Lucene search
+L

13391 matches found

CNVD
CNVD
added 2021/11/16 12:00 a.m.91 views

Open Design Alliance Drawings SDK has an unspecified vulnerability (CNVD-2021-89164)

Open Design Alliance Drawings SDK is a software development kit for drawing design applications from Open Design Alliance, Inc. The package provides access to data in .dwg and .dgn through a convenient, object-oriented API, providing a C API, support for repair files, support for . An out - bound...

7.8CVSS3.2AI score0.01695EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/11/16 12:00 a.m.48 views

Open Design Alliance Drawings SDK has an unspecified vulnerability (CNVD-2021-89166)

Open Design Alliance Drawings SDK is a software development kit for drawing design applications from Open Design Alliance, Inc. The package provides access to data in .dwg and .dgn through a convenient, object-oriented API that provides a C API, support for repair files, support for the . An "out...

7.8CVSS2.9AI score0.01695EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/11/16 12:00 a.m.61 views

Open Design Alliance Drawings SDK has an unspecified vulnerability (CNVD-2021-89162)

Open Design Alliance Drawings SDK is a software development kit for drawing design applications from Open Design Alliance, Inc. The Open Design Alliance Drawings SDK contains a security vulnerability that results from an exception vulnerability in the sample The ODA Viewer continues to process...

9.8CVSS3.2AI score0.03632EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/11/16 12:00 a.m.60 views

Open Design Alliance Drawings SDK has an unspecified vulnerability (CNVD-2021-89165)

Open Design Alliance Drawings SDK is a software development kit for drawing design applications from Open Design Alliance, Inc. The package provides access to data in .dwg and .dgn through a convenient, object-oriented API, providing a C API, support for repair files, support for . An out - bound...

7.8CVSS4.3AI score0.01681EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/11/15 12:00 a.m.59 views

Drawings SDK out-of-bounds read vulnerability (CNVD-2021-94906)

Drawings SDK is a development kit from the Open Design Alliance that gives you access to all .dwg and .dgn data via an object-oriented API that lets you create and edit any type of .dwg and .dgn drawing file. OBJ file reader in versions of Drawings SDK prior to 2022.11 An out-of-bounds read...

7.8CVSS3.2AI score0.0084EPSS
SaveExploits0References1
NVD
NVD
added 2021/11/14 9:15 p.m.22 views

CVE-2021-43390

An Out-of-Bounds Write vulnerability exists when reading a DGN file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists within the parsing of DGN files. Crafted data in a DGN file and lack of proper validation of input data can trigger a write operation past the end ...

7.8CVSS0.01695EPSS
SaveExploits0References4
NVD
NVD
added 2021/11/14 9:15 p.m.38 views

CVE-2021-43280

A stack-based buffer overflow vulnerability exists in the DWF file reading procedure in Open Design Alliance Drawings SDK before 2022.8. The issue results from the lack of proper validation of the length of user-supplied data before copying it to a stack-based buffer. An attacker can leverage thi...

7.8CVSS0.01897EPSS
SaveExploits0References8
OSV
OSV
added 2021/11/14 9:15 p.m.13 views

CVE-2021-43280

A stack-based buffer overflow vulnerability exists in the DWF file reading procedure in Open Design Alliance Drawings SDK before 2022.8. The issue results from the lack of proper validation of the length of user-supplied data before copying it to a stack-based buffer. An attacker can leverage thi...

7.8CVSS6.3AI score0.01897EPSS
SaveExploits0References8
NVD
NVD
added 2021/11/14 9:15 p.m.41 views

CVE-2021-43279

An out-of-bounds write vulnerability exists in the U3D file reading procedure in Open Design Alliance PRC SDK before 2022.10. Crafted data in a U3D file can trigger a write past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute...

7.8CVSS0.01336EPSS
SaveExploits0References2
NVD
NVD
added 2021/11/14 9:15 p.m.27 views

CVE-2021-43274

A Use After Free Vulnerability exists in the Open Design Alliance Drawings SDK before 2022.11. The specific flaw exists within the parsing of DWF files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage...

7.8CVSS0.00884EPSS
SaveExploits0References1
NVD
NVD
added 2021/11/14 9:15 p.m.24 views

CVE-2021-43275

A Use After Free vulnerability exists in the DGN file reading procedure in Open Design Alliance Drawings SDK before 2022.8. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute...

7.8CVSS0.00884EPSS
SaveExploits0References1
NVD
NVD
added 2021/11/14 9:15 p.m.47 views

CVE-2021-43273

An Out-of-bounds Read vulnerability exists in the DGN file reading procedure in Open Design Alliance Drawings SDK before 2022.11. Crafted data in a DGN file and lack of verification of input data can trigger a read past the end of an allocated buffer. An attacker can leverage this vulnerability t...

4.3CVSS0.01452EPSS
SaveExploits0References5
attackerkb
attackerkb
added 2021/11/14 9:15 p.m.8 views

CVE-2021-43391

An Out-of-Bounds Read vulnerability exists when reading a DXF file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists within the parsing of DXF files. Crafted data in a DXF file an invalid dash counter in line types can trigger a read past the end of an allocated...

7.8CVSS6.8AI score0.01681EPSS
SaveExploits0References5
attackerkb
attackerkb
added 2021/11/14 9:15 p.m.7 views

CVE-2021-43274

A Use After Free Vulnerability exists in the Open Design Alliance Drawings SDK before 2022.11. The specific flaw exists within the parsing of DWF files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage...

7.8CVSS6.3AI score0.00884EPSS
SaveExploits0References2
Prion
Prion
added 2021/11/14 9:15 p.m.25 views

Stack overflow

A stack-based buffer overflow vulnerability exists in the DWF file reading procedure in Open Design Alliance Drawings SDK before 2022.8. The issue results from the lack of proper validation of the length of user-supplied data before copying it to a stack-based buffer. An attacker can leverage thi...

6.8CVSS7.7AI score0.01897EPSS
SaveExploits0References8Affected Software1
Prion
Prion
added 2021/11/14 9:15 p.m.23 views

Cross site scripting

An out-of-bounds read vulnerability exists in the U3D file reading procedure in Open Design Alliance PRC SDK before 2022.10. Crafted data in a U3D file can trigger a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute...

6.8CVSS7.7AI score0.0084EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
added 2021/11/14 9:15 p.m.9 views

CVE-2021-43275

A Use After Free vulnerability exists in the DGN file reading procedure in Open Design Alliance Drawings SDK before 2022.8. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute...

7.8CVSS7.2AI score0.00884EPSS
SaveExploits0References2
Prion
Prion
added 2021/11/14 9:15 p.m.24 views

Design/Logic Flaw

A Use After Free vulnerability exists in the DGN file reading procedure in Open Design Alliance Drawings SDK before 2022.8. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute...

6.8CVSS7.7AI score0.00884EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2021/11/14 9:15 p.m.27 views

Cross site scripting

An Out-of-bounds Read vulnerability exists in the OBJ file reading procedure in Open Design Alliance Drawings SDK before 2022.11. The lack of validating the input length can trigger a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the...

6.8CVSS7.6AI score0.0084EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/11/14 8:58 p.m.43 views

CVE-2021-43280

A stack-based buffer overflow vulnerability exists in the DWF file reading procedure in Open Design Alliance Drawings SDK before 2022.8. The issue results from the lack of proper validation of the length of user-supplied data before copying it to a stack-based buffer. An attacker can leverage thi...

8AI score0.01897EPSS
SaveExploits0References8
Rows per page
Query Builder