Lucene search
+L

19014 matches found

OSV
OSV
added 2024/05/03 2:15 a.m.7 views

CVE-2023-34263

Fatek Automation FvDesigner FPJ File Parsing Uninitialized Pointer Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fatek Automation FvDesigner. User interaction is required to exploit this vulnerability in that...

7.8CVSS6.2AI score0.00418EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2024/05/03 2:15 a.m.8 views

CVE-2023-34266

Fatek Automation FvDesigner FPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fatek Automation FvDesigner. User interaction is required to exploit this vulnerability in that t...

7.8CVSS7.6AI score0.00394EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2024/05/03 2:15 a.m.27 views

CVE-2023-34266

Fatek Automation FvDesigner FPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fatek Automation FvDesigner. User interaction is required to exploit this vulnerability in that t...

7.8CVSS8AI score0.00394EPSS
SaveExploits0References1
NVD
NVD
added 2024/05/03 2:15 a.m.27 views

CVE-2023-32174

Unified Automation UaGateway NodeManagerOpcUa Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Unified Automation UaGateway. Authentication is required to exploit this vulnerability when the produ...

9.1CVSS9.7AI score0.01853EPSS
SaveExploits0References2
NVD
NVD
added 2024/05/03 2:15 a.m.20 views

CVE-2023-32173

Unified Automation UaGateway AddServer XML Injection Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Unified Automation UaGateway. Authentication is required to exploit this vulnerability when the...

5.8CVSS5.7AI score0.01171EPSS
SaveExploits0References2
OSV
OSV
added 2024/05/03 2:15 a.m.10 views

CVE-2023-32172

Unified Automation UaGateway OPC UA Server Use-After-Free Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Unified Automation UaGateway. Authentication is required to exploit this vulnerability. The...

6.5CVSS5.8AI score0.01374EPSS
SaveExploits0References2
OSV
OSV
added 2024/05/03 2:15 a.m.7 views

CVE-2023-32171

Unified Automation UaGateway OPC UA Server Null Pointer Dereference Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Unified Automation UaGateway. Authentication is required to exploit this...

6.5CVSS5.9AI score0.01356EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2024/05/03 2:15 a.m.4 views

CVE-2023-32171

Unified Automation UaGateway OPC UA Server Null Pointer Dereference Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Unified Automation UaGateway. Authentication is required to exploit this...

6.5CVSS5.8AI score0.01356EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2024/05/03 2:15 a.m.20 views

CVE-2023-32170

Unified Automation UaGateway OPC UA Server Improper Input Validation Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Unified Automation UaGateway. User interaction is required to exploit this...

6.5CVSS6.3AI score0.00588EPSS
SaveExploits0References2
CVE
CVE
added 2024/05/03 2:14 a.m.78 views

CVE-2023-50233

CVE-2023-50233 concerns Inductive Automation Ignition, specifically the getJavaExecutable directory traversal vulnerability. The flaw stems from inadequate validation of a user-supplied path before performing file operations, enabling an attacker to execute arbitrary code in the context of the cu...

8.8CVSS8.9AI score0.02081EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2024/05/03 2:14 a.m.29 views

CVE-2023-50233 Inductive Automation Ignition getJavaExecutable Directory Traversal Remote Code Execution Vulnerability

Inductive Automation Ignition getJavaExecutable Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. User interaction is required to exploit this vulnerability in...

8.8CVSS9.2AI score0.02081EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/05/03 2:14 a.m.20 views

CVE-2023-50233 Inductive Automation Ignition getJavaExecutable Directory Traversal Remote Code Execution Vulnerability

Inductive Automation Ignition getJavaExecutable Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. User interaction is required to exploit this vulnerability in...

8.8CVSS7.6AI score0.02081EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/05/03 2:14 a.m.17 views

CVE-2023-50232 Inductive Automation Ignition getParams Argument Injection Remote Code Execution Vulnerability

Inductive Automation Ignition getParams Argument Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. User interaction is required to exploit this vulnerability in that the...

8.8CVSS7.9AI score0.01386EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/05/03 2:14 a.m.29 views

CVE-2023-50232 Inductive Automation Ignition getParams Argument Injection Remote Code Execution Vulnerability

Inductive Automation Ignition getParams Argument Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. User interaction is required to exploit this vulnerability in that the...

8.8CVSS9.3AI score0.01386EPSS
SaveExploits0References2
CVE
CVE
added 2024/05/03 2:14 a.m.81 views

CVE-2023-50232

CVE-2023-50232 exposes a remote code execution in Inductive Automation Ignition via a getParams argument injection. The flaw stems from insufficient validation of a user-supplied string used to form a system-call argument, allowing code execution in the context of the current user. Exploitation r...

8.8CVSS9AI score0.01386EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2024/05/03 2:14 a.m.73 views

CVE-2023-50223

Inductive Automation Ignition is affected. The ExtendedDocumentCodec deserialization flaw stems from inadequate validation of untrusted input, enabling remote code execution with SYSTEM privileges. Authentication is required to exploit. No explicit patch/version details are provided here; refer t...

8.8CVSS9AI score0.55177EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/05/03 2:14 a.m.34 views

CVE-2023-50223 Inductive Automation Ignition ExtendedDocumentCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability

Inductive Automation Ignition ExtendedDocumentCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. Authentication is required to exploit this...

8.8CVSS9.1AI score0.55177EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/05/03 2:14 a.m.38 views

CVE-2023-50223 Inductive Automation Ignition ExtendedDocumentCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability

Inductive Automation Ignition ExtendedDocumentCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. Authentication is required to exploit this...

8.8CVSS9.2AI score0.55177EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/05/03 2:14 a.m.29 views

CVE-2023-50222 Inductive Automation Ignition ResponseParser Notification Deserialization of Untrusted Data Remote Code Execution Vulnerability

Inductive Automation Ignition ResponseParser Notification Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. User interaction is required to exploit...

8.8CVSS9.2AI score0.01145EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/05/03 2:14 a.m.14 views

CVE-2023-50222 Inductive Automation Ignition ResponseParser Notification Deserialization of Untrusted Data Remote Code Execution Vulnerability

Inductive Automation Ignition ResponseParser Notification Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. User interaction is required to exploit...

8.8CVSS7.7AI score0.01145EPSS
SaveExploits0References2
Rows per page
Query Builder