Vendor

Digital Project

Digital Project is a computer-aided design (CAD) software application based on CATIA V5 and developed by Gehry Technologies, a technology company owned by the architect Frank Gehry. Among the changes made by Gehry Technologies to CATIA is a new visual interface suitable for architecture work. With the release of version R5 Digital Project is compatible with CATIA V5R22.

Products

CVEs

Across products

106

Status

Private

Products

Recent CVEs

CVE	Risk	CVSS	EPSS	Published	Description
CVE-1999-0513	0.05	—	0.26	Jan 5, 1998	ICMP messages to broadcast addresses are allowed, allowing for a Smurf attack that can cause a denial of service.
CVE-1999-0170	0.05	—	0.28	Jan 1, 1997	Remote attackers can mount an NFS file system in Ultrix or OSF, even if it is denied on the access list.
CVE-1999-0046	0.04	—	0.07	Feb 6, 1997	Buffer overflow of rlogin program using TERM environmental variable.
CVE-1999-0128	0.04	—	0.16	Dec 18, 1996	Oversized ICMP ping packets can result in a denial of service, aka Ping o' Death.
CVE-2002-1129	0.03	—	0.00	Oct 4, 2002	Buffer overflow in dxterm allows local users to execute arbitrary code via a long -xrm argument.
CVE-2001-0369	0.03	—	0.00	Jun 27, 2001	Buffer overflow in lpsched on DGUX version R4.20MU06 and MU02 allows a local attacker to obtain root access via a long command line argument (non-existent printer name).
CVE-1999-0691	0.03	—	0.01	Sep 13, 1999	Buffer overflow in the AddSuLog function of the CDE dtaction utility allows local users to gain root privileges via a long user name.
CVE-1999-1194	0.03	—	0.00	May 1, 1991	chroot in Digital Ultrix 4.1 and 4.0 is insecurely installed, which allows local users to gain privileges.
CVE-1999-0687	0.01	—	0.07	Sep 13, 1999	The ToolTalk ttsession daemon uses weak RPC authentication, which allows a remote attacker to execute commands.
CVE-2025-59717	0.00	—	0.00	Sep 19, 2025	In the @digitalocean/do-markdownit package through 1.16.1 (in npm), the callout and fence_environment plugins perform .includes substring matching if allowedClasses or allowedEnvironments is a string (instead of an array).
CVE-2022-47610	0.00	—	0.00	Mar 29, 2023	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Mr Digital Simple Image Popup plugin <= 1.3.6 versions.
CVE-2022-38469	0.00	—	0.00	Jan 17, 2023	An unauthorized user with network access and the decryption key could decrypt sensitive data, such as usernames and passwords.
CVE-2022-46331	0.00	—	0.00	Jan 17, 2023	An unauthorized user could possibly delete any file on the system.
CVE-2022-43494	0.00	—	0.00	Jan 17, 2023	An unauthorized user could be able to read any file on the system, potentially exposing sensitive information.
CVE-2022-46660	0.00	—	0.00	Jan 17, 2023	An unauthorized user could alter or write files with full control over the path and content of the file.
CVE-2022-46732	0.00	—	0.01	Jan 17, 2023	Even if the authentication fails for local service authentication, the requested command could still execute regardless of authentication status.
CVE-2002-1128	0.00	—	0.00	Oct 4, 2002	Buffer overflow in inc mail utility for Compaq Tru64/OSF1 3.x allows local users to execute arbitrary code via a long MH environment variable.
CVE-2002-1127	0.00	—	0.00	Oct 4, 2002	Buffer overflow in uucp in Compaq Tru64/OSF1 3.x allows local users to execute arbitrary code via a long source (-s) command line parameter.
CVE-2000-0315	0.00	—	0.00	Mar 12, 2001	traceroute in NetBSD 1.3.3 and Linux systems allows local unprivileged users to modify the source address of the packets, which could be used in spoofing attacks.
CVE-2001-0134	0.00	—	0.02	Mar 12, 2001	Buffer overflow in cpqlogin.htm in web-enabled agents for various Compaq management software products such as Insight Manager and Management Agents allows remote attackers to execute arbitrary commands via a long user name.