Bentley View DGN File Parsing Stack Buffer Overflow Vulnerability

Bentley View, a free viewer from Bentley Systems, Inc. A stack buffer overflow vulnerability exists in Bentley View DGN file parsing, which stems from a lack of proper validation of the length of user-supplied data before it is copied to the heap buffer in DGN file parsing. An attacker could...

Bentley View Stack Buffer Overflow Vulnerability

Bentley View is a free viewer from Bentley Systems, U.S.A. Bentley View is vulnerable to a stack buffer overflow vulnerability that exists due to a boundary error in the handling of untrusted input. An attacker could exploit this vulnerability to execute arbitrary code on the system...

Bentley View JT File Memory Misreference Vulnerability

Bentley View is a free viewer from Bentley Systems, Inc. Bentley View is vulnerable to a memory misreference vulnerability that results from not verifying the existence of an object before performing an operation on it. An attacker could exploit this vulnerability to execute code in the context o...

Bentley View SKP File Parsing Memory Misreference Vulnerability

Bentley View is a free viewer from Bentley Systems, Inc. A memory mis-reference vulnerability exists in Bentley View SKP file parsing, which results from not verifying the existence of an object before operating on the SKP file. An attacker could exploit this vulnerability to execute code in the...

Bentley View Out-of-Bounds Writing Vulnerability

Bentley View is a free viewer from Bentley Systems, Inc. Bentley View is vulnerable to an out-of-bounds write vulnerability that stems from a boundary error when handling JT files. An attacker could exploit the vulnerability to create a specially crafted JT file and trick a victim into opening th...

Bentley View DWG file parsing out-of-bounds read information disclosure vulnerability

Bentley View is a free viewer from Bentley Systems, Inc. An out-of-bounds read information disclosure vulnerability exists in Bentley View DWG file parsing, which stems from the lack of proper validation of user-supplied data in the parsing of PDF files resulting in reading beyond the end of the...

PT-2021-23007 · Snipe-It · Snipe-It

Name of the Vulnerable Software and Affected Versions: snipe-it versions prior to 5.3.4 Description: The issue is related to Improper Access Control. Regular users with DENY set to all models permissions can still view model information via the "/models/id/clone" endpoint due to no authorize'view...

django: Potential directory traversal via ``admindocs``

A flaw was found in django. Staff members could use the :mod:django.contrib.admindocs TemplateDetailView view to check the existence of arbitrary files. Additionally, if and only if the default admindocs templates have been customized by the developers to also expose the file contents, then not...

Vulnerabilities fixed in Bentley View and Microstation

Bentley Systems has fixed several vulnerabilities in Bentley View and Microstation. A malicious party could potentially exploit them to cause a denial-of-service, or to execute arbitrary code with the victim's privileges. The malicious party does not need prior authentication, but must entice the...

Bentley Systems Bentley View 缓冲区错误漏洞

Bentley View is a free viewer from Bentley Systems, Inc. An out-of-bounds read information disclosure vulnerability exists in Bentley View DWG file parsing, which stems from the lack of proper validation of user-supplied data in the parsing of PDF files resulting in reading beyond the end of the...

Bentley Systems Bentley View 缓冲区错误漏洞

Bentley View is a free viewer from Bentley Systems, Inc. A security vulnerability exists in Bentley View, which is caused by a lack of proper validation of user-supplied data and can be exploited by an attacker to execute code in the context of the current process...

Bentley Systems Bentley View 资源管理错误漏洞

Bentley View is a free viewer from Bentley Systems, Inc. Bentley View has a security vulnerability that could be exploited by attackers to execute arbitrary code on the system...

Bentley Systems Bentley View 缓冲区错误漏洞

Bentley View is a free viewer from Bentley Systems, Inc. Bentley View suffers from a buffer overflow vulnerability that can be exploited by attackers to execute arbitrary code on the system...

Bentley Systems Bentley View 缓冲区错误漏洞

Bentley View is a free viewer from Bentley Systems, Inc. A security vulnerability exists in Bentley View JT file parsing, which can be exploited by attackers to execute code in the context of the current process...

Bentley Systems Bentley View 资源管理错误漏洞

Bentley View, a free viewer from Bentley Systems, Inc. A security vulnerability exists in Bentley View JT file parsing, which is caused by failing to verify the existence of an object before performing an operation on it. An attacker could exploit this vulnerability to execute code in the context...

Bentley Systems Bentley View 缓冲区错误漏洞

Bentley View is a free viewer from Bentley Systems, Inc. A security vulnerability exists in Bentley View 3DS file parsing, which can be exploited by attackers to execute code in the context of the current process...

Bentley Systems Bentley View 缓冲区错误漏洞

Bentley View is a free viewer from Bentley Systems, Inc. Bentley View is vulnerable to an out-of-bounds write vulnerability that stems from a boundary error when handling JT files. An attacker could exploit the vulnerability to create a specially crafted JT file and trick a victim into opening th...

Bentley Systems Bentley View 缓冲区错误漏洞

Bentley View is a free viewer from Bentley Systems, Inc. A security vulnerability exists in Bentley View, which is caused by out-of-bounds writes when parsing JT files. An attacker could exploit this vulnerability to execute arbitrary code on the system...

Bentley Systems Bentley View 缓冲区错误漏洞

Bentley View is a free viewer from Bentley Systems, Inc. A security vulnerability exists in Bentley View JT file parsing, which can be exploited by attackers to execute code in the context of the current process...

Bentley Systems Bentley View 缓冲区错误漏洞

Bentley View is a free viewer from Bentley Systems, Inc. Bentley View BMP file parsing heap buffer overflow remote code execution vulnerability is due to a failure to properly validate the length of user-supplied data before copying it to the heap buffer. An attacker could exploit this...