44047

CVE-2021-44047 concerns the Open Design Alliance Drawings SDK. The issue is a use-after-free in the DWG/DWF/DWFX parsing path that can trigger a write past the end of an allocated buffer when processing crafted DWF/DWFX data. Affected component: ODA Drawings SDK’s file parsers. Impact: remote/cod...

7.8CVSS7.7AI score0.00855EPSS
SaveExploits0References1Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2021/12/03 12:0 a.m.14 views

OpenText Brava! Desktop DWF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.6AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2021/12/03 12:0 a.m.10 views

OpenText Brava! Desktop DWF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.6AI score
SaveExploits0
Rows per page
Query Builder