Lucene search
K

2110 matches found

NVD
NVD
added 2019/06/24 4:15 p.m.16 views

CVE-2019-12870

An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86. A manipulated PC Worx or Config+ project file could lead to an Uninitialized Pointer and remote code execution. The attacker needs to get access to an original PC Worx or Confi...

8.8CVSS8.9AI score0.03707EPSS
Exploits0References2
Prion
Prion
added 2019/06/24 4:15 p.m.21 views

Remote code execution

An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86. A manipulated PC Worx or Config+ project file could lead to an Uninitialized Pointer and remote code execution. The attacker needs to get access to an original PC Worx or Confi...

6.8CVSS8.8AI score0.03707EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2019/06/24 3:20 p.m.20 views

CVE-2019-12870

An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86. A manipulated PC Worx or Config+ project file could lead to an Uninitialized Pointer and remote code execution. The attacker needs to get access to an original PC Worx or Confi...

8.9AI score0.03707EPSS
Exploits0References2
CVE
CVE
added 2019/06/24 3:20 p.m.59 views

CVE-2019-12870

PHOENIX CONTACT Automation Worx Software Suite (PC Worx, PC Worx Express, Config+; v1.86 and earlier) is affected by CVE-2019-12870. The issue is an uninitialized pointer leading to remote code execution. An attacker must obtain an original PC Worx/Config+ project file, manipulate it, and replace...

8.8CVSS8.8AI score0.03707EPSS
Exploits0References2Affected Software1
CNVD
CNVD
added 2019/06/21 12:0 a.m.2 views

Phoenix Contact Automation Worx Software Suite Uninitialized Pointer Access Vulnerability

Automation Worx Software Suite is an automation software package from Phoenix Contact. An uninitialized pointer access vulnerability exists in the PC Worx, PC Worx Express, and Config+ components in Phoenix Contact Automation Worx Software Suite versions 1.86 and earlier. An attacker could exploi...

8.8CVSS8AI score0.03707EPSS
Exploits0References1
Veracode
Veracode
added 2019/05/02 5:39 a.m.50 views

Denial Of Service (DoS)

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The php55 packages provide a recent stable release of PHP with the PEAR 1.9.4, memcache 3.0.8, and mongo 1.4.5 PECL extensions, and a number of additional utilities. The php55 packages have been upgraded to...

7.5CVSS9.2AI score0.53166EPSS
Exploits32References52Affected Software6
Veracode
Veracode
added 2019/05/02 4:42 a.m.24 views

Denial Of Service (DoS)

The IcedTea-Web project provides a Java web browser plug-in and an implementation of Java Web Start, which is based on the Netx project. It also contains a configuration tool for managing deployment settings for the plug-in and Web Start implementations. An uninitialized pointer use flaw was foun...

7.5CVSS9.3AI score0.06172EPSS
Exploits1References20Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2019/04/15 12:0 a.m.24 views

Microsoft Windows EMF File Uninitialized Pointer Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling o...

7.8CVSS3.8AI score0.27571EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/04/04 12:0 a.m.24 views

Microsoft Windows VBScript Array Uninitialized Pointer Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft VBScript. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling ...

7.5CVSS3.4AI score0.3126EPSS
Exploits1References1
BDU FSTEC
BDU FSTEC
added 2019/04/04 12:0 a.m.3 views

The vulnerability of the CAF demultiplexer in the VideoLAN VLC media player lies in the access to an uninitialized pointer, which allows a hacker to trigger a service failure and/or gain access to confidential data.

The vulnerability of the CAF media player VideoLAN VLC lies in the access to an uninitialized pointer due to a numerical overflow during the processing of cookie files in the ReadKukiChunk function. Exploiting this vulnerability allows a remote attacker to cause service failures and/or gain acces...

9.1CVSS7.8AI score0.03916EPSS
Exploits1References4Affected Software2
OSV
OSV
added 2019/04/01 3:29 p.m.2 views

ALPINE-CVE-2019-3836

It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer access in gnutls versions 3.6.3 or later which can be triggered by certain post-handshake messages...

7.5CVSS7AI score0.03401EPSS
Exploits1References1
OSV
OSV
added 2019/04/01 3:29 p.m.19 views

CVE-2019-3836

It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer access in gnutls versions 3.6.3 or later which can be triggered by certain post-handshake messages...

7.5CVSS7.1AI score0.03401EPSS
Exploits1References8
OSV
OSV
added 2019/04/01 3:29 p.m.1 views

DEBIAN-CVE-2019-3836

It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer access in gnutls versions 3.6.3 or later which can be triggered by certain post-handshake messages...

7.5CVSS7.8AI score0.03401EPSS
Exploits1References1
NVD
NVD
added 2019/04/01 3:29 p.m.17 views

CVE-2019-3836

It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer access in gnutls versions 3.6.3 or later which can be triggered by certain post-handshake messages...

7.5CVSS6.5AI score0.03401EPSS
Exploits1References8
Cvelist
Cvelist
added 2019/04/01 2:16 p.m.26 views

CVE-2019-3836

It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer access in gnutls versions 3.6.3 or later which can be triggered by certain post-handshake messages...

5.9CVSS6.3AI score0.03401EPSS
Exploits1References8
CVE
CVE
added 2019/04/01 2:16 p.m.204 views

CVE-2019-3836

GNUTLS CVE-2019-3836: uninitialized/invalid pointer access in post-handshake message handling (TLS1.3 async messages) on versions prior to 3.6.7. Remote attacker can cause crash/Denial of Service; may enable arbitrary code execution per related advisories. Remediation: upgrade to GNUTLS 3.6.7 or ...

7.5CVSS6.2AI score0.03401EPSS
Exploits1References8Affected Software1
Debian CVE
Debian CVE
added 2019/04/01 2:16 p.m.23 views

CVE-2019-3836

It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer access in gnutls versions 3.6.3 or later which can be triggered by certain post-handshake messages...

7.5CVSS6.8AI score0.03401EPSS
Exploits1
AlpineLinux
AlpineLinux
added 2019/04/01 2:16 p.m.41 views

CVE-2019-3836

It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer access in gnutls versions 3.6.3 or later which can be triggered by certain post-handshake messages...

7.5CVSS6.5AI score0.03401EPSS
Exploits1
UbuntuCve
UbuntuCve
added 2019/04/01 12:0 a.m.31 views

CVE-2019-3836

It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer access in gnutls versions 3.6.3 or later which can be triggered by certain post-handshake messages...

7.5CVSS6.8AI score0.03401EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2019/03/22 12:0 a.m.2 views

PT-2019-6286 · Poppler +7 · Poppler +7

Name of the Vulnerable Software and Affected Versions: Poppler affected versions not specified Description: A flaw was found in the way certain PDF files were converted into HTML, allowing a remote attacker to exploit this flaw by providing a malicious PDF file that, when processed by the...

9.8CVSS6.2AI score0.03518EPSS
Exploits20References169
Rows per page
Query Builder