Digital Project
Digital Project is a computer-aided design (CAD) software application based on CATIA V5 and developed by Gehry Technologies, a technology company owned by the architect Frank Gehry. Among the changes made by Gehry Technologies to CATIA is a new visual interface suitable for architecture work. With the release of version R5 Digital Project is compatible with CATIA V5R22.
Products
17- 18 CVEs
- 9 CVEs
- 7 CVEs
- 6 CVEs
- 1 CVE
- 1 CVE
- 1 CVE
- 1 CVE
- 1 CVE
- 1 CVE
- 1 CVE
- 1 CVE
- 1 CVE
- 1 CVE
- 1 CVE
- 0 CVEs
- 0 CVEs
Recent CVEs
44| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2022-46732 | Cri | 0.64 | 9.8 | 0.01 | Jan 18, 2023 | Even if the authentication fails for local service authentication, the requested command could still execute regardless of authentication status. | ||
| CVE-2020-36569 | Cri | 0.52 | 9.1 | 0.01 | Dec 27, 2022 | Authentication is globally bypassed in github.com/nanobox-io/golang-nanoauth between v0.0.0-20160722212129-ac0cc4484ad4 and v0.0.0-20200131131040-063a3fb69896 if ListenAndServe is called with an empty token. | ||
| CVE-2022-46660 | Hig | 0.49 | 7.5 | 0.01 | Jan 18, 2023 | An unauthorized user could alter or write files with full control over the path and content of the file. | ||
| CVE-2022-46331 | Hig | 0.49 | 7.5 | 0.01 | Jan 18, 2023 | An unauthorized user could possibly delete any file on the system. | ||
| CVE-2022-43494 | Hig | 0.49 | 7.5 | 0.01 | Jan 18, 2023 | An unauthorized user could be able to read any file on the system, potentially exposing sensitive information. | ||
| CVE-2022-38469 | Hig | 0.49 | 7.5 | 0.01 | Jan 18, 2023 | An unauthorized user with network access and the decryption key could decrypt sensitive data, such as usernames and passwords. | ||
| CVE-2022-47610 | Med | 0.38 | 5.9 | 0.00 | Mar 29, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Mr Digital Simple Image Popup plugin <= 1.3.6 versions. | ||
| CVE-2025-59717 | Med | 0.35 | 5.4 | 0.00 | Sep 19, 2025 | In the @digitalocean/do-markdownit package through 1.16.1 (in npm), the callout and fence_environment plugins perform .includes substring matching if allowedClasses or allowedEnvironments is a string (instead of an array). | ||
| CVE-1999-0513 | 0.09 | — | 0.70 | Jan 5, 1998 | ICMP messages to broadcast addresses are allowed, allowing for a Smurf attack that can cause a denial of service. | |||
| CVE-1999-0128 | 0.09 | — | 0.75 | Dec 18, 1996 | Oversized ICMP ping packets can result in a denial of service, aka Ping o' Death. | |||
| CVE-1999-0046 | 0.07 | — | 0.52 | Feb 6, 1997 | Buffer overflow of rlogin program using TERM environmental variable. | |||
| CVE-1999-0170 | 0.05 | — | 0.19 | Jan 1, 1997 | Remote attackers can mount an NFS file system in Ultrix or OSF, even if it is denied on the access list. | |||
| CVE-2002-1129 | 0.03 | — | 0.01 | Oct 4, 2002 | Buffer overflow in dxterm allows local users to execute arbitrary code via a long -xrm argument. | |||
| CVE-2001-1092 | 0.03 | — | 0.01 | Sep 10, 2001 | msgchk in Digital UNIX 4.0G and earlier allows a local user to read the first line of arbitrary files via a symlink attack on the .mh_profile file. | |||
| CVE-2001-1093 | 0.03 | — | 0.01 | Sep 10, 2001 | Buffer overflow in msgchk in Digital UNIX 4.0G and earlier allows local users to execute arbitrary code via a long command line argument. | |||
| CVE-2001-0369 | 0.03 | — | 0.01 | Jun 27, 2001 | Buffer overflow in lpsched on DGUX version R4.20MU06 and MU02 allows a local attacker to obtain root access via a long command line argument (non-existent printer name). | |||
| CVE-1999-0691 | 0.03 | — | 0.01 | Sep 13, 1999 | Buffer overflow in the AddSuLog function of the CDE dtaction utility allows local users to gain root privileges via a long user name. | |||
| CVE-1999-1194 | 0.03 | — | 0.01 | May 1, 1991 | chroot in Digital Ultrix 4.1 and 4.0 is insecurely installed, which allows local users to gain privileges. | |||
| CVE-2011-1918 | 0.01 | — | 0.06 | Nov 2, 2011 | Stack-based buffer overflow in the Data Archiver service in GE Intelligent Platforms Proficy Historian before 3.5 SIM 17 and 4.x before 4.0 SIM 12 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via crafted TCP message… | |||
| CVE-2002-1127 | 0.00 | — | 0.00 | Oct 4, 2002 | Buffer overflow in uucp in Compaq Tru64/OSF1 3.x allows local users to execute arbitrary code via a long source (-s) command line parameter. |
- risk 0.64cvss 9.8epss 0.01
Even if the authentication fails for local service authentication, the requested command could still execute regardless of authentication status.
- risk 0.52cvss 9.1epss 0.01
Authentication is globally bypassed in github.com/nanobox-io/golang-nanoauth between v0.0.0-20160722212129-ac0cc4484ad4 and v0.0.0-20200131131040-063a3fb69896 if ListenAndServe is called with an empty token.
- risk 0.49cvss 7.5epss 0.01
An unauthorized user could alter or write files with full control over the path and content of the file.
- risk 0.49cvss 7.5epss 0.01
An unauthorized user could possibly delete any file on the system.
- risk 0.49cvss 7.5epss 0.01
An unauthorized user could be able to read any file on the system, potentially exposing sensitive information.
- risk 0.49cvss 7.5epss 0.01
An unauthorized user with network access and the decryption key could decrypt sensitive data, such as usernames and passwords.
- risk 0.38cvss 5.9epss 0.00
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Mr Digital Simple Image Popup plugin <= 1.3.6 versions.
- risk 0.35cvss 5.4epss 0.00
In the @digitalocean/do-markdownit package through 1.16.1 (in npm), the callout and fence_environment plugins perform .includes substring matching if allowedClasses or allowedEnvironments is a string (instead of an array).
- CVE-1999-0513Jan 5, 1998risk 0.09cvss —epss 0.70
ICMP messages to broadcast addresses are allowed, allowing for a Smurf attack that can cause a denial of service.
- CVE-1999-0128Dec 18, 1996risk 0.09cvss —epss 0.75
Oversized ICMP ping packets can result in a denial of service, aka Ping o' Death.
- CVE-1999-0046Feb 6, 1997risk 0.07cvss —epss 0.52
Buffer overflow of rlogin program using TERM environmental variable.
- CVE-1999-0170Jan 1, 1997risk 0.05cvss —epss 0.19
Remote attackers can mount an NFS file system in Ultrix or OSF, even if it is denied on the access list.
- CVE-2002-1129Oct 4, 2002risk 0.03cvss —epss 0.01
Buffer overflow in dxterm allows local users to execute arbitrary code via a long -xrm argument.
- CVE-2001-1092Sep 10, 2001risk 0.03cvss —epss 0.01
msgchk in Digital UNIX 4.0G and earlier allows a local user to read the first line of arbitrary files via a symlink attack on the .mh_profile file.
- CVE-2001-1093Sep 10, 2001risk 0.03cvss —epss 0.01
Buffer overflow in msgchk in Digital UNIX 4.0G and earlier allows local users to execute arbitrary code via a long command line argument.
- CVE-2001-0369Jun 27, 2001risk 0.03cvss —epss 0.01
Buffer overflow in lpsched on DGUX version R4.20MU06 and MU02 allows a local attacker to obtain root access via a long command line argument (non-existent printer name).
- CVE-1999-0691Sep 13, 1999risk 0.03cvss —epss 0.01
Buffer overflow in the AddSuLog function of the CDE dtaction utility allows local users to gain root privileges via a long user name.
- CVE-1999-1194May 1, 1991risk 0.03cvss —epss 0.01
chroot in Digital Ultrix 4.1 and 4.0 is insecurely installed, which allows local users to gain privileges.
- CVE-2011-1918Nov 2, 2011risk 0.01cvss —epss 0.06
Stack-based buffer overflow in the Data Archiver service in GE Intelligent Platforms Proficy Historian before 3.5 SIM 17 and 4.x before 4.0 SIM 12 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via crafted TCP message…
- CVE-2002-1127Oct 4, 2002risk 0.00cvss —epss 0.00
Buffer overflow in uucp in Compaq Tru64/OSF1 3.x allows local users to execute arbitrary code via a long source (-s) command line parameter.