Lucene search
K

2114 matches found

RedHat Linux
RedHat Linux
added 2023/11/15 9:26 p.m.3 views

open-vm-tools: file descriptor hijack vulnerability in the vmware-user-suid-wrapper

A flaw was found in open-vm-tools. This flaw allows a malicious actor with non-root privileges to hijack the /dev/uinput file descriptor, allowing them to simulate user inputs...

7.4CVSS5.7AI score0.00402EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2023/11/15 9:25 p.m.2 views

open-vm-tools: file descriptor hijack vulnerability in the vmware-user-suid-wrapper

A flaw was found in open-vm-tools. This flaw allows a malicious actor with non-root privileges to hijack the /dev/uinput file descriptor, allowing them to simulate user inputs...

7.4CVSS5.7AI score0.00402EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2023/11/15 9:25 p.m.2 views

open-vm-tools: file descriptor hijack vulnerability in the vmware-user-suid-wrapper

A flaw was found in open-vm-tools. This flaw allows a malicious actor with non-root privileges to hijack the /dev/uinput file descriptor, allowing them to simulate user inputs...

7.4CVSS5.7AI score0.00402EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2023/11/15 8:35 p.m.3 views

open-vm-tools: file descriptor hijack vulnerability in the vmware-user-suid-wrapper

A flaw was found in open-vm-tools. This flaw allows a malicious actor with non-root privileges to hijack the /dev/uinput file descriptor, allowing them to simulate user inputs...

7.4CVSS5.7AI score0.00402EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2023/11/15 12:0 a.m.36 views

RHEL 8 : open-vm-tools (RHSA-2023:7261)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7261 advisory. The Open Virtual Machine Tools are the open source implementation of the VMware Tools. They are a set of guest operating system virtualizati...

7.5CVSS6.7AI score0.00667EPSS
Exploits0References6
Zero Day Initiative
Zero Day Initiative
added 2023/11/14 12:0 a.m.20 views

Siemens Tecnomatix Plant Simulation WRL File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Tecnomatix Plant Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

7.8CVSS6.6AI score0.00313EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/11/14 12:0 a.m.22 views

Siemens Tecnomatix Plant Simulation WRL File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Tecnomatix Plant Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

7.8CVSS6.6AI score0.00294EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/11/14 12:0 a.m.18 views

Siemens Tecnomatix Plant Simulation WRL File Parsing Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Tecnomatix Plant Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

7.8CVSS6.6AI score0.00271EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/11/14 12:0 a.m.23 views

Siemens Tecnomatix Plant Simulation WRL File Parsing Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Tecnomatix Plant Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

7.8CVSS6.6AI score0.00313EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/11/14 12:0 a.m.18 views

Siemens Tecnomatix Plant Simulation WRL File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Tecnomatix Plant Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

7.8CVSS6.6AI score0.00293EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/11/14 12:0 a.m.20 views

Siemens Tecnomatix Plant Simulation WRL File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Tecnomatix Plant Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

7.8CVSS6.6AI score0.00313EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2023/11/09 12:0 a.m.2 views

The vulnerability of Siemens Solid Edge’s design and simulation tools relates to the use of an uninitialized pointer on the stack, allowing a malicious actor to execute arbitrary code within the context of the current process.

The vulnerability of the Siemens Solid Edge design and simulation tools is related to the use of an uninitialized pointer on the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code within the context of the current process, through the use of specially created P...

7.8CVSS7.6AI score0.00217EPSS
Exploits0References3
Wired Threat Level
Wired Threat Level
added 2023/11/02 11:0 a.m.28 views

The UN Hired an AI Company to Untangle the Israeli-Palestinian Crisis

CulturePulse's AI model promises to create a realistic virtual simulation of every Israeli and Palestinian citizen. But don't roll your eyes: It's already been put to the test in other conflict zones...

7.1AI score
Exploits0
BDU FSTEC
BDU FSTEC
added 2023/11/02 12:0 a.m.2 views

The vulnerability of Siemens Solid Edge’s design and simulation tools relates to reading beyond the memory boundary, allowing a malicious actor to execute arbitrary code.

The vulnerability of Siemens Solid Edge’s design and simulation tools is related to reading beyond the memory limit. Exploiting this vulnerability can allow an attacker to execute arbitrary code using specially created PAR files...

7.8CVSS7.6AI score0.00217EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2023/11/02 12:0 a.m.4 views

The vulnerability of Siemens Solid Edge’s design and simulation tools relates to data writing beyond the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Siemens Solid Edge’s design and simulation tools relates to the writing of data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using specially created PAR files...

7.8CVSS7.8AI score0.00217EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2023/11/02 12:0 a.m.4 views

The vulnerability of Siemens Solid Edge, a tool for design and simulation, relates to buffer overflow attacks, allowing an attacker to execute arbitrary code.

The vulnerability of Siemens Solid Edge’s design and simulation tools is related to buffer overflow attacks. Exploiting this vulnerability can allow attackers to execute arbitrary code using specially created PAR files...

7.8CVSS8AI score0.00217EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2023/11/02 12:0 a.m.4 views

The vulnerability of Siemens Solid Edge’s design and simulation tools relates to reading beyond the memory boundary, allowing a malicious actor to execute arbitrary code.

The vulnerability of Siemens Solid Edge’s design and simulation tools is related to reading beyond the memory limit. Exploiting this vulnerability can allow an attacker to execute arbitrary code using specially created PAR files...

7.8CVSS7.6AI score0.00217EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2023/11/01 12:0 a.m.3 views

The vulnerability of software for discrete event simulation and automation in Rockwell Automation Arena lies in the use of an uninitialized pointer, which allows a hacker to execute arbitrary code.

The vulnerability of the software for discrete event simulation and automation in Rockwell Automation Arena relates to the use of an uninitialized pointer. Exploiting this vulnerability could allow a attacker to execute arbitrary code...

7.8CVSS7.5AI score0.00249EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/11/01 12:0 a.m.3 views

The vulnerability of software for discrete event simulation and automation in Rockwell Automation Arena lies in the ability to read data beyond the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the software for discrete event simulation and automation in Rockwell Automation Arena lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code in the context of the current user...

7.8CVSS7.8AI score0.00253EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/11/01 12:0 a.m.2 views

The vulnerability of the Arena Simulation software in modeling and automating discrete events lies in its ability to overflow a buffer based on a queue. This allows a hacker to execute arbitrary code.

The vulnerability of the Arena Simulation software for modeling and automating discrete events is related to the possibility of buffer overflow attacks. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS7.9AI score0.009EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder