818 matches found
CVE-2010-3439
CVE-2010-3439 affects alien-arena 7.33; multiple connected records describe a DoS by sending invalid parameters to the download command that crashes the server. Some sources additionally classify related entries as command injection, but the core CVE detail here is the DoS via the download parame...
CVE-2010-3439
It is possible to cause a DoS condition by causing the server to crash in alien-arena 7.33 by supplying various invalid parameters to the download command...
CVE-2010-3439
It is possible to cause a DoS condition by causing the server to crash in alien-arena 7.33 by supplying various invalid parameters to the download command...
Rockwellautomation Arena Exposure of Sensitive Information to an Unauthorized Actor
Rockwell Automation Arena Simulation Software versions 16.00.00 and earlier contain an INFORMATION EXPOSURE CWE-200. A maliciously crafted Arena file opened by an unsuspecting user may result in the limited exposure of information related to the targeted workstation. File data ot500274.nasl...
Rockwellautomation Arena Use After Free
Rockwell Automation Arena versions 15.10.00 and prior contains a use after free vulnerability caused by processing specially crafted Arena Simulation Software files that may cause the software application to crash, potentially losing any unsaved data.. File data ot500330.nasl...
Rockwellautomation Arena Access of Uninitialized Pointer
In Rockwell Automation Arena Simulation Software Cat. 9502-Ax, Versions 16.00.00 and earlier, a maliciously crafted Arena file opened by an unsuspecting user may result in the use of a pointer that has not been initialized. File data ot500054.nasl...
CVE-2010-3439
It is possible to cause a DoS condition by causing the server to crash in alien-arena 7.33 by supplying various invalid parameters to the download command...
CVE-2019-13527
In Rockwell Automation Arena Simulation Software Cat. 9502-Ax, Versions 16.00.00 and earlier, a maliciously crafted Arena file opened by an unsuspecting user may result in the use of a pointer that has not been initialized...
CVE-2019-13527
In Rockwell Automation Arena Simulation Software Cat. 9502-Ax, Versions 16.00.00 and earlier, a maliciously crafted Arena file opened by an unsuspecting user may result in the use of a pointer that has not been initialized...
Null pointer dereference
In Rockwell Automation Arena Simulation Software Cat. 9502-Ax, Versions 16.00.00 and earlier, a maliciously crafted Arena file opened by an unsuspecting user may result in the use of a pointer that has not been initialized...
CVE-2019-13527
CVE-2019-13527 affects Rockwell Automation Arena Simulation Software Cat. 9502-Ax (versions 16.00.00 and earlier). The issue is a parsing flaw where a pointer is used without initialization when processing Arena DOE files, potentially enabling remote code execution. Exploitation typically require...
CVE-2019-13527
In Rockwell Automation Arena Simulation Software Cat. 9502-Ax, Versions 16.00.00 and earlier, a maliciously crafted Arena file opened by an unsuspecting user may result in the use of a pointer that has not been initialized...
PT-2019-13392 · Rockwell Automation · Arena Simulation
Name of the Vulnerable Software and Affected Versions: Rockwell Automation Arena Simulation Software Cat. 9502-Ax versions 16.00.00 and earlier Description: A maliciously crafted Arena file opened by an unsuspecting user may result in the use of a pointer that has not been initialized, potentiall...
PT-2019-13385 · Rockwell Automation · Arena Simulation
Name of the Vulnerable Software and Affected Versions: Rockwell Automation Arena Simulation Software versions prior to 16.00.01 Description: A maliciously crafted program file opened by an unsuspecting user may result in the limited exposure of information related to the targeted workstation...
Rockwell Automation Arena Simulation DOE File Parsing Use-After-Free Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Rockwell Automation Arena Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...
Rockwell Automation Arena Simulation DOE File Parsing Use-After-Free Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Rockwell Automation Arena Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...
PT-2019-13387 · Rockwell Automation · Arena Simulation
Name of the Vulnerable Software and Affected Versions: Rockwell Automation Arena Simulation Software versions 16.00.00 and earlier Description: A maliciously crafted program file opened by an unsuspecting user may result in the limited exposure of information related to the targeted workstation...
Rockwell Automation Arena Simulation DOE File Insufficient UI Warning Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Rockwell Automation Arena Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...
Rockwell Automation Arena Simulation DOE File Parsing Type Confusion Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Rockwell Automation Arena Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...