Lucene search
+L

1223 matches found

Zero Day Initiative
Zero Day Initiative
•added 2022/01/31 12:00 a.m.•67 views

Bentley MicroStation CONNECT JT File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.1AI score0.02016EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/01/31 12:00 a.m.•91 views

Bentley MicroStation CONNECT JT File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5AI score0.02016EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/01/31 12:00 a.m.•59 views

Bentley MicroStation CONNECT JT File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.1AI score0.02041EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/01/31 12:00 a.m.•47 views

Bentley MicroStation CONNECT JT File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS4.4AI score0.02041EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/01/31 12:00 a.m.•58 views

Bentley MicroStation CONNECT J2K File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.3AI score0.02093EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/01/31 12:00 a.m.•65 views

Bentley MicroStation CONNECT JT File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS4.4AI score0.02041EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/01/31 12:00 a.m.•60 views

Bentley MicroStation CONNECT JT File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS4.4AI score0.02041EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/01/31 12:00 a.m.•47 views

Bentley MicroStation CONNECT JP2 File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS4.7AI score0.02113EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/01/31 12:00 a.m.•41 views

Bentley MicroStation CONNECT JT File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5AI score0.02041EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/01/31 12:00 a.m.•76 views

Bentley MicroStation CONNECT JT File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5AI score0.02041EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/01/31 12:00 a.m.•48 views

Bentley MicroStation CONNECT JT File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS4.4AI score0.02041EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/01/31 12:00 a.m.•75 views

Bentley MicroStation CONNECT JT File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.1AI score0.02041EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/01/31 12:00 a.m.•3 views

PT-2022-12814

Name of the Vulnerable Software and Affected Versions Bentley MicroStation CONNECT version 10.16.0.80 Description This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious...

7.8CVSS0.02041EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2022/01/31 12:00 a.m.•15 views

Bentley Systems MicroStation 缓冲区错误漏洞

Bentley MicroStation CONNECT is a Cad software platform for 2D and 3D design and drafting. An information disclosure vulnerability exists in Bentley MicroStation CONNECT, which can be exploited by attackers to obtain sensitive information...

4.3CVSS5.6AI score0.01521EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2022/01/31 12:00 a.m.•3 views

PT-2022-12826

Name of the Vulnerable Software and Affected Versions Bentley MicroStation CONNECT version 10.16.0.80 Description This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious...

7.8CVSS0.02041EPSS
SaveExploits0References4
NCSC
NCSC
•added 2021/12/09 12:00 a.m.•23 views

Vulnerabilities fixed in Bentley View and Microstation

Bentley Systems has fixed several vulnerabilities in Bentley View and Microstation. A malicious party could potentially exploit them to cause a denial-of-service, or to execute arbitrary code with the victim's privileges. The malicious party does not need prior authentication, but must entice the...

7.8CVSS7.5AI score0.0205EPSS
SaveExploits0
CNVD
CNVD
•added 2015/03/26 12:00 a.m.•8 views

Bentley Microstation Arbitrary Code Execution Vulnerability

Bentley Systems Microstation is a suite of 2D and 3D CAD information modeling software from Bentley Systems, USA. The software provides drawing and modeling tools, rendering effects and animations, engineering drawings and drawing documentation. An arbitrary code execution vulnerability exists in...

8AI score
SaveExploits0References1
NVD
NVD
•added 2012/09/07 10:32 a.m.•32 views

CVE-2010-5230

Multiple untrusted search path vulnerabilities in MicroStation 7.1 allow local users to gain privileges via a Trojan horse 1 mptools.dll, 2 baseman.dll, 3 wintab32.dll, or 4 wintab.dll file in the current working directory, as demonstrated by a directory that contains a .hln or .rdl file. NOTE:...

6.9CVSS6.7AI score0.00871EPSS
SaveExploits0References2
Prion
Prion
•added 2012/09/07 10:32 a.m.•29 views

Design/Logic Flaw

Multiple untrusted search path vulnerabilities in MicroStation 7.1 allow local users to gain privileges via a Trojan horse 1 mptools.dll, 2 baseman.dll, 3 wintab32.dll, or 4 wintab.dll file in the current working directory, as demonstrated by a directory that contains a .hln or .rdl file. NOTE:...

6.9CVSS7.2AI score0.00871EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2012/09/07 10:00 a.m.•53 views

CVE-2010-5230

Multiple untrusted search path vulnerabilities in MicroStation 7.1 allow local users to gain privileges via a Trojan horse 1 mptools.dll, 2 baseman.dll, 3 wintab32.dll, or 4 wintab.dll file in the current working directory, as demonstrated by a directory that contains a .hln or .rdl file. NOTE:...

6.7AI score0.00871EPSS
SaveExploits0References2
Rows per page
Query Builder