Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
arsing of PDF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-15393. Additional Analyst Notes: - CVE Program Container: References: - https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0003 - https://www.zerodayinitiative.com/advisories/ZDI-22-186/
CVE ID: CVE-2021-46600 State: PUBLISHED Published: 2022-02-18T19:45:18 Last Updated: 2024-08-04T05:10:35.334Z Severity: LOW (CVSS 3.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Bentley Products: MicroStation CONNECT Problem Types: CWE-125 Description: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JT files. The issue results from the lack of proper validation of user-supplied data, which can result in a re
arsing of JT files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-15394. Additional Analyst Notes: - CVE Program Container: References: - https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0005 - https://www.zerodayinitiative.com/advisories/ZDI-22-187/
CVE ID: CVE-2021-46601 State: PUBLISHED Published: 2022-02-18T19:45:19 Last Updated: 2024-08-04T05:10:35.328Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Bentley Products: MicroStation CONNECT Problem Types: CWE-416 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JT files. The issue results from the lack of validating the existence of an object prior to performing operations on
of JT files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15395. Additional Analyst Notes: - CVE Program Container: References: - https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0005 - https://www.zerodayinitiative.com/advisories/ZDI-22-188/
CVE ID: CVE-2021-46602 State: PUBLISHED Published: 2022-02-18T19:45:21 Last Updated: 2024-08-04T05:10:35.355Z Severity: LOW (CVSS 3.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Bentley Products: MicroStation CONNECT Problem Types: CWE-125 Description: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of 3DS files. The issue results from the lack of proper validation of user-supplied data, which can result in a r
arsing of 3DS files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-15396. Additional Analyst Notes: - CVE Program Container: References: - https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0004 - https://www.zerodayinitiative.com/advisories/ZDI-22-189/
CVE ID: CVE-2021-46603 State: PUBLISHED Published: 2022-02-18T19:45:22 Last Updated: 2024-08-04T05:10:35.271Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Bentley Products: MicroStation CONNECT Problem Types: CWE-122 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of J2K images. The issue results from the lack of proper validation of the length of user-supplied data prior to copying
of J2K images. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15397. Additional Analyst Notes: - CVE Program Container: References: - https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0006 - https://www.zerodayinitiative.com/advisories/ZDI-22-190/
CVE ID: CVE-2021-46604 State: PUBLISHED Published: 2022-02-18T19:45:24 Last Updated: 2024-08-04T05:10:35.265Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Bentley Products: MicroStation CONNECT Problem Types: CWE-787 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PNG images. Crafted data in a PNG image can trigger a write past the end of an allocated buffer. An attacker can leve
of PNG images. Crafted data in a PNG image can trigger a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15398. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-22-191/ - https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0013
CVE ID: CVE-2021-46605 State: PUBLISHED Published: 2022-02-18T19:45:25 Last Updated: 2024-08-04T05:10:35.361Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Bentley Products: MicroStation CONNECT Problem Types: CWE-122 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of BMP images. The issue results from the lack of proper validation of the length of user-supplied data prior to copying
of BMP images. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15399. Additional Analyst Notes: - CVE Program Container: References: - https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0002 - https://www.zerodayinitiative.com/advisories/ZDI-22-192/
CVE ID: CVE-2021-46606 State: PUBLISHED Published: 2022-02-18T19:45:27 Last Updated: 2024-08-04T05:10:35.322Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Bentley Products: MicroStation CONNECT Problem Types: CWE-122 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of BMP images. The issue results from the lack of proper validation of the length of user-supplied data prior to copying
of BMP images. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15400. Additional Analyst Notes: - CVE Program Container: References: - https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0002 - https://www.zerodayinitiative.com/advisories/ZDI-22-193/
CVE ID: CVE-2021-46607 State: PUBLISHED Published: 2022-02-18T19:45:28 Last Updated: 2024-08-04T05:10:35.338Z Severity: LOW (CVSS 3.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Bentley Products: MicroStation CONNECT Problem Types: CWE-125 Description: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of 3DS files. The issue results from the lack of proper validation of user-supplied data, which can result in a r
arsing of 3DS files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-15401. Additional Analyst Notes: - CVE Program Container: References: - https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0004 - https://www.zerodayinitiative.com/advisories/ZDI-22-194/
CVE ID: CVE-2021-46608 State: PUBLISHED Published: 2022-02-18T19:45:30 Last Updated: 2024-08-04T05:10:35.366Z Severity: LOW (CVSS 3.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Bentley Products: MicroStation CONNECT Problem Types: CWE-125 Description: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a r
arsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-15402. Additional Analyst Notes: - CVE Program Container: References: - https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0010 - https://www.zerodayinitiative.com/advisories/ZDI-22-195/
CVE ID: CVE-2021-46609 State: PUBLISHED Published: 2022-02-18T19:45:31 Last Updated: 2024-08-04T05:10:35.279Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Bentley Products: MicroStation CONNECT Problem Types: CWE-416 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF files. The issue results from the lack of validating the existence of an object prior to performing operations on
of PDF files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15403. Additional Analyst Notes: - CVE Program Container: References: - https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0003 - https://www.zerodayinitiative.com/advisories/ZDI-22-196/
CVE ID: CVE-2021-46610 State: PUBLISHED Published: 2022-02-18T19:45:32 Last Updated: 2024-08-04T05:10:35.329Z Severity: LOW (CVSS 3.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Bentley Products: MicroStation CONNECT Problem Types: CWE-125 Description: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JT files. The issue results from the lack of proper validation of user-supplied data, which can result in a re
arsing of JT files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-15404. Additional Analyst Notes: - CVE Program Container: References: - https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0005 - https://www.zerodayinitiative.com/advisories/ZDI-22-197/
CVE ID: CVE-2021-46611 State: PUBLISHED Published: 2022-02-18T19:45:34 Last Updated: 2024-08-04T05:10:35.337Z Severity: LOW (CVSS 3.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Bentley Products: MicroStation CONNECT Problem Types: CWE-125 Description: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JP2 images. The issue results from the lack of proper validation of user-supplied data, which can result in a
arsing of JP2 images. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-15405. Additional Analyst Notes: - CVE Program Container: References: - https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0008 - https://www.zerodayinitiative.com/advisories/ZDI-22-198/
CVE ID: CVE-2021-46612 State: PUBLISHED Published: 2022-02-18T19:45:35 Last Updated: 2024-08-04T05:10:35.332Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Bentley Products: MicroStation CONNECT Problem Types: CWE-125 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF files. Crafted data in a PDF file can trigger a read past the end of an allocated buffer. An attacker can leverag
of PDF files. Crafted data in a PDF file can trigger a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15406. Additional Analyst Notes: - CVE Program Container: References: - https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0003 - https://www.zerodayinitiative.com/advisories/ZDI-22-199/
CVE ID: CVE-2021-46613 State: PUBLISHED Published: 2022-02-18T19:45:37 Last Updated: 2024-08-04T05:10:35.282Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Bentley Products: MicroStation CONNECT Problem Types: CWE-416 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF files. The issue results from the lack of validating the existence of an object prior to performing operations on
of DXF files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15407. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-22-200/ - https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0011
CVE ID: CVE-2021-46614 State: PUBLISHED Published: 2022-02-18T19:45:38 Last Updated: 2024-08-04T05:10:35.370Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Bentley Products: MicroStation CONNECT Problem Types: CWE-125 Description: Bentley MicroStation CONNECT 10.16.0.80 J2K File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of J2K images. Cra
get must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of J2K images. Crafted data in a J2K image can trigger a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15408. Additional Analyst Notes: - CVE Program Container: References: - https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0006 - https://www.zerodayinitiative.com/advisories/ZDI-22-201/
CVE ID: CVE-2021-46615 State: PUBLISHED Published: 2022-02-18T19:45:40 Last Updated: 2024-08-04T05:10:35.349Z Severity: LOW (CVSS 3.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Bentley Products: MicroStation CONNECT Problem Types: CWE-125 Description: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of BMP images. The issue results from the lack of proper validation of user-supplied data, which can result in a
arsing of BMP images. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-15409. Additional Analyst Notes: - CVE Program Container: References: - https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0002 - https://www.zerodayinitiative.com/advisories/ZDI-22-202/
CVE ID: CVE-2021-46616 State: PUBLISHED Published: 2022-02-18T19:45:41 Last Updated: 2024-08-04T05:10:35.327Z Severity: LOW (CVSS 3.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Bentley Products: MicroStation CONNECT Problem Types: CWE-125 Description: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of BMP images. The issue results from the lack of proper validation of user-supplied data, which can result in a
arsing of BMP images. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-15410. Additional Analyst Notes: - CVE Program Container: References: - https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0002 - https://www.zerodayinitiative.com/advisories/ZDI-22-203/
CVE ID: CVE-2021-46617 State: PUBLISHED Published: 2022-02-18T19:45:42 Last Updated: 2024-08-04T05:10:35.333Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Bentley Products: MicroStation CONNECT Problem Types: CWE-457 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of TIF images. The issue results from the lack of proper initialization of memory prior to accessing it. An attacker can
of TIF images. The issue results from the lack of proper initialization of memory prior to accessing it. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15411. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-22-204/ - https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0015
CVE ID: CVE-2021-46618 State: PUBLISHED Published: 2022-02-18T19:45:44 Last Updated: 2024-08-04T05:10:35.374Z Severity: LOW (CVSS 3.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Bentley Products: MicroStation CONNECT Problem Types: CWE-125 Description: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PNG images. The issue results from the lack of proper validation of user-supplied data, which can result in a
arsing of PNG images. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-15412. Additional Analyst Notes: - CVE Program Container: References: - https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0013 - https://www.zerodayinitiative.com/advisories/ZDI-22-205/
CVE ID: CVE-2021-46619 State: PUBLISHED Published: 2022-02-18T19:45:45 Last Updated: 2024-08-04T05:10:35.400Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Bentley Products: MicroStation CONNECT Problem Types: CWE-125 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF files. Crafted data in a PDF file can trigger a read past the end of an allocated buffer. An attacker can leverag
of PDF files. Crafted data in a PDF file can trigger a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15413. Additional Analyst Notes: - CVE Program Container: References: - https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0003 - https://www.zerodayinitiative.com/advisories/ZDI-22-206/