12503 matches found
CVE-2025-9437 Rockwell Automation ArmorStart® AOP Denial-of-Service Vulnerability
A security issue exists within the Studio 5000 Logix Designer add-on profile AOP for the ArmorStart Classic distributed motor controller, resulting in denial-of-service. This vulnerability is possible due to the input of invalid values into Component Object Model COM methods...
CVE-2025-9437
The CVE-2025-9437 entry describes a denial-of-service vulnerability in the Studio 5000 Logix Designer add-on profile (AOP) used with Rockwell Automation’s ArmorStart Classic distributed motor controller. Technical details across connected sources indicate the issue stems from inputting invalid va...
EUVD-2025-34179
A security issue exists within the Studio 5000 Logix Designer add-on profile AOP for the ArmorStart Classic distributed motor controller, resulting in denial-of-service. This vulnerability is possible due to the input of invalid values into Component Object Model COM methods...
CVE-2025-9437 Rockwell Automation ArmorStart® AOP Denial-of-Service Vulnerability
A security issue exists within the Studio 5000 Logix Designer add-on profile AOP for the ArmorStart Classic distributed motor controller, resulting in denial-of-service. This vulnerability is possible due to the input of invalid values into Component Object Model COM methods...
UBUNTU-CVE-2025-55248
Inadequate encryption strength in .NET, .NET Framework, Visual Studio allows an authorized attacker to disclose information over a network...
PT-2025-42007
Name of the Vulnerable Software and Affected Versions Visual Studio affected versions not specified Description An improper access control issue exists in Visual Studio, potentially allowing an authorized attacker to gain elevated privileges on a local system. Recommendations At the moment, there...
CVE-2025-9437: Improper Handling of Exceptional Conditions
A security issue exists within the Studio 5000 Logix Designer add-on profile AOP for the ArmorStart Classic distributed motor controller, resulting in denial-of-service. This vulnerability is possible due to the input of invalid values into Component Object Model COM methods...
CVE-2025-55248: Inadequate Encryption Strength
Inadequate encryption strength in .NET, .NET Framework, Visual Studio allows an authorized attacker to disclose information over a network...
CVE-2025-55240: Improper Access Control
Improper access control in Visual Studio allows an authorized attacker to elevate privileges locally...
PT-2025-41893
Name of the Vulnerable Software and Affected Versions Studio 5000 Logix Designer affected versions not specified Description A security issue exists that can lead to a denial-of-service condition. This is caused by providing invalid values to Component Object Model COM methods. The vulnerability...
KLA89273 Multiple vulnerabilities in Microsoft Developer Tools
Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information, cause denial of service, bypass security restrictions. Below is a complete list of vulnerabilities: 1. An elevation of privilege...
Microsoft Visual Studio 访问控制错误漏洞
Microsoft Visual Studio is a family of development tool suites and a largely complete set of development tools from Microsoft Corporation USA that includes most of the tools needed throughout the software lifecycle. An Access Control Error vulnerability exists in Microsoft Visual Studio, which...
Microsoft多款产品 加密问题漏洞
Microsoft Visual Studio and others are products of Microsoft Corporation, U.S.A. Microsoft Visual Studio is a family of development tool suites and a fundamentally complete set of development tools, Microsoft .NET Framework is a comprehensive and consistent programming model, and a development...
PT-2025-42009
Name of the Vulnerable Software and Affected Versions .NET, .NET Framework, Visual Studio affected versions not specified Description An issue with encryption strength exists in .NET, .NET Framework, and Visual Studio. This can allow an attacker who is already authorized to disclose information...
CVE-2025-61929
Cherry Studio is a desktop client that supports for multiple LLM providers. Cherry Studio registers a custom protocol called cherrystudio://. When handling the MCP installation URL, it parses the base64-encoded configuration data and directly executes the command within it. In the files...
CVE-2025-61929
Cherry Studio is a desktop client that supports for multiple LLM providers. Cherry Studio registers a custom protocol called cherrystudio://. When handling the MCP installation URL, it parses the base64-encoded configuration data and directly executes the command within it. In the files...
CVE-2025-61929 Cherry Studio allows one-click on a specific URL to cause a command to execute
Cherry Studio is a desktop client that supports for multiple LLM providers. Cherry Studio registers a custom protocol called cherrystudio://. When handling the MCP installation URL, it parses the base64-encoded configuration data and directly executes the command within it. In the files...
CVE-2025-61929
Cherry Studio is affected by a code-injection vulnerability where the cherrystudio://mcp protocol handler parses base64-encoded configuration data and directly executes the contained command. Affected component paths include src/main/services/ProtocolClient.ts and src/main/services/urlschema/mcp-...
CVE-2025-61929 Cherry Studio allows one-click on a specific URL to cause a command to execute
Cherry Studio is a desktop client that supports for multiple LLM providers. Cherry Studio registers a custom protocol called cherrystudio://. When handling the MCP installation URL, it parses the base64-encoded configuration data and directly executes the command within it. In the files...
EUVD-2025-33778
Cherry Studio is a desktop client that supports for multiple LLM providers. Cherry Studio registers a custom protocol called cherrystudio://. When handling the MCP installation URL, it parses the base64-encoded configuration data and directly executes the command within it. In the files...