Lucene search
K

4304 matches found

Cvelist
Cvelist
added 2025/04/08 3:26 p.m.18 views

CVE-2025-3285 Local Code Execution Vulnerability in Arena®

A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to read outside of the allocated memory buffer. The flaw is a result of improper validation of user-supplied data. If exploited a threat actor can disclose information and execute...

8.5CVSS0.00249EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/04/08 3:24 p.m.10 views

CVE-2025-2829 Local Code Execution Vulnerability in Arena®

A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to write outside of the allocated memory buffer. The flaw is a result of improper validation of user-supplied data. If exploited a threat actor can disclose information and execute...

8.5CVSS0.00249EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/04/08 3:20 p.m.7 views

CVE-2025-2293 Local Code Execution Vulnerability in Arena®

A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to write outside of the allocated memory buffer. The flaw is a result of improper validation of user-supplied data. If exploited a threat actor can disclose information and execute...

8.5CVSS7.6AI score0.00249EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/04/08 3:20 p.m.31 views

CVE-2025-2293 Local Code Execution Vulnerability in Arena®

A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to write outside of the allocated memory buffer. The flaw is a result of improper validation of user-supplied data. If exploited a threat actor can disclose information and execute...

8.5CVSS0.00249EPSS
Exploits0References1
CVE
CVE
added 2025/04/08 3:20 p.m.56 views

CVE-2025-2293

CVE-2025-2293 describes a local code execution vulnerability in Rockwell Automation Arena where a threat actor can disclose information and execute arbitrary code by writing outside the allocated memory buffer due to improper validation of user-supplied data. Exploitation requires a legitimate us...

8.5CVSS7.6AI score0.00249EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/04/08 3:19 p.m.5 views

CVE-2025-2288 Local Code Execution Vulnerability in Arena®

A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to write outside of the allocated memory buffer. The flaw is a result of improper validation of user-supplied data. If exploited a threat actor can disclose information and execute...

8.5CVSS7.6AI score0.00249EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/04/08 3:19 p.m.17 views

CVE-2025-2288 Local Code Execution Vulnerability in Arena®

A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to write outside of the allocated memory buffer. The flaw is a result of improper validation of user-supplied data. If exploited a threat actor can disclose information and execute...

8.5CVSS0.00249EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/04/08 3:16 p.m.9 views

CVE-2025-2287 Local Code Execution Vulnerability in Arena®

A local code execution vulnerability exists in the Rockwell Automation Arena® due to an uninitialized pointer. The flaw is result of improper validation of user-supplied data. If exploited a threat actor can disclose information and execute arbitrary code on the system. To exploit the...

8.5CVSS7.3AI score0.00249EPSS
Exploits0References1
CVE
CVE
added 2025/04/08 3:16 p.m.53 views

CVE-2025-2287

CVE-2025-2287 is a local code-execution vulnerability in Rockwell Automation Arena® caused by an uninitialized pointer resulting from improper validation of user-supplied data. A threat actor could disclose information and execute arbitrary code if a legitimate user opens a malicious DOE file. Ex...

8.5CVSS7.6AI score0.00249EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2025/04/08 3:16 p.m.28 views

CVE-2025-2287 Local Code Execution Vulnerability in Arena®

A local code execution vulnerability exists in the Rockwell Automation Arena® due to an uninitialized pointer. The flaw is result of improper validation of user-supplied data. If exploited a threat actor can disclose information and execute arbitrary code on the system. To exploit the...

8.5CVSS0.00249EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/04/08 3:16 p.m.4 views

CVE-2025-2286 Local Code Execution Vulnerability in Arena®

A local code execution vulnerability exists in the Rockwell Automation Arena® due to an uninitialized pointer. The flaw is result of improper validation of user-supplied data. If exploited a threat actor can disclose information and execute arbitrary code on the system. To exploit the...

8.5CVSS7.6AI score0.00249EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/04/08 3:16 p.m.11 views

CVE-2025-2286 Local Code Execution Vulnerability in Arena®

A local code execution vulnerability exists in the Rockwell Automation Arena® due to an uninitialized pointer. The flaw is result of improper validation of user-supplied data. If exploited a threat actor can disclose information and execute arbitrary code on the system. To exploit the...

8.5CVSS0.00249EPSS
Exploits0References1
CVE
CVE
added 2025/04/08 3:16 p.m.48 views

CVE-2025-2286

CVE-2025-2286 : Local code execution in Rockwell Automation Arena due to an uninitialized pointer from improper validation of user-supplied data. A legitimate user must open a malicious DOE file to exploit, enabling information disclosure and arbitrary code execution on the system. Reported remed...

8.5CVSS7.6AI score0.00249EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/04/08 3:15 p.m.6 views

CVE-2025-2285 Local Code Execution Vulnerability in Arena®

A local code execution vulnerability exists in the Rockwell Automation Arena® due to an uninitialized pointer. The flaw is result of improper validation of user-supplied data. If exploited a threat actor can disclose information and execute arbitrary code on the system. To exploit the...

8.5CVSS7.6AI score0.00247EPSS
Exploits0References1
CVE
CVE
added 2025/04/08 3:15 p.m.47 views

CVE-2025-2285

Rockwell Automation Arena is affected by a local code execution vulnerability (CVE-2025-2285) due to an uninitialized pointer from improper validation of user-supplied data. Exploitation requires a legitimate user to open a malicious DOE file, enabling information disclosure and arbitrary code ex...

8.5CVSS7.6AI score0.00247EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2025/04/08 3:15 p.m.16 views

CVE-2025-2285 Local Code Execution Vulnerability in Arena®

A local code execution vulnerability exists in the Rockwell Automation Arena® due to an uninitialized pointer. The flaw is result of improper validation of user-supplied data. If exploited a threat actor can disclose information and execute arbitrary code on the system. To exploit the...

8.5CVSS0.00247EPSS
Exploits0References1
Microsoft CVE
Microsoft CVE
added 2025/04/08 7:0 a.m.16 views

Windows Media Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Media allows an authorized attacker to execute code locally...

7.8CVSS7.8AI score0.00555EPSS
Exploits0
CNNVD
CNNVD
added 2025/04/08 12:0 a.m.1 views

Rockwell Automation Arena 缓冲区错误漏洞

Rockwell Automation Arena is a discrete-event simulation and automation software from Rockwell Automation USA. A local code execution vulnerability exists in Rockwell Automation Arena due to improper validation of user-supplied data. An attacker could exploit the vulnerability to disclose...

8.5CVSS7.4AI score0.00249EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/04/08 12:0 a.m.1 views

Rockwell Automation Arena 安全漏洞

Rockwell Automation Arena is a discrete-event simulation and automation software from Rockwell Automation USA. A local code execution vulnerability exists in Rockwell Automation Arena due to improper validation of user-supplied data. An attacker could exploit the vulnerability to disclose...

8.5CVSS7.4AI score0.00253EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/04/08 12:0 a.m.2 views

Rockwell Automation Arena 缓冲区错误漏洞

Rockwell Automation Arena is a discrete-event simulation and automation software from Rockwell Automation USA. A local code execution vulnerability exists in Rockwell Automation Arena due to improper validation of user-supplied data. An attacker could exploit the vulnerability to disclose...

8.5CVSS7.4AI score0.00249EPSS
Exploits0References2
Rows per page
Query Builder