Lucene search
+L

818 matches found

vulnersOsv
vulnersOsv
added 2024/02/11 12:00 p.m.1 views

abi-stable-host-api (>=0.1.1, <=0.1.13), abi_stable (>=0.2.0, <=0.11.3) +267 more potentially affected by unknown CVE via generational-arena (>=0.1.0, <=0.2.9)

generational-arena CARGO version =0.1.0, =0.1.1, =0.2.0, =0.4.0, =0.4.0, =0.5.0, =0.1.14, =0.1.1, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =0.8.2 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0014...

5.8AI score
SaveExploits0
RustSec
RustSec
added 2024/02/11 12:00 p.m.8 views

`generational-arena` is unmaintained

The generational-arena crate's repository has been archived and is no longer maintained. Alternatives - slotmap...

7.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2024/02/11 12:00 a.m.6 views

PT-2024-40903 · Unknown · Generational-Arena

Name of the Vulnerable Software and Affected Versions: generational-arena affected versions not specified Description: The generational-arena crate's repository has been archived and is no longer maintained. Recommendations: At the moment, there is no information about a newer version that contai...

7AI score
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2023/12/27 12:00 a.m.9 views

The vulnerability of the analysis component of the DOE-file software for simulation and automation of discrete events in Arena Simulation allows a perpetrator to execute arbitrary code.

The vulnerability of the DOE-file analysis component of the Arena Simulation software for modeling and automating discrete events involves the ability to read beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

10CVSS7.8AI score0.0085EPSS
SaveExploits0References2Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2023/12/21 12:00 a.m.27 views

Rockwell Automation Arena Simulation DOE File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Rockwell Automation Arena Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

7.8CVSS7.2AI score0.0085EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/12/21 12:00 a.m.24 views

Rockwell Automation Arena Simulation DOE File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Rockwell Automation Arena Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

7.8CVSS7.2AI score0.0085EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2023/11/29 12:00 a.m.17 views

The vulnerability of software for discrete event simulation and automation in Rockwell Automation Arena lies in the ability to read data beyond the buffer in memory, allowing a hacker to execute arbitrary code.

The vulnerability of software for discrete event simulation and automation in Rockwell Automation Arena lies in the ability to read data beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8AI score0.0085EPSS
SaveExploits0References2Affected Software1
RedHat Linux
RedHat Linux
added 2023/11/08 3:38 p.m.15 views

mariadb: server crashes in query_arena::set_query_arena upon SELECT from view

A flaw was found in the MariaDB Server. It contains a segmentation fault via the component, sql/sqlclass.cc, impacting availability...

7.5CVSS7.3AI score0.02264EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
added 2023/11/01 12:00 a.m.14 views

The vulnerability of software for discrete event simulation and automation in Rockwell Automation Arena lies in the ability to read data beyond the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the software for discrete event simulation and automation in Rockwell Automation Arena lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code in the context of the current user...

7.8CVSS7.8AI score0.00253EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/11/01 12:00 a.m.12 views

The vulnerability of the Arena Simulation software in modeling and automating discrete events lies in its ability to overflow a buffer based on a queue. This allows a hacker to execute arbitrary code.

The vulnerability of the Arena Simulation software for modeling and automating discrete events is related to the possibility of buffer overflow attacks. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS7.9AI score0.009EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/11/01 12:00 a.m.10 views

The vulnerability of software for discrete event simulation and automation in Rockwell Automation Arena lies in the use of an uninitialized pointer, which allows a hacker to execute arbitrary code.

The vulnerability of the software for discrete event simulation and automation in Rockwell Automation Arena relates to the use of an uninitialized pointer. Exploiting this vulnerability could allow a attacker to execute arbitrary code...

7.8CVSS7.5AI score0.00249EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2023/10/27 7:15 p.m.10 views

CVE-2023-27854

An arbitrary code execution vulnerability was reported to Rockwell Automation in Arena Simulation that could potentially allow a malicious user to commit unauthorized arbitrary code to the software by using a memory buffer overflow. The threat-actor could then execute malicious code on the system...

7.8CVSS6.7AI score0.00253EPSS
SaveExploits0References1
NVD
NVD
added 2023/10/27 7:15 p.m.34 views

CVE-2023-27854

An arbitrary code execution vulnerability was reported to Rockwell Automation in Arena Simulation that could potentially allow a malicious user to commit unauthorized arbitrary code to the software by using a memory buffer overflow. The threat-actor could then execute malicious code on the system...

7.8CVSS7.9AI score0.00253EPSS
SaveExploits0References1
NVD
NVD
added 2023/10/27 7:15 p.m.26 views

CVE-2023-27858

Rockwell Automation Arena Simulation contains an arbitrary code execution vulnerability that could potentially allow a malicious user to commit unauthorized code to the software by using an uninitialized pointer in the application. The threat-actor could then execute malicious code on the system...

7.8CVSS7.9AI score0.00249EPSS
SaveExploits0References1
OSV
OSV
added 2023/10/27 7:15 p.m.9 views

CVE-2023-27858

Rockwell Automation Arena Simulation contains an arbitrary code execution vulnerability that could potentially allow a malicious user to commit unauthorized code to the software by using an uninitialized pointer in the application. The threat-actor could then execute malicious code on the system...

7.8CVSS6.4AI score0.00249EPSS
SaveExploits0References1
Prion
Prion
added 2023/10/27 7:15 p.m.26 views

Remote code execution

Rockwell Automation Arena Simulation contains an arbitrary code execution vulnerability that could potentially allow a malicious user to commit unauthorized code to the software by using an uninitialized pointer in the application. The threat-actor could then execute malicious code on the system...

4.4CVSS7.9AI score0.00249EPSS
SaveExploits0References1
Prion
Prion
added 2023/10/27 7:15 p.m.27 views

Buffer overflow

An arbitrary code execution vulnerability was reported to Rockwell Automation in Arena Simulation that could potentially allow a malicious user to commit unauthorized arbitrary code to the software by using a memory buffer overflow. The threat-actor could then execute malicious code on the system...

4.4CVSS7.9AI score0.00253EPSS
SaveExploits0References1
CVE
CVE
added 2023/10/27 6:58 p.m.80 views

CVE-2023-27858

CVE-2023-27858 affects Rockwell Automation Arena, specifically the Arena software (e.g., version 16.20.00001 per ICS-CISA advisories). The vulnerability stems from an uninitialized pointer in the application, enabling a local attacker to execute arbitrary code by processing a malformed or malicio...

7.8CVSS7.8AI score0.00249EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/10/27 6:58 p.m.59 views

CVE-2023-27858 Rockwell Automation Arena® Simulation Uninitialized Pointer Vulnerability

Rockwell Automation Arena Simulation contains an arbitrary code execution vulnerability that could potentially allow a malicious user to commit unauthorized code to the software by using an uninitialized pointer in the application. The threat-actor could then execute malicious code on the system...

7.8CVSS8AI score0.00249EPSS
SaveExploits0References1
CVE
CVE
added 2023/10/27 6:51 p.m.77 views

CVE-2023-27854

CVE-2023-27854 affects Rockwell Automation Arena (Arena) 16.20.x; vulnerability is a memory boundary issue (out-of-bounds read) and related uninitialized pointer, triggered by processing crafted files. Exploitation could allow arbitrary code execution with local access and user interaction requir...

7.8CVSS7.9AI score0.00253EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder