1031 matches found
CVE-2022-28643
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
CVE-2022-28310
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.034. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
CVE-2022-28319
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.034. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
CVE-2022-28302
CVE-2022-28302 affects Bentley MicroStation CONNECT 10.16.02.34. The issue is an out-of-bounds read in the IFC file parser that can execute arbitrary code via crafted IFC data, with user interaction required (visiting a malicious page/file). Public advisories (ZDI-22-614) confirm remote code exec...
CVE-2022-28314
Bentley MicroStation CONNECT 10.16.02.34 is affected. The issue is in the IFC file parser where crafted data can trigger a write past the end of an allocated buffer, enabling arbitrary code execution in the current process when a user opens a malicious IFC file or visits a malicious page. Exploit...
CVE-2022-28319
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.034. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
CVE-2022-28316
Bentley MicroStation CONNECT 10.16.02.34 is affected by an out-of-bounds write in the IFC file parsing logic. Crafted data in an IFC file can trigger a write past the end of an allocated buffer, enabling remote code execution in the context of the current process. User interaction is required (ta...
CVE-2022-28312
The CVE-2022-28312 issue affects Bentley MicroStation CONNECT 10.16.02.034, with a flaw in 3DS file parsing that can trigger a read past the end of an allocated buffer. This leads to information disclosure and, in conjunction with other vulnerabilities, may allow arbitrary code execution in the a...
CVE-2022-28644
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
CVE-2022-28313
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.02.034. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific fla...
CVE-2022-28300
Bentley MicroStation CONNECT (10.16.02.034) is affected by CVE-2022-28300 due to an out-of-bounds write in the JP2 image parser. Crafted JP2 data can trigger a write past the end of an allocated buffer, enabling code execution in the context of the current process. User interaction is required (v...
CVE-2022-28311
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.034. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
CVE-2022-28645
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.02.34. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...
CVE-2022-28306
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.034. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
CVE-2022-28646
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.2.034. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
CVE-2022-28646
Vulnerability summary (CVE-2022-28646) : Bentley MicroStation CONNECT 10.16.2.034 is affected by an out-of-bounds write in the IFC file parser. Crafted IFC data can trigger a buffer overrun, enabling remote code execution in the context of the current process. Exploitation requires user interacti...
CVE-2022-28642
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
CVE-2022-28315
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
CVE-2022-28301
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
CVE-2022-28645
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.02.34. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...