EUVD-2021-33273

Malicious code in bioql PyPI...

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2021-46597

Bentley MicroStation CONNECT 10.16.0.80 is affected by a vulnerability in JT file parsing (use-after-free) that allows remote code execution. The flaw stems from not validating object existence before operations; exploitation requires user interaction (visiting a malicious page or opening a malic...