Lucene search
K

5838 matches found

CNNVD
CNNVD
added 2025/04/08 12:0 a.m.2 views

Rockwell Automation Arena 安全漏洞

Rockwell Automation Arena is a discrete-event simulation and automation software from Rockwell Automation USA. A local code execution vulnerability exists in Rockwell Automation Arena due to improper validation of user-supplied data. An attacker could exploit the vulnerability to disclose...

8.5CVSS7.4AI score0.00249EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/04/08 12:0 a.m.3 views

Rockwell Automation Arena 缓冲区错误漏洞

Rockwell Automation Arena is a discrete-event simulation and automation software from Rockwell Automation USA. A local code execution vulnerability exists in Rockwell Automation Arena due to improper validation of user-supplied data. An attacker could exploit the vulnerability to disclose...

8.5CVSS7.4AI score0.00249EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/04/08 12:0 a.m.2 views

Rockwell Automation Arena 缓冲区错误漏洞

Rockwell Automation Arena is a discrete-event simulation and automation software from Rockwell Automation USA. A local code execution vulnerability exists in Rockwell Automation Arena due to improper validation of user-supplied data. An attacker could exploit the vulnerability to disclose...

8.5CVSS7.4AI score0.00249EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/04/08 12:0 a.m.2 views

Rockwell Automation Arena 安全漏洞

Rockwell Automation Arena is a discrete-event simulation and automation software from Rockwell Automation USA. A local code execution vulnerability exists in Rockwell Automation Arena due to improper validation of user-supplied data. An attacker could exploit the vulnerability to disclose...

8.5CVSS7.4AI score0.00247EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/04/07 12:0 a.m.3 views

PT-2025-15451 · Rockwell Automation · Rockwell Automation Arena

Name of the Vulnerable Software and Affected Versions: Rockwell Automation Arena affected versions not specified Description: A local code execution issue exists due to improper validation of user-supplied data, allowing a threat actor to write outside of the allocated memory buffer. If exploited...

8.5CVSS6.7AI score0.00249EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2025/04/07 12:0 a.m.6 views

PT-2025-15448 · Rockwell Automation · Rockwell Automation Arena

Name of the Vulnerable Software and Affected Versions: Rockwell Automation Arena affected versions not specified Description: A local code execution issue exists due to an uninitialized pointer, resulting from improper validation of user-supplied data. If exploited, a threat actor can disclose...

8.5CVSS7AI score0.00249EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2025/04/07 12:0 a.m.2 views

PT-2025-15444 · Rockwell Automation · Rockwell Automation Arena

Name of the Vulnerable Software and Affected Versions: Rockwell Automation Arena affected versions not specified Description: A local code execution issue exists due to an uninitialized pointer, resulting from improper validation of user-supplied data. If exploited, a threat actor can disclose...

8.5CVSS6.9AI score0.00249EPSS
Exploits0References6
Tenable Nessus
Tenable Nessus
added 2025/04/06 12:0 a.m.7 views

Debian dla-4117 : atop - security update

The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dla-4117 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4117-1 [email protected] https://www.debian.org/lts/security/...

2.9CVSS5.1AI score0.00177EPSS
Exploits0References4
Debian
Debian
added 2025/04/03 8:29 p.m.13 views

[SECURITY] [DSA 5892-1] atop security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5892-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 03, 2025 https://www.debian.org/security/faq -...

2.9CVSS6.8AI score0.00177EPSS
Exploits0
CNVD
CNVD
added 2025/03/27 12:0 a.m.7 views

Tenda AC7 Buffer Overflow Vulnerability (CNVD-2025-07593)

Tenda AC7 is a wireless router from Tenda, a Chinese company. The Tenda AC7 suffers from a buffer overflow vulnerability that originates from the timeZone parameter of the formfastsettingwifiset function failing to properly validate the length of the input data, which can be exploited by an...

9.8CVSS8.1AI score0.0051EPSS
Exploits1References1
CNVD
CNVD
added 2025/03/27 12:0 a.m.3 views

Tenda AX12 Buffer Overflow Vulnerability (CNVD-2025-07608)

Tenda AX12 is a dual-band Gigabit Wifi 6 wireless router from Tenda China. The Tenda AX12 suffers from a buffer overflow vulnerability that originates from the sub43fdcc function in /goform/SetNetControlList that fails to correctly validate the length of the input data, which can be exploited by ...

6.5CVSS8.2AI score0.00757EPSS
Exploits1References1
CNVD
CNVD
added 2025/03/27 12:0 a.m.5 views

AC8 Buffer Overflow Vulnerability (CNVD-2025-07594) in Shenzhen Jixiang Tengda Technology Co.

Shenzhen Jixiang Tengda Technology Co., Ltd AC8 is a wireless router. Shenzhen Jixiang Tengda Technology Co., Ltd AC8 has a buffer overflow vulnerability, the vulnerability stems from the sub47D878 function's src parameter fails to correctly validate the length of the input data size, an attacker...

6.5CVSS7.1AI score0.00328EPSS
Exploits1References1
BDU FSTEC
BDU FSTEC
added 2025/03/27 12:0 a.m.10 views

The vulnerability of the Golang programming language, related to improper validation of input data, allows attackers to circumvent established security restrictions.

The vulnerability of the Golang programming language is related to improper validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to circumvent established security measures...

6.4CVSS6.4AI score0.00458EPSS
Exploits0References6Affected Software5
BDU FSTEC
BDU FSTEC
added 2025/03/25 12:0 a.m.4 views

The vulnerability of the ingress controller in the Kubernetes cluster ingress-nginx, related to insufficient validation of incoming data, allows a hacker to execute arbitrary code.

The vulnerability of the ingress controller in the Kubernetes cluster ingress-nginx is related to insufficient validation of incoming data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9CVSS7.1AI score0.99098EPSS
Exploits21References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/17 12:0 a.m.7 views

The vulnerability of the gitRepo function in the Kubernetes cluster management software allows a attacker to influence the confidentiality and integrity of the protected information.

The vulnerability of the gitRepo function in the Kubernetes cluster management software is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to influence the confidentiality and integrity of the protected information...

8.5CVSS6AI score0.00516EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2025/03/15 5:5 p.m.16 views

CVE-2024-12858

Delta Electronics CNCSoft-G2 Version 2.1.0.16 and prior lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. If a target visits a malicious page or opens a malicious file an attacker can leverage this vulnerability to execute code in...

7.2AI score
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2025/03/14 12:0 a.m.4 views

The vulnerability of Microsoft Surface sensor display microprogramming software, related to insufficient validation of input data, allows a hacker to bypass security functions.

The vulnerability of Microsoft Surface sensor display software is related to insufficient testing of input data. Exploiting this vulnerability could allow a remote attacker to bypass security measures...

7.1CVSS7.7AI score0.00823EPSS
Exploits0References2
CNVD
CNVD
added 2025/03/13 12:0 a.m.8 views

Tenda TX3 setNetControllist function buffer overflow vulnerability

Tenda TX3 is a wireless router from Tenda, a Chinese company. A buffer overflow vulnerability exists in Tenda TX3 16.03.13.11multi, which originates when the parameter list of goform /setNetControllist fails to correctly validate the length of the input data, and can be exploited by an attacker t...

7.5CVSS8AI score0.01098EPSS
Exploits1References1
CNVD
CNVD
added 2025/03/13 12:0 a.m.7 views

Tenda tx3 Buffer Overflow Vulnerability

The Tenda tx3 is a wireless router from the Chinese company Tenda. The Tenda tx3 suffers from a buffer overflow vulnerability that originates from the parameter list of goform/setpptpuserlist failing to properly validate the length size of the input data, which can be exploited by an attacker to...

7.5CVSS7.2AI score0.00664EPSS
Exploits1References1
BDU FSTEC
BDU FSTEC
added 2025/03/13 12:0 a.m.5 views

The vulnerability of the System Management Mode (SMM) mode of AMD microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the System Management Mode SMM mode of AMD microprogramming processor software is related to insufficient checking of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.5CVSS5.8AI score0.00176EPSS
Exploits0References5Affected Software1
Rows per page
Query Builder