Lucene search
+L

2942 matches found

BDU FSTEC
BDU FSTEC
•added 2025/04/14 12:00 a.m.•24 views

Wayland Protocol Code Execution

The vulnerability of the compRedirectWindow function in the Wayland protocol for X.Org XWayland, which is part of the X Window System X.Org Server, relates to access to an uninitialized pointer. Exploiting this vulnerability could allow a attacker to execute arbitrary code...

7.8CVSS8.3AI score0.00405EPSS
SaveExploits0References17Affected Software14
RedhatCVE
RedhatCVE
•added 2025/04/10 4:14 p.m.•20 views

CVE-2025-2286

A local code execution vulnerability exists in the Rockwell Automation Arena® due to an uninitialized pointer. The flaw is result of improper validation of user-supplied data. If exploited a threat actor can disclose information and execute arbitrary code on the system. To exploit the vulnerabili...

8.5CVSS7.4AI score0.00303EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/04/10 4:11 p.m.•17 views

CVE-2025-2285

A local code execution vulnerability exists in the Rockwell Automation Arena® due to an uninitialized pointer. The flaw is result of improper validation of user-supplied data. If exploited a threat actor can disclose information and execute arbitrary code on the system. To exploit the vulnerabili...

8.5CVSS7.9AI score0.00301EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/04/10 4:08 p.m.•21 views

CVE-2025-2287

A local code execution vulnerability exists in the Rockwell Automation Arena® due to an uninitialized pointer. The flaw is result of improper validation of user-supplied data. If exploited a threat actor can disclose information and execute arbitrary code on the system. To exploit the vulnerabili...

8.5CVSS7.4AI score0.00303EPSS
SaveExploits0References3
Zero Day Initiative
Zero Day Initiative
•added 2025/04/09 12:00 a.m.•25 views

Luxion KeyShot PVS File Parsing Access of Uninitialized Pointer Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Luxion KeyShot. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of pvs...

7.8CVSS7.8AI score0.0034EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/04/08 4:15 p.m.•20 views

CVE-2025-2285

A local code execution vulnerability exists in the Rockwell Automation Arena® due to an uninitialized pointer. The flaw is result of improper validation of user-supplied data. If exploited a threat actor can disclose information and execute arbitrary code on the system. To exploit the...

7.8CVSS7.8AI score0.00301EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/04/08 4:15 p.m.•24 views

CVE-2025-2287

A local code execution vulnerability exists in the Rockwell Automation Arena® due to an uninitialized pointer. The flaw is result of improper validation of user-supplied data. If exploited a threat actor can disclose information and execute arbitrary code on the system. To exploit the...

7.8CVSS7.4AI score0.00303EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/08 4:15 p.m.•28 views

CVE-2025-2285

A local code execution vulnerability exists in the Rockwell Automation Arena® due to an uninitialized pointer. The flaw is result of improper validation of user-supplied data. If exploited a threat actor can disclose information and execute arbitrary code on the system. To exploit the...

8.5CVSS0.00301EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/08 4:15 p.m.•28 views

CVE-2025-2286

A local code execution vulnerability exists in the Rockwell Automation Arena® due to an uninitialized pointer. The flaw is result of improper validation of user-supplied data. If exploited a threat actor can disclose information and execute arbitrary code on the system. To exploit the...

8.5CVSS0.00303EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/08 4:15 p.m.•38 views

CVE-2025-2287

A local code execution vulnerability exists in the Rockwell Automation Arena® due to an uninitialized pointer. The flaw is result of improper validation of user-supplied data. If exploited a threat actor can disclose information and execute arbitrary code on the system. To exploit the...

8.5CVSS0.00303EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/04/08 4:15 p.m.•19 views

CVE-2025-2286

A local code execution vulnerability exists in the Rockwell Automation Arena® due to an uninitialized pointer. The flaw is result of improper validation of user-supplied data. If exploited a threat actor can disclose information and execute arbitrary code on the system. To exploit the...

7.8CVSS7.4AI score0.00303EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/08 3:16 p.m.•96 views

CVE-2025-2287

CVE-2025-2287 is a local code-execution vulnerability in Rockwell Automation Arena® caused by an uninitialized pointer resulting from improper validation of user-supplied data. A threat actor could disclose information and execute arbitrary code if a legitimate user opens a malicious DOE file. Ex...

8.5CVSS7.4AI score0.00303EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2025/04/08 3:16 p.m.•54 views

CVE-2025-2287 Local Code Execution Vulnerability in Arena®

A local code execution vulnerability exists in the Rockwell Automation Arena® due to an uninitialized pointer. The flaw is result of improper validation of user-supplied data. If exploited a threat actor can disclose information and execute arbitrary code on the system. To exploit the...

8.5CVSS0.00303EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/08 3:16 p.m.•36 views

CVE-2025-2286 Local Code Execution Vulnerability in Arena®

A local code execution vulnerability exists in the Rockwell Automation Arena® due to an uninitialized pointer. The flaw is result of improper validation of user-supplied data. If exploited a threat actor can disclose information and execute arbitrary code on the system. To exploit the...

8.5CVSS0.00303EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/08 3:16 p.m.•9 views

CVE-2025-2286 Local Code Execution Vulnerability in Arena®

A local code execution vulnerability exists in the Rockwell Automation Arena® due to an uninitialized pointer. The flaw is result of improper validation of user-supplied data. If exploited a threat actor can disclose information and execute arbitrary code on the system. To exploit the...

8.5CVSS7.4AI score0.00303EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/08 3:16 p.m.•83 views

CVE-2025-2286

CVE-2025-2286 : Local code execution in Rockwell Automation Arena due to an uninitialized pointer from improper validation of user-supplied data. A legitimate user must open a malicious DOE file to exploit, enabling information disclosure and arbitrary code execution on the system. Reported remed...

8.5CVSS7.4AI score0.00303EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/04/08 3:15 p.m.•11 views

CVE-2025-2285 Local Code Execution Vulnerability in Arena®

A local code execution vulnerability exists in the Rockwell Automation Arena® due to an uninitialized pointer. The flaw is result of improper validation of user-supplied data. If exploited a threat actor can disclose information and execute arbitrary code on the system. To exploit the...

8.5CVSS7.8AI score0.00301EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/08 3:15 p.m.•85 views

CVE-2025-2285

Rockwell Automation Arena is affected by a local code execution vulnerability (CVE-2025-2285) due to an uninitialized pointer from improper validation of user-supplied data. Exploitation requires a legitimate user to open a malicious DOE file, enabling information disclosure and arbitrary code ex...

8.5CVSS7.8AI score0.00301EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2025/04/08 3:15 p.m.•47 views

CVE-2025-2285 Local Code Execution Vulnerability in Arena®

A local code execution vulnerability exists in the Rockwell Automation Arena® due to an uninitialized pointer. The flaw is result of improper validation of user-supplied data. If exploited a threat actor can disclose information and execute arbitrary code on the system. To exploit the...

8.5CVSS0.00301EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/08 12:00 a.m.•9 views

CVE-2025-2286: Use of Uninitialized Variable

A local code execution vulnerability exists in the Rockwell Automation Arena® due to an uninitialized pointer. The flaw is result of improper validation of user-supplied data. If exploited a threat actor can disclose information and execute arbitrary code on the system. To exploit the...

8.5CVSS7.4AI score0.00303EPSS
SaveExploits0References1
Rows per page
Query Builder