1152 matches found
CVE-2021-46585
CVE-2021-46585 affects Bentley MicroStation CONNECT 10.16.0.80. The vulnerability is a stack-based buffer overflow caused by insufficient validation of user-supplied data while parsing JT files, enabling remote code execution. Exploitation requires user interaction (visiting a malicious page or o...
CVE-2021-46585
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
CVE-2021-46581
CVE-2021-46581 affects Bentley MicroStation CONNECT 10.16.0.80. The vulnerability arises from parsing JT files, where crafted data can trigger a write past the end of an allocated buffer, enabling remote code execution in the current process. Exploitation requires user interaction (visiting a mal...
CVE-2021-46580
CVE-2021-46580 affects Bentley MicroStation CONNECT. The issue is a JT file parsing use-after-free caused by not validating an object’s existence before operations, enabling remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a malicious file). The ...
CVE-2021-46580
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
CVE-2021-46579
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
CVE-2021-46579
Bentley MicroStation CONNECT 10.16.0.80 is affected by a JT file parsing use-after-free vulnerability that allows remote code execution. The root cause is failure to validate the existence of an object before operating on it during JT file processing, enabling an attacker to run code in the curre...
CVE-2021-46578
Bentley MicroStation CONNECT JT file parsing vulnerability (CVE-2021-46578) is a use-after-free flaw that allows remote code execution. The issue arises in parsing JT files and stems from not validating the existence of an object before performing operations on it. Exploitation requires user inte...
CVE-2021-46578
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
CVE-2021-46577
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
CVE-2021-46576
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
CVE-2021-46576
Bentley MicroStation CONNECT 10.16.0.80 is affected. The vulnerability lies in JT file parsing, where crafted JT data can trigger a write past the end of an allocated buffer, allowing remote code execution in the context of the current process. User interaction is required (the target must visit ...
CVE-2021-46574
Bentley MicroStation CONNECT 10.16.0.80 is affected by a JT file parsing flaw that can trigger a write past the end of an allocated buffer, enabling remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a malicious JT file). The issue is disclosed in ...
CVE-2021-46574
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
CVE-2021-46573
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
CVE-2021-46573
Bentley MicroStation CONNECT JT file parsing contains a use-after-free vulnerability that allows remote code execution. Affected versions include MicroStation CONNECT 10.16.0.80. Exploitation requires user interaction (visiting a malicious page or opening a malicious JT file). The issue arises fr...
CVE-2021-46572
CVE-2021-46572 affects Bentley MicroStation CONNECT 10.16.0.80. The vulnerability is in the JT file parsing path, where crafted JT data can trigger an out-of-bounds write in the affected process, allowing remote code execution. Exploitation requires user interaction (target must visit a malicious...
CVE-2021-46572
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
CVE-2021-46571
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...
CVE-2021-46570
CVE-2021-46570 affects Bentley View 10.16.0.80. The issue lies in parsing JT files where memory is accessed without prior proper initialization, enabling an attacker to disclose sensitive information and, with other vulnerabilities, execute arbitrary code in the current process after user interac...