deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-46586
Published: 2022-02-18
Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of 3DS files. Crafted data in a 3DS file can trigger a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15380.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0004; https://www.zerodayinitiative.com/advisories/ZDI-22-173/; https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0004
CVE: CVE-2021-46587
Published: 2022-02-18
Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of 3DS files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15381.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0004; https://www.zerodayinitiative.com/advisories/ZDI-22-174/; https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0004
CVE: CVE-2021-46588
Published: 2022-02-18
Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JT files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15382.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0005; https://www.zerodayinitiative.com/advisories/ZDI-22-175/; https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0005
CVE: CVE-2021-46589
Published: 2022-02-18
Description: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DGN files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-15383.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0009; https://www.zerodayinitiative.com/advisories/ZDI-22-176/; https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0009
CVE: CVE-2021-46590
Published: 2022-02-18
Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JT files. Crafted data in a JT file can trigger a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15384.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0005; https://www.zerodayinitiative.com/advisories/ZDI-22-177/; https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0005
CVE: CVE-2021-46591
Published: 2022-02-18
Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JT files. Crafted data in a JT file can trigger a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15385.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-125
References: https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0005; https://www.zerodayinitiative.com/advisories/ZDI-22-178/; https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0005
CVE: CVE-2021-46592
Published: 2022-02-18
Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of 3DS files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15386.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0004; https://www.zerodayinitiative.com/advisories/ZDI-22-179/; https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0004
CVE: CVE-2021-46593
Published: 2022-02-18
Description: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-15387.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0010; https://www.zerodayinitiative.com/advisories/ZDI-22-180/; https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0010
CVE: CVE-2021-46594
Published: 2022-02-18
Description: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-15388.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0010; https://www.zerodayinitiative.com/advisories/ZDI-22-181/; https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0010
CVE: CVE-2021-46595
Published: 2022-02-18
Description: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of 3DS files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-15389.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0004; https://www.zerodayinitiative.com/advisories/ZDI-22-182/; https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0004
CVE: CVE-2021-46596
Published: 2022-02-18
Description: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of OBJ files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-15390.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0007; https://www.zerodayinitiative.com/advisories/ZDI-22-183/; https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0007
CVE: CVE-2021-46597
Published: 2022-02-18
Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JT files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15391.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0005; https://www.zerodayinitiative.com/advisories/ZDI-22-184/; https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0005
CVE: CVE-2021-46598
Published: 2022-02-18
Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JT files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15392.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-787
References: https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0005; https://www.zerodayinitiative.com/advisories/ZDI-22-185/; https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0005
CVE: CVE-2021-46599
Published: 2022-02-18
Description: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-15393.
CVSS Score: 3.3 (LOW)
CWE: CWE-125
References: https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0003; https://www.zerodayinitiative.com/advisories/ZDI-22-186/; https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0003
CVE: CVE-2021-46600
Published: 2022-02-18
Description: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JT files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-15394.
CVSS Score: 3.3 (LOW)
CWE: CWE-125
References: https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0005; https://www.zerodayinitiative.com/advisories/ZDI-22-187/; https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0005
CVE: CVE-2021-46601
Published: 2022-02-18
Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JT files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15395.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0005; https://www.zerodayinitiative.com/advisories/ZDI-22-188/; https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0005
CVE: CVE-2021-46602
Published: 2022-02-18
Description: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of 3DS files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-15396.
CVSS Score: 3.3 (LOW)
CWE: CWE-125
References: https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0004; https://www.zerodayinitiative.com/advisories/ZDI-22-189/; https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0004
CVE: CVE-2021-46603
Published: 2022-02-18
Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of J2K images. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15397.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0006; https://www.zerodayinitiative.com/advisories/ZDI-22-190/; https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0006
CVE: CVE-2021-46604
Published: 2022-02-18
Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PNG images. Crafted data in a PNG image can trigger a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15398.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0013; https://www.zerodayinitiative.com/advisories/ZDI-22-191/; https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0013
CVE: CVE-2021-46605
Published: 2022-02-18
Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of BMP images. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15399.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0002; https://www.zerodayinitiative.com/advisories/ZDI-22-192/; https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0002
CVE: CVE-2021-46606
Published: 2022-02-18
Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of BMP images. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15400.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0002; https://www.zerodayinitiative.com/advisories/ZDI-22-193/; https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0002
CVE: CVE-2021-46607
Published: 2022-02-18
Description: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of 3DS files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-15401.
CVSS Score: 3.3 (LOW)
CWE: CWE-125
References: https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0004; https://www.zerodayinitiative.com/advisories/ZDI-22-194/; https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0004
CVE: CVE-2021-46608
Published: 2022-02-18
Description: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-15402.
CVSS Score: 3.3 (LOW)
CWE: CWE-125
References: https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0010; https://www.zerodayinitiative.com/advisories/ZDI-22-195/; https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0010
CVE: CVE-2021-46609
Published: 2022-02-18
Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15403.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0003; https://www.zerodayinitiative.com/advisories/ZDI-22-196/; https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0003
CVE: CVE-2021-46610
Published: 2022-02-18
Description: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JT files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-15404.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0005; https://www.zerodayinitiative.com/advisories/ZDI-22-197/; https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0005
CVE: CVE-2021-46611
Published: 2022-02-18
Description: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JP2 images. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-15405.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0008; https://www.zerodayinitiative.com/advisories/ZDI-22-198/; https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0008
CVE: CVE-2021-46612
Published: 2022-02-18
Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF files. Crafted data in a PDF file can trigger a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15406.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-125
References: https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0003; https://www.zerodayinitiative.com/advisories/ZDI-22-199/; https://www.bentley.com/en/common-vulnerability-exposure/BE-2021-0003