Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
of JT files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15372. Additional Analyst Notes: - CVE Program Container: References: - https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0005 - https://www.zerodayinitiative.com/advisories/ZDI-22-165/
CVE ID: CVE-2021-46579 State: PUBLISHED Published: 2022-02-18T19:44:45 Last Updated: 2024-08-04T05:10:35.362Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Bentley Products: MicroStation CONNECT Problem Types: CWE-416 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JT files. The issue results from the lack of validating the existence of an object prior to performing operations on
of JT files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15373. Additional Analyst Notes: - CVE Program Container: References: - https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0005 - https://www.zerodayinitiative.com/advisories/ZDI-22-166/
CVE ID: CVE-2021-46580 State: PUBLISHED Published: 2022-02-18T19:44:46 Last Updated: 2024-08-04T05:10:35.327Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Bentley Products: MicroStation CONNECT Problem Types: CWE-416 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JT files. The issue results from the lack of validating the existence of an object prior to performing operations on
of JT files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15374. Additional Analyst Notes: - CVE Program Container: References: - https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0005 - https://www.zerodayinitiative.com/advisories/ZDI-22-167/
CVE ID: CVE-2021-46581 State: PUBLISHED Published: 2022-02-18T19:44:48 Last Updated: 2024-08-04T05:10:35.246Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Bentley Products: MicroStation CONNECT Problem Types: CWE-787 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JT files. Crafted data in a JT file can trigger a write past the end of an allocated buffer. An attacker can leverage
of JT files. Crafted data in a JT file can trigger a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15375. Additional Analyst Notes: - CVE Program Container: References: - https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0005 - https://www.zerodayinitiative.com/advisories/ZDI-22-168/
CVE ID: CVE-2021-46582 State: PUBLISHED Published: 2022-02-18T19:44:49 Last Updated: 2024-08-04T05:10:35.244Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Bentley Products: MicroStation CONNECT Problem Types: CWE-416 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JP2 images. The issue results from the lack of validating the existence of an object prior to performing operations o
of JP2 images. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15376. Additional Analyst Notes: - CVE Program Container: References: - https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0008 - https://www.zerodayinitiative.com/advisories/ZDI-22-169/
CVE ID: CVE-2021-46583 State: PUBLISHED Published: 2022-02-18T19:44:51 Last Updated: 2024-08-04T05:10:35.276Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Bentley Products: MicroStation CONNECT Problem Types: CWE-787 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of J2K images. Crafted data in a J2K image can trigger a write past the end of an allocated buffer. An attacker can leve
of J2K images. Crafted data in a J2K image can trigger a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15377. Additional Analyst Notes: - CVE Program Container: References: - https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0006 - https://www.zerodayinitiative.com/advisories/ZDI-22-170/
CVE ID: CVE-2021-46584 State: PUBLISHED Published: 2022-02-18T19:44:52 Last Updated: 2024-08-04T05:10:35.322Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Bentley Products: MicroStation CONNECT Problem Types: CWE-787 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of J2K images. Crafted data in a J2K image can trigger a write past the end of an allocated buffer. An attacker can leve
of J2K images. Crafted data in a J2K image can trigger a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15378. Additional Analyst Notes: - CVE Program Container: References: - https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0006 - https://www.zerodayinitiative.com/advisories/ZDI-22-171/
CVE ID: CVE-2021-46585 State: PUBLISHED Published: 2022-02-18T19:44:54 Last Updated: 2024-08-04T05:10:35.320Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Bentley Products: MicroStation CONNECT Problem Types: CWE-121 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JT files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying i
of JT files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15379. Additional Analyst Notes: - CVE Program Container: References: - https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0005 - https://www.zerodayinitiative.com/advisories/ZDI-22-172/
CVE ID: CVE-2021-46586 State: PUBLISHED Published: 2022-02-18T19:44:56 Last Updated: 2024-08-04T05:10:35.258Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Bentley Products: MicroStation CONNECT Problem Types: CWE-787 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of 3DS files. Crafted data in a 3DS file can trigger a write past the end of an allocated buffer. An attacker can levera
of 3DS files. Crafted data in a 3DS file can trigger a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15380. Additional Analyst Notes: - CVE Program Container: References: - https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0004 - https://www.zerodayinitiative.com/advisories/ZDI-22-173/
CVE ID: CVE-2021-46587 State: PUBLISHED Published: 2022-02-18T19:44:57 Last Updated: 2024-08-04T05:10:35.259Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Bentley Products: MicroStation CONNECT Problem Types: CWE-416 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of 3DS files. The issue results from the lack of validating the existence of an object prior to performing operations on
of 3DS files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15381. Additional Analyst Notes: - CVE Program Container: References: - https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0004 - https://www.zerodayinitiative.com/advisories/ZDI-22-174/
CVE ID: CVE-2021-46588 State: PUBLISHED Published: 2022-02-18T19:44:59 Last Updated: 2024-08-04T05:10:35.247Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Bentley Products: MicroStation CONNECT Problem Types: CWE-416 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JT files. The issue results from the lack of validating the existence of an object prior to performing operations on
of JT files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15382. Additional Analyst Notes: - CVE Program Container: References: - https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0005 - https://www.zerodayinitiative.com/advisories/ZDI-22-175/
CVE ID: CVE-2021-46589 State: PUBLISHED Published: 2022-02-18T19:45:00 Last Updated: 2024-08-04T05:10:35.243Z Severity: LOW (CVSS 3.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Bentley Products: MicroStation CONNECT Problem Types: CWE-125 Description: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DGN files. The issue results from the lack of proper validation of user-supplied data, which can result in a r
arsing of DGN files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-15383. Additional Analyst Notes: - CVE Program Container: References: - https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0009 - https://www.zerodayinitiative.com/advisories/ZDI-22-176/
CVE ID: CVE-2021-46590 State: PUBLISHED Published: 2022-02-18T19:45:03 Last Updated: 2024-08-04T05:10:35.331Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Bentley Products: MicroStation CONNECT Problem Types: CWE-125 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JT files. Crafted data in a JT file can trigger a read past the end of an allocated buffer. An attacker can leverage
of JT files. Crafted data in a JT file can trigger a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15384. Additional Analyst Notes: - CVE Program Container: References: - https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0005 - https://www.zerodayinitiative.com/advisories/ZDI-22-177/
CVE ID: CVE-2021-46591 State: PUBLISHED Published: 2022-02-18T19:45:04 Last Updated: 2024-08-04T05:10:35.321Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Bentley Products: MicroStation CONNECT Problem Types: CWE-125 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JT files. Crafted data in a JT file can trigger a read past the end of an allocated buffer. An attacker can leverage
of JT files. Crafted data in a JT file can trigger a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15385. Additional Analyst Notes: - CVE Program Container: References: - https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0005 - https://www.zerodayinitiative.com/advisories/ZDI-22-178/
CVE ID: CVE-2021-46592 State: PUBLISHED Published: 2022-02-18T19:45:06 Last Updated: 2024-08-04T05:10:35.323Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Bentley Products: MicroStation CONNECT Problem Types: CWE-416 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of 3DS files. The issue results from the lack of validating the existence of an object prior to performing operations on
of 3DS files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15386. Additional Analyst Notes: - CVE Program Container: References: - https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0004 - https://www.zerodayinitiative.com/advisories/ZDI-22-179/
CVE ID: CVE-2021-46593 State: PUBLISHED Published: 2022-02-18T19:45:08 Last Updated: 2024-08-04T05:10:35.250Z Severity: LOW (CVSS 3.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Bentley Products: MicroStation CONNECT Problem Types: CWE-125 Description: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a r
arsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-15387. Additional Analyst Notes: - CVE Program Container: References: - https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0010 - https://www.zerodayinitiative.com/advisories/ZDI-22-180/
CVE ID: CVE-2021-46594 State: PUBLISHED Published: 2022-02-18T19:45:09 Last Updated: 2024-08-04T05:10:35.353Z Severity: LOW (CVSS 3.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Bentley Products: MicroStation CONNECT Problem Types: CWE-125 Description: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a r
arsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-15388. Additional Analyst Notes: - CVE Program Container: References: - https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0010 - https://www.zerodayinitiative.com/advisories/ZDI-22-181/
CVE ID: CVE-2021-46595 State: PUBLISHED Published: 2022-02-18T19:45:11 Last Updated: 2024-08-04T05:10:35.313Z Severity: LOW (CVSS 3.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Bentley Products: MicroStation CONNECT Problem Types: CWE-125 Description: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of 3DS files. The issue results from the lack of proper validation of user-supplied data, which can result in a r
arsing of 3DS files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-15389. Additional Analyst Notes: - CVE Program Container: References: - https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0004 - https://www.zerodayinitiative.com/advisories/ZDI-22-182/
CVE ID: CVE-2021-46596 State: PUBLISHED Published: 2022-02-18T19:45:12 Last Updated: 2024-08-04T05:10:35.257Z Severity: LOW (CVSS 3.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Bentley Products: MicroStation CONNECT Problem Types: CWE-125 Description: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of OBJ files. The issue results from the lack of proper validation of user-supplied data, which can result in a r
arsing of OBJ files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-15390. Additional Analyst Notes: - CVE Program Container: References: - https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0007 - https://www.zerodayinitiative.com/advisories/ZDI-22-183/
CVE ID: CVE-2021-46597 State: PUBLISHED Published: 2022-02-18T19:45:14 Last Updated: 2024-08-04T05:10:35.324Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Bentley Products: MicroStation CONNECT Problem Types: CWE-416 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JT files. The issue results from the lack of validating the existence of an object prior to performing operations on
of JT files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15391. Additional Analyst Notes: - CVE Program Container: References: - https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0005 - https://www.zerodayinitiative.com/advisories/ZDI-22-184/
CVE ID: CVE-2021-46598 State: PUBLISHED Published: 2022-02-18T19:45:15 Last Updated: 2024-08-04T05:10:35.248Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Bentley Products: MicroStation CONNECT Problem Types: CWE-119 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JT files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory co
of JT files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15392. Additional Analyst Notes: - CVE Program Container: References: - https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0005 - https://www.zerodayinitiative.com/advisories/ZDI-22-185/
CVE ID: CVE-2021-46599 State: PUBLISHED Published: 2022-02-18T19:45:17 Last Updated: 2024-08-04T05:10:35.339Z Severity: LOW (CVSS 3.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Bentley Products: MicroStation CONNECT Problem Types: CWE-125 Description: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF files. The issue results from the lack of proper validation of user-supplied data, which can result in a r