Lucene search
+L

1480 matches found

Positive Technologies
Positive Technologies
•added 2023/01/11 12:00 a.m.•7 views

PT-2023-1104 · Cisco · Cisco Cx Cloud Agent

Name of the Vulnerable Software and Affected Versions: Cisco CX Cloud Agent affected versions not specified Description: A vulnerability in Cisco CX Cloud Agent could allow an authenticated, local attacker to elevate their privileges due to insecure file permissions. An attacker could exploit thi...

7.3CVSS6.5AI score0.00143EPSS
SaveExploits0References6
ICS
ICS
•added 2022/12/22 12:00 a.m.•52 views

Omron CX-Programmer

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Omron Equipment: CX-Programmer Vulnerability: Out-of-bounds Write 2. RISK EVALUATION Successful exploitation of this vulnerability could allow arbitrary code execution or loss of sensitive information if a user opens a...

7.8CVSS8AI score0.00252EPSS
SaveExploits0References4
NVD
NVD
•added 2022/12/21 9:15 a.m.•26 views

CVE-2022-46282

Use after free vulnerability in CX-Drive V3.00 and earlier allows a local attacker to execute arbitrary code by having a user to open a specially crafted file,...

7.8CVSS0.00237EPSS
SaveExploits0References1
OSV
OSV
•added 2022/12/21 9:15 a.m.•14 views

CVE-2022-46282

Use after free vulnerability in CX-Drive V3.00 and earlier allows a local attacker to execute arbitrary code by having a user to open a specially crafted file,...

7.8CVSS6.1AI score0.00237EPSS
SaveExploits0References1
Prion
Prion
•added 2022/12/21 9:15 a.m.•26 views

Design/Logic Flaw

Use after free vulnerability in CX-Drive V3.00 and earlier allows a local attacker to execute arbitrary code by having a user to open a specially crafted file,...

4.4CVSS8AI score0.00237EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2022/12/21 12:00 a.m.•14 views

CVE-2022-46282

Use after free vulnerability in CX-Drive V3.00 and earlier allows a local attacker to execute arbitrary code by having a user to open a specially crafted file,...

8AI score0.00237EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2022/12/21 12:00 a.m.•39 views

CVE-2022-46282

Use after free vulnerability in CX-Drive V3.00 and earlier allows a local attacker to execute arbitrary code by having a user to open a specially crafted file,...

8.2AI score0.00237EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/21 12:00 a.m.•2 views

CVE-2022-46282: Use After Free

Use after free vulnerability in CX-Drive V3.00 and earlier allows a local attacker to execute arbitrary code by having a user to open a specially crafted file,...

7.8CVSS6.8AI score0.00237EPSS
SaveExploits0References3
CVE
CVE
•added 2022/12/21 12:00 a.m.•76 views

CVE-2022-46282

CVE-2022-46282 affects Omron CX-Drive, specifically versions 3.00 and earlier. The issue is a use-after-free vulnerability in CX-Drive that allows a local attacker to execute arbitrary code when a user opens a specially crafted file. The Red Hat/NVD/JVN and related records confirm the local-execu...

7.8CVSS7.9AI score0.00237EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2022/12/21 12:00 a.m.•20 views

PT-2022-27797 · Cx-Drive · Cx-Drive

Name of the Vulnerable Software and Affected Versions: CX-Drive versions 3.00 and earlier Description: The issue allows a local attacker to execute arbitrary code by having a user open a specially crafted file. This is due to a use after free vulnerability. Recommendations: For CX-Drive versions...

7.8CVSS7.7AI score0.00237EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2022/12/19 12:00 a.m.•14 views

Omron CX-Drive 资源管理错误漏洞

Omron CX-Drive is a CX drive software for inverters and servos from Omron Japan. A security vulnerability exists in Omron CX-Drive V3.00 and earlier versions, which stems from the fact that CX-Drive contains a post-release reuse, which can be exploited by an attacker to allow execution of arbitra...

7.8CVSS7.8AI score0.00237EPSS
SaveExploits0References3
OSV
OSV
•added 2022/12/16 5:15 p.m.•8 views

CVE-2022-41992

A memory corruption vulnerability exists in the VHD File Format parsing CXSPARSE record functionality of PowerISO PowerISO 8.3. A specially-crafted file can lead to an out-of-bounds write. A victim needs to open a malicious file to trigger this vulnerability...

7.8CVSS5.8AI score0.00469EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
•added 2022/12/16 12:00 a.m.•18 views

The vulnerability of the software package for creating the position control system CX-Position, which is part of the Omron CX-One software suite, lies in the ability to write data beyond the buffer memory. This allows a hacker to execute arbitrary code.

The vulnerability of the software package for creating the position control system CX-Position, which is part of the Omron CX-One software suite, relates to the ability to write data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary...

7.8CVSS7.7AI score0.01504EPSS
SaveExploits0References7Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/12/14 12:00 a.m.•15 views

The vulnerability of Omron CX-Programmer software for programming logic controllers lies in the use of memory after it is freed. This allows a malicious actor to gain unauthorized access to protected information or execute arbitrary code.

The vulnerability of Omron CX-Programmer software for programming logic controllers is related to the use of memory after it is freed. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information or execute arbitrary code using a specially created CXP...

7.8CVSS7.6AI score0.00259EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/12/09 12:00 a.m.•20 views

The vulnerability of the software package for creating the CX-Position position control system, which is part of the Omron CX-One software suite, allows a perpetrator to execute arbitrary code.

The vulnerability of the software package for creating the CX-Position position control system, which is part of the Omron CX-One software suite, relates to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created file...

7.8CVSS8AI score0.0212EPSS
SaveExploits0References11Affected Software1
OSV
OSV
•added 2022/12/07 4:15 a.m.•14 views

CVE-2022-43667

Stack-based buffer overflow vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file...

7.8CVSS6.5AI score0.00284EPSS
SaveExploits0References2
OSV
OSV
•added 2022/12/07 4:15 a.m.•14 views

CVE-2022-43508

Use-after free vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file...

7.8CVSS6.3AI score0.00259EPSS
SaveExploits0References2
NVD
NVD
•added 2022/12/07 4:15 a.m.•34 views

CVE-2022-43667

Stack-based buffer overflow vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file...

7.8CVSS0.00284EPSS
SaveExploits0References2
OSV
OSV
•added 2022/12/07 4:15 a.m.•18 views

CVE-2022-43509

Out-of-bounds write vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file...

7.8CVSS6.3AI score0.00252EPSS
SaveExploits0References2
NVD
NVD
•added 2022/12/07 4:15 a.m.•40 views

CVE-2022-43509

Out-of-bounds write vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file...

7.8CVSS0.00252EPSS
SaveExploits0References2
Rows per page
Query Builder