Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-28285 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-16T14:03:55.820Z Vendors: Mozilla Products: Thunderbird, Firefox, Firefox ESR Problem Types: Incorrect AliasSet used in JIT Codegen Description: When generating the assembly code for <code>MLoadTypedArrayElementHole</code>, an incorrect AliasSet was used. In conjunction with another vulnerability this could have been used for an out of bounds memory read. This vulnerability affects Thunderbird < 91.8, Firefox < 99, and Firefox ESR < 91.8. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-13/ - https://ww
Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-13/ - https://www.mozilla.org/security/advisories/mfsa2022-14/ - https://www.mozilla.org/security/advisories/mfsa2022-15/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1756957
CVE ID: CVE-2022-28286 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-16T14:02:56.641Z Vendors: Mozilla Products: Thunderbird, Firefox, Firefox ESR Problem Types: iframe contents could be rendered outside the border Description: Due to a layout change, iframe contents could have been rendered outside of its border. This could have led to user confusion or spoofing attacks. This vulnerability affects Thunderbird < 91.8, Firefox < 99, and Firefox ESR < 91.8. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-13/ - https://www.mozilla.org/security/advisories/mfsa2022-14/ - htt
ttps://www.mozilla.org/security/advisories/mfsa2022-13/ - https://www.mozilla.org/security/advisories/mfsa2022-14/ - https://www.mozilla.org/security/advisories/mfsa2022-15/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1735265
CVE ID: CVE-2022-28287 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-16T14:01:57.908Z Vendors: Mozilla Products: Firefox Problem Types: Text Selection could crash Firefox Description: In unusual circumstances, selecting text could cause text selection caching to behave incorrectly, leading to a crash. This vulnerability affects Firefox < 99. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-13/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1741515
CVE ID: CVE-2022-28288 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-16T14:00:35.868Z Vendors: Mozilla Products: Firefox Problem Types: Memory safety bugs fixed in Firefox 99 Description: Mozilla developers and community members Randell Jesup, Sebastian Hengst, and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 98. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 99. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisor
Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-13/ - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1746415%2C1746495%2C1746500%2C1747282%2C1748759%2C1749056%2C1749786%2C1751679%2C1752120%2C1756010%2C1756017%2C1757213%2C1757258%2C1757427
CVE ID: CVE-2022-28289 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-16T13:59:35.614Z Vendors: Mozilla Products: Thunderbird, Firefox, Firefox ESR Problem Types: Memory safety bugs fixed in Thunderbird 91.8 Description: Mozilla developers and community members Nika Layzell, Andrew McCreight, Gabriele Svelto, and the Mozilla Fuzzing Team reported memory safety bugs present in Thunderbird 91.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird < 91.8, Firefox < 99, and Firefox ESR < 91.8. Additional Analyst Notes: - CVE
e. This vulnerability affects Thunderbird < 91.8, Firefox < 99, and Firefox ESR < 91.8. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-13/ - https://www.mozilla.org/security/advisories/mfsa2022-14/ - https://www.mozilla.org/security/advisories/mfsa2022-15/ - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1663508%2C1744525%2C1753508%2C1757476%2C1757805%2C1758549%2C1758776
CVE ID: CVE-2022-28290 State: PUBLISHED Published: 2022-04-25T16:31:01 Last Updated: 2024-08-03T05:48:37.947Z Vendors: n/a Products: WordPress Country Selector Plugin Problem Types: CWE-79 Description: Reflective Cross-Site Scripting vulnerability in WordPress Country Selector Plugin Version 1.6.5. The XSS payload executes whenever the user tries to access the country selector page with the specified payload as a part of the HTTP request Additional Analyst Notes: - CVE Program Container: References: - https://cybersecurityworks.com/zerodays/cve-2022-28290-reflected-cross-site-scripting-in-welaunch.html
CVE ID: CVE-2022-28291 State: PUBLISHED Published: 2022-10-17T00:00:00.000Z Last Updated: 2025-05-13T19:57:34.629Z Vendors: n/a Products: Nessus Professional Problem Types: CWE-522 Description: Insufficiently Protected Credentials: An authenticated user with debug privileges can retrieve stored Nessus policy credentials from the “nessusd” process in cleartext via process dumping. The affected products are all versions of Nessus Essentials and Professional. The vulnerability allows an attacker to access credentials stored in Nessus scanners, potentially compromising its customers’ network of assets. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http
omers’ network of assets. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cybersecurityworks.com/blog/zero-days/csw-expert-discovers-a-zero-day-vulnerability-in-tenables-nessus-scanner.html
CVE ID: CVE-2022-28300 State: PUBLISHED Published: 2023-03-29T00:00:00.000Z Last Updated: 2025-02-18T16:59:21.075Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Bentley Products: MicroStation Problem Types: CWE-787 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation 10.16.02.034 CONNECT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JP2 images. Crafted data in a JP2 file can trigger a write past the end of an allocated buffer. An attacker can levera
f JP2 images. Crafted data in a JP2 file can trigger a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-16202. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-22-592/ - https://www.bentley.com/en/common-vulnerability-exposure/be-2022-0007
CVE ID: CVE-2022-28301 State: PUBLISHED Published: 2023-03-29T00:00:00.000Z Last Updated: 2025-02-18T17:18:00.984Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Bentley Products: MicroStation CONNECT Problem Types: CWE-787 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of IFC files. Crafted data in an IFC file can trigger a write past the end of an allocated buffer. An attacker can
rsing of IFC files. Crafted data in an IFC file can trigger a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-16392. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.bentley.com/en/common-vulnerability-exposure/be-2022-0006 - https://www.zerodayinitiative.com/advisories/ZDI-22-612/
CVE ID: CVE-2022-28302 State: PUBLISHED Published: 2023-03-29T00:00:00.000Z Last Updated: 2025-02-18T17:18:39.747Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Bentley Products: MicroStation CONNECT Problem Types: CWE-125 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of IFC files. Crafted data in an IFC file can trigger a read past the end of an allocated buffer. An attacker can
rsing of IFC files. Crafted data in an IFC file can trigger a read past the end of an allocated buffer. An attacker can leverage this to execute code in the context of the current process. Was ZDI-CAN-16446. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.bentley.com/en/common-vulnerability-exposure/be-2022-0006 - https://www.zerodayinitiative.com/advisories/ZDI-22-614/
CVE ID: CVE-2022-28303 State: PUBLISHED Published: 2023-03-29T00:00:00.000Z Last Updated: 2025-02-18T17:19:08.352Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Bentley Products: View Problem Types: CWE-416 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.16.02.022. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SKP files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker
esults from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-16280. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-22-596/ - https://www.bentley.com/en/common-vulnerability-exposure/be-2022-0009
CVE ID: CVE-2022-28304 State: PUBLISHED Published: 2023-03-29T00:00:00.000Z Last Updated: 2025-02-18T17:21:05.212Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Bentley Products: MicroStation CONNECT Problem Types: CWE-121 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.034. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of OBJ files. The issue results from the lack of proper validation of the length of user-supplied data prior to c
arsing of OBJ files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-16171. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-22-594/ - https://www.bentley.com/en/common-vulnerability-exposure/be-2022-0008
CVE ID: CVE-2022-28305 State: PUBLISHED Published: 2023-03-29T00:00:00.000Z Last Updated: 2025-02-18T17:22:30.402Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Bentley Products: MicroStation CONNECT Problem Types: CWE-121 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.034. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of OBJ files. The issue results from the lack of proper validation of the length of user-supplied data prior to c
arsing of OBJ files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-16172. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.bentley.com/en/common-vulnerability-exposure/be-2022-0008 - https://www.zerodayinitiative.com/advisories/ZDI-22-593/
CVE ID: CVE-2022-28306 State: PUBLISHED Published: 2023-03-29T00:00:00.000Z Last Updated: 2025-02-18T17:24:05.217Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Bentley Products: MicroStation CONNECT Problem Types: CWE-121 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.034. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of OBJ files. The issue results from the lack of proper validation of the length of user-supplied data prior to c
arsing of OBJ files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this to execute code in the context of the current process. Was ZDI-CAN-16174. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.bentley.com/en/common-vulnerability-exposure/be-2022-0008 - https://www.zerodayinitiative.com/advisories/ZDI-22-595/
CVE ID: CVE-2022-28307 State: PUBLISHED Published: 2023-03-29T00:00:00.000Z Last Updated: 2025-02-18T17:25:55.487Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Bentley Products: View Problem Types: CWE-125 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.16.02.022. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF files. Crafted data in a DXF file can trigger a read past the end of an allocated buffer. An attacker can leverage this vulnerability to e
a in a DXF file can trigger a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-16306. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-22-598/ - https://www.bentley.com/en/common-vulnerability-exposure/be-2022-0005
CVE ID: CVE-2022-28308 State: PUBLISHED Published: 2023-03-29T00:00:00.000Z Last Updated: 2025-02-18T17:35:42.600Z Severity: LOW (CVSS 3.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Bentley Products: View Problem Types: CWE-125 Description: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.16.02.022. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of 3DS files. Crafted data in a 3DS file can trigger a read past the end of an allocated buffer. An attacker can leverage this in conjunct
ted data in a 3DS file can trigger a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-16307. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-22-599/ - https://www.bentley.com/en/common-vulnerability-exposure/be-2022-0003
CVE ID: CVE-2022-28309 State: PUBLISHED Published: 2023-03-29T00:00:00.000Z Last Updated: 2025-02-18T17:28:26.120Z Severity: LOW (CVSS 3.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Bentley Products: View Problem Types: CWE-125 Description: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.16.02.022. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of 3DS files. Crafted data in a 3DS file can trigger a read past the end of an allocated buffer. An attacker can leverage this in conjunct
ted data in a 3DS file can trigger a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-16308. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.bentley.com/en/common-vulnerability-exposure/be-2022-0003 - https://www.zerodayinitiative.com/advisories/ZDI-22-600/
CVE ID: CVE-2022-28310 State: PUBLISHED Published: 2023-03-29T00:00:00.000Z Last Updated: 2025-02-18T17:29:54.315Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Bentley Products: MicroStation CONNECT Problem Types: CWE-416 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.034. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SKP files. The issue results from the lack of validating the existence of an object prior to performing operat
arsing of SKP files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-16339. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.bentley.com/en/common-vulnerability-exposure/be-2022-0009 - https://www.zerodayinitiative.com/advisories/ZDI-22-590/
CVE ID: CVE-2022-28311 State: PUBLISHED Published: 2023-03-29T00:00:00.000Z Last Updated: 2025-02-18T17:31:15.673Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Bentley Products: MicroStation CONNECT Problem Types: CWE-125 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.034. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF files. Crafted data in a DXF file can trigger a read past the end of an allocated buffer. An attacker can
arsing of DXF files. Crafted data in a DXF file can trigger a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-16341. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.bentley.com/en/common-vulnerability-exposure/be-2022-0005 - https://www.zerodayinitiative.com/advisories/ZDI-22-601/
CVE ID: CVE-2022-28312 State: PUBLISHED Published: 2023-03-29T00:00:00.000Z Last Updated: 2025-02-18T17:31:29.991Z Severity: LOW (CVSS 3.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Bentley Products: MicroStation CONNECT Problem Types: CWE-125 Description: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.02.034. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of 3DS files. Crafted data in a 3DS file can trigger a read past the end of an allocated buffer. An attack
n the parsing of 3DS files. Crafted data in a 3DS file can trigger a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-16342. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.bentley.com/en/common-vulnerability-exposure/be-2022-0003 - https://www.zerodayinitiative.com/advisories/ZDI-22-602/
CVE ID: CVE-2022-28313 State: PUBLISHED Published: 2023-03-29T00:00:00.000Z Last Updated: 2025-02-18T17:32:01.350Z Severity: LOW (CVSS 3.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Bentley Products: MicroStation CONNECT Problem Types: CWE-125 Description: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.02.034. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of 3DS files. Crafted data in a 3DS file can trigger a read past the end of an allocated buffer. An attack
n the parsing of 3DS files. Crafted data in a 3DS file can trigger a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-16343. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.bentley.com/en/common-vulnerability-exposure/be-2022-0003 - https://www.zerodayinitiative.com/advisories/ZDI-22-603/
CVE ID: CVE-2022-28314 State: PUBLISHED Published: 2023-03-29T00:00:00.000Z Last Updated: 2025-02-18T17:33:37.482Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Bentley Products: MicroStation CONNECT Problem Types: CWE-787 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of IFC files. Crafted data in an IFC file can trigger a write past the end of an allocated buffer. An attacker can
rsing of IFC files. Crafted data in an IFC file can trigger a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-16332. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.bentley.com/en/common-vulnerability-exposure/be-2022-0006 - https://www.zerodayinitiative.com/advisories/ZDI-22-605/
CVE ID: CVE-2022-28315 State: PUBLISHED Published: 2023-03-29T00:00:00.000Z Last Updated: 2025-02-18T17:34:28.679Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Bentley Products: MicroStation CONNECT Problem Types: CWE-121 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of IFC files. The issue results from the lack of proper validation of the length of user-supplied data prior to co