CVE-2024-11155

A “use after free” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to craft a DOE file and force the software to use a resource that was already used. If exploited, a threat actor could leverage this vulnerability to execute arbitrary code. To...

CVE-2024-11156 Rockwell Automation Arena® Out of Bounds Write Vulnerability

An “out of bounds write” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to write beyond the boundaries of allocated memory in a DOE file. If exploited, a threat actor could leverage this vulnerability to execute arbitrary code. To exploit thi...

CVE-2024-42075

The CVE-2024-42075 issue affects the Linux kernel’s BPF arena code, where the remap logic did not account for mremap, risking use-after-free in arena_vm_close. A reference-count mechanism was added to handle multiple mmap events, mitigating the flaw. Concrete details: affected component is the bp...

The vulnerability of software for discrete event simulation and automation in Rockwell Automation Arena lies in the ability to read data beyond the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the software for discrete event simulation and automation in Rockwell Automation Arena lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code in the context of the current user...

CVE-2002-1929

Cross-site scripting XSS vulnerability in pafiledb.php in PHP Arena paFileDB 1.1.3 through 3.0 allows remote attackers to inject arbitrary web script or HTML via the query string in the 1 rate, 2 email, or 3 download actions...