Lucene search
K

2506 matches found

Cvelist
Cvelist
added 2025/04/08 3:28 p.m.16 views

CVE-2025-3286 Local Code Execution Vulnerability in Arena®

A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to read outside of the allocated memory buffer. The flaw is a result of improper validation of user-supplied data. If exploited a threat actor can disclose information and execute...

8.5CVSS0.00249EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/04/08 3:26 p.m.18 views

CVE-2025-3285 Local Code Execution Vulnerability in Arena®

A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to read outside of the allocated memory buffer. The flaw is a result of improper validation of user-supplied data. If exploited a threat actor can disclose information and execute...

8.5CVSS0.00249EPSS
Exploits0References1
CVE
CVE
added 2025/04/08 3:24 p.m.52 views

CVE-2025-2829

CVE-2025-2829 affects Rockwell Automation Arena. The vulnerability is a local code execution issue caused by improper validation of user-supplied data, allowing a threat actor to write outside the allocated memory buffer. To exploit, a legitimate user must open a malicious DOE file, potentially e...

8.5CVSS7.6AI score0.00249EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2025/04/08 3:24 p.m.10 views

CVE-2025-2829 Local Code Execution Vulnerability in Arena®

A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to write outside of the allocated memory buffer. The flaw is a result of improper validation of user-supplied data. If exploited a threat actor can disclose information and execute...

8.5CVSS0.00249EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/04/08 3:20 p.m.7 views

CVE-2025-2293 Local Code Execution Vulnerability in Arena®

A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to write outside of the allocated memory buffer. The flaw is a result of improper validation of user-supplied data. If exploited a threat actor can disclose information and execute...

8.5CVSS7.6AI score0.00249EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/04/08 3:20 p.m.31 views

CVE-2025-2293 Local Code Execution Vulnerability in Arena®

A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to write outside of the allocated memory buffer. The flaw is a result of improper validation of user-supplied data. If exploited a threat actor can disclose information and execute...

8.5CVSS0.00249EPSS
Exploits0References1
CVE
CVE
added 2025/04/08 3:20 p.m.56 views

CVE-2025-2293

CVE-2025-2293 describes a local code execution vulnerability in Rockwell Automation Arena where a threat actor can disclose information and execute arbitrary code by writing outside the allocated memory buffer due to improper validation of user-supplied data. Exploitation requires a legitimate us...

8.5CVSS7.6AI score0.00249EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/04/08 3:19 p.m.5 views

CVE-2025-2288 Local Code Execution Vulnerability in Arena®

A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to write outside of the allocated memory buffer. The flaw is a result of improper validation of user-supplied data. If exploited a threat actor can disclose information and execute...

8.5CVSS7.6AI score0.00249EPSS
Exploits0References1
CVE
CVE
added 2025/04/08 3:19 p.m.49 views

CVE-2025-2288

CVE-2025-2288 describes a local code execution vulnerability in Rockwell Automation Arena. The issue arises from improper validation of user-supplied data which can allow a threat actor to write outside the allocated memory buffer, leading to information disclosure and arbitrary code execution. E...

8.5CVSS7.6AI score0.00249EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2025/04/08 3:19 p.m.17 views

CVE-2025-2288 Local Code Execution Vulnerability in Arena®

A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to write outside of the allocated memory buffer. The flaw is a result of improper validation of user-supplied data. If exploited a threat actor can disclose information and execute...

8.5CVSS0.00249EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/04/08 12:0 a.m.4 views

PT-2025-15458 · Rockwell Automation · Rockwell Automation Arena

Name of the Vulnerable Software and Affected Versions: Rockwell Automation Arena affected versions not specified Description: A local code execution issue exists due to a threat actor being able to read outside of the allocated memory buffer. This is a result of improper validation of user-suppli...

8.5CVSS6.8AI score0.00249EPSS
Exploits0References5
NVD
NVD
added 2025/04/07 12:15 p.m.8 views

CVE-2025-0050

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to make valid GPU processing operations,...

5.9CVSS0.00139EPSS
Exploits0References1
CVE
CVE
added 2025/04/07 12:2 p.m.106 views

CVE-2025-0050

Arm Mali GPU drivers (Bifrost, Valhall, and Arm 5th Gen) expose CVE-2025-0050: Improper memory buffer bound checks allow a non-privileged process to perform GPU operations (including via WebGL/WebGPU) outside of buffer bounds. Affected: Bifrost userspace driver r0p0–r49p2 and r50p0–r51p0; Valhall...

5.9CVSS7.3AI score0.00139EPSS
Exploits0References1Affected Software3
Positive Technologies
Positive Technologies
added 2025/04/07 12:0 a.m.4 views

PT-2025-15449 · Rockwell Automation · Rockwell Automation Arena

Name of the Vulnerable Software and Affected Versions: Rockwell Automation Arena affected versions not specified Description: A local code execution issue exists due to a threat actor being able to write outside of the allocated memory buffer. This is a result of improper validation of...

8.5CVSS6.9AI score0.00249EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2025/04/07 12:0 a.m.4 views

PT-2025-15450 · Rockwell Automation · Rockwell Automation Arena

Name of the Vulnerable Software and Affected Versions: Rockwell Automation Arena affected versions not specified Description: A local code execution issue exists due to a threat actor being able to write outside of the allocated memory buffer, resulting from improper validation of user-supplied...

8.5CVSS6.9AI score0.00249EPSS
Exploits0References7
BDU FSTEC
BDU FSTEC
added 2025/04/07 12:0 a.m.4 views

The vulnerability of the SIEM system testing tool Kraken Stress Testing Toolkit lies in the reading beyond the buffer in memory, allowing a malicious actor to trigger a service failure.

The vulnerability of the SIEM systems’ load testing tools, such as the Kraken Stress Testing Toolkit, lies in the reading of data beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.8CVSS5.7AI score
Exploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/04 12:0 a.m.4 views

Vulnerability of software for modeling, design, and drawing in AutoCAD, related to reading data outside the buffer in memory, allowing a perpetrator to cause service failures and gain unauthorized access to protected information

The vulnerability of software for modeling, design, and drawing in AutoCAD is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause system failures and gain unauthorized access to protected information using a specially create...

7.8CVSS7.4AI score0.00224EPSS
Exploits0References5Affected Software9
BDU FSTEC
BDU FSTEC
added 2025/04/03 12:0 a.m.6 views

The vulnerability of the IBM Common Cryptographic Architecture (CCA) lies in the writing beyond the buffer boundaries in memory, which allows a attacker to trigger a failure in the operation of the Hardware Security Module (HSM).

The vulnerability of the IBM Common Cryptographic Architecture CCA lies in the writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause a failure in the Hardware Security Module HSM’s security hardware module by usin...

6.8CVSS5.7AI score0.00346EPSS
Exploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/04/03 12:0 a.m.3 views

The vulnerability of the xe_device_probe() function in the DRI driver allows a hacker to induce a service failure.

The vulnerability of the xedeviceprobe function in the DRI driver is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.8AI score0.00185EPSS
Exploits0References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/26 12:0 a.m.4 views

The vulnerability of Adobe Illustrator’s graphic editor lies in the possibility of an operation going beyond the buffer boundaries in memory, allowing a hacker to execute arbitrary code.

The vulnerability of Adobe Illustrator’s graphic editor is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created malicious file...

7.8CVSS6.4AI score0.0022EPSS
Exploits0References3Affected Software2
Rows per page
Query Builder