Lucene search
+L

2175 matches found

OSV
OSV
added 2019/09/24 10:15 p.m.9 views

CVE-2019-13527

In Rockwell Automation Arena Simulation Software Cat. 9502-Ax, Versions 16.00.00 and earlier, a maliciously crafted Arena file opened by an unsuspecting user may result in the use of a pointer that has not been initialized...

7.8CVSS5.8AI score0.05289EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
added 2019/09/05 12:0 a.m.26 views

Red Lion Crimson CD3 File Parsing Uninitialized Pointer Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Red Lion Crimson. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of CD...

7.8CVSS6AI score0.0101EPSS
SaveExploits0References1
exploitpack
exploitpack
added 2019/08/15 12:0 a.m.29 views

Adobe Acrobat Reader DC for Windows - free() of Uninitialized Pointer due to Malformed JBIG2Globals Stream

Adobe Acrobat Reader DC for Windows - free of Uninitialized Pointer due to Malformed JBIG2Globals Stream We have observed the following access violation exception in the latest version of Adobe Acrobat Reader DC for Windows, when opening a malformed PDF file: --- cut --- 4970.179c: Access violati...

0.5AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2019/07/04 12:0 a.m.6 views

The vulnerability of the components of the PC Worx, PC Worx Express, INTERBUS Config+ software suite, related to the access to an uninitialized pointer, allows a perpetrator to execute arbitrary code.

The vulnerability of the PC Worx, PC Worx Express, INTERBUS Config+ software package, and the Automationworx Software Suite components is related to the access to an uninitialized pointer. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9CVSS5.9AI score0.03707EPSS
SaveExploits0References5Affected Software1
NVD
NVD
added 2019/06/24 4:15 p.m.30 views

CVE-2019-12870

An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86. A manipulated PC Worx or Config+ project file could lead to an Uninitialized Pointer and remote code execution. The attacker needs to get access to an original PC Worx or Confi...

8.8CVSS8.9AI score0.03707EPSS
SaveExploits0References2
OSV
OSV
added 2019/06/24 4:15 p.m.6 views

CVE-2019-12870

An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86. A manipulated PC Worx or Config+ project file could lead to an Uninitialized Pointer and remote code execution. The attacker needs to get access to an original PC Worx or Confi...

8.8CVSS7.5AI score0.03707EPSS
SaveExploits0References2
Prion
Prion
added 2019/06/24 4:15 p.m.24 views

Remote code execution

An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86. A manipulated PC Worx or Config+ project file could lead to an Uninitialized Pointer and remote code execution. The attacker needs to get access to an original PC Worx or Confi...

6.8CVSS8.8AI score0.03707EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2019/06/24 3:20 p.m.64 views

CVE-2019-12870

PHOENIX CONTACT Automation Worx Software Suite (PC Worx, PC Worx Express, Config+; v1.86 and earlier) is affected by CVE-2019-12870. The issue is an uninitialized pointer leading to remote code execution. An attacker must obtain an original PC Worx/Config+ project file, manipulate it, and replace...

8.8CVSS8.8AI score0.03707EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2019/06/24 3:20 p.m.28 views

CVE-2019-12870

An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86. A manipulated PC Worx or Config+ project file could lead to an Uninitialized Pointer and remote code execution. The attacker needs to get access to an original PC Worx or Confi...

8.9AI score0.03707EPSS
SaveExploits0References2
CNVD
CNVD
added 2019/06/21 12:0 a.m.7 views

Phoenix Contact Automation Worx Software Suite Uninitialized Pointer Access Vulnerability

Automation Worx Software Suite is an automation software package from Phoenix Contact. An uninitialized pointer access vulnerability exists in the PC Worx, PC Worx Express, and Config+ components in Phoenix Contact Automation Worx Software Suite versions 1.86 and earlier. An attacker could exploi...

8.8CVSS8AI score0.03707EPSS
SaveExploits0References1
Veracode
Veracode
added 2019/05/02 5:39 a.m.54 views

Denial Of Service (DoS)

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The php55 packages provide a recent stable release of PHP with the PEAR 1.9.4, memcache 3.0.8, and mongo 1.4.5 PECL extensions, and a number of additional utilities. The php55 packages have been upgraded to...

7.5CVSS9.2AI score0.53166EPSS
SaveExploits33References52Affected Software6
Veracode
Veracode
added 2019/05/02 4:42 a.m.28 views

Denial Of Service (DoS)

The IcedTea-Web project provides a Java web browser plug-in and an implementation of Java Web Start, which is based on the Netx project. It also contains a configuration tool for managing deployment settings for the plug-in and Web Start implementations. An uninitialized pointer use flaw was foun...

7.5CVSS9.3AI score0.06172EPSS
SaveExploits1References20Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2019/04/15 12:0 a.m.26 views

Microsoft Windows EMF File Uninitialized Pointer Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling o...

7.8CVSS3.8AI score0.27571EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2019/04/04 12:0 a.m.11 views

The vulnerability of the CAF demultiplexer in the VideoLAN VLC media player lies in the access to an uninitialized pointer, which allows a hacker to trigger a service failure and/or gain access to confidential data.

The vulnerability of the CAF media player VideoLAN VLC lies in the access to an uninitialized pointer due to a numerical overflow during the processing of cookie files in the ReadKukiChunk function. Exploiting this vulnerability allows a remote attacker to cause service failures and/or gain acces...

9.1CVSS7.8AI score0.03916EPSS
SaveExploits1References4Affected Software2
Zero Day Initiative
Zero Day Initiative
added 2019/04/04 12:0 a.m.29 views

Microsoft Windows VBScript Array Uninitialized Pointer Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft VBScript. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling ...

7.5CVSS3.4AI score0.3126EPSS
SaveExploits2References1
NVD
NVD
added 2019/04/01 3:29 p.m.20 views

CVE-2019-3836

It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer access in gnutls versions 3.6.3 or later which can be triggered by certain post-handshake messages...

7.5CVSS6.5AI score0.03401EPSS
SaveExploits1References8
OSV
OSV
added 2019/04/01 3:29 p.m.3 views

ALPINE-CVE-2019-3836

It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer access in gnutls versions 3.6.3 or later which can be triggered by certain post-handshake messages...

7.5CVSS7AI score0.03401EPSS
SaveExploits1References1
OSV
OSV
added 2019/04/01 3:29 p.m.3 views

DEBIAN-CVE-2019-3836

It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer access in gnutls versions 3.6.3 or later which can be triggered by certain post-handshake messages...

7.5CVSS7.8AI score0.03401EPSS
SaveExploits1References1
OSV
OSV
added 2019/04/01 3:29 p.m.23 views

CVE-2019-3836

It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer access in gnutls versions 3.6.3 or later which can be triggered by certain post-handshake messages...

7.5CVSS7.1AI score
SaveExploits0References8
Cvelist
Cvelist
added 2019/04/01 2:16 p.m.34 views

CVE-2019-3836

It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer access in gnutls versions 3.6.3 or later which can be triggered by certain post-handshake messages...

5.9CVSS6.3AI score0.03401EPSS
SaveExploits1References8
Rows per page
Query Builder