Lucene search
+L

2175 matches found

BDU FSTEC
BDU FSTEC
added 2025/04/18 12:0 a.m.13 views

The vulnerability of the __skb_set_length() function in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the skbsetlength function in the Linux operating system’s kernel is related to the use of an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.7AI score0.00259EPSS
SaveExploits0References20Affected Software10
RedHat Linux
RedHat Linux
added 2025/04/17 6:39 a.m.13 views

xorg: xwayland: Use of uninitialized pointer in compRedirectWindow()

An access to an uninitialized pointer flaw was found in X.Org and Xwayland. The function compCheckRedirect may fail if it cannot allocate the backing pixmap. In that case, compRedirectWindow will return a BadAlloc error without validating the window tree marked just before, which leaves the...

7.8CVSS7AI score0.00397EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2025/04/16 12:0 a.m.9 views

Rockwell Automation Arena < 16.20.09 Multiple Vulnerabilities

The version of Rockwell Automation Arena installed on the remote Windows host is prior to 16.20.09. It is, therefore, affected by a multiple vulnerabilities - A local code execution vulnerability exists in the affected products due to an uninitialized pointer. The flaw is result of improper...

8.5CVSS7.3AI score0.00298EPSS
SaveExploits0References12
BDU FSTEC
BDU FSTEC
added 2025/04/14 12:0 a.m.15 views

The vulnerability of the compRedirectWindow() function in the Wayland protocol for X.Org XWayland, which is implemented in the X Window System X.Org Server, allows a attacker to execute arbitrary code.

The vulnerability of the compRedirectWindow function in the Wayland protocol for X.Org XWayland, which is part of the X Window System X.Org Server, relates to access to an uninitialized pointer. Exploiting this vulnerability could allow a attacker to execute arbitrary code...

7.8CVSS7.6AI score0.00397EPSS
SaveExploits0References17Affected Software14
BDU FSTEC
BDU FSTEC
added 2025/04/14 12:0 a.m.16 views

The vulnerability of the tagged_addr_ctrl_get() function in the arch/arm64/kernel/ptrace.c module, which is part of the ARM 64-bit kernel support for the Linux operating system, allows a hacker to gain access to protected information or cause a service failure.

The vulnerability of the taggedaddrctrlget function in the arch/arm64/kernel/ptrace.c module, which is part of the ARM 64-bit kernel support for the Linux operating system, relates to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to gain access to...

6.1CVSS6.7AI score0.00205EPSS
SaveExploits0References22Affected Software7
RedhatCVE
RedhatCVE
added 2025/04/10 4:14 p.m.15 views

CVE-2025-2286

A local code execution vulnerability exists in the Rockwell Automation Arena® due to an uninitialized pointer. The flaw is result of improper validation of user-supplied data. If exploited a threat actor can disclose information and execute arbitrary code on the system. To exploit the vulnerabili...

8.5CVSS7.4AI score0.00293EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/04/10 4:11 p.m.11 views

CVE-2025-2285

A local code execution vulnerability exists in the Rockwell Automation Arena® due to an uninitialized pointer. The flaw is result of improper validation of user-supplied data. If exploited a threat actor can disclose information and execute arbitrary code on the system. To exploit the vulnerabili...

8.5CVSS7.4AI score0.00292EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/04/10 4:8 p.m.17 views

CVE-2025-2287

A local code execution vulnerability exists in the Rockwell Automation Arena® due to an uninitialized pointer. The flaw is result of improper validation of user-supplied data. If exploited a threat actor can disclose information and execute arbitrary code on the system. To exploit the vulnerabili...

8.5CVSS7.4AI score0.00293EPSS
SaveExploits0References3
Zero Day Initiative
Zero Day Initiative
added 2025/04/09 12:0 a.m.11 views

Luxion KeyShot PVS File Parsing Access of Uninitialized Pointer Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Luxion KeyShot. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of pvs...

7.8CVSS6.9AI score0.00332EPSS
SaveExploits0References1
NVD
NVD
added 2025/04/08 4:15 p.m.23 views

CVE-2025-2287

A local code execution vulnerability exists in the Rockwell Automation Arena® due to an uninitialized pointer. The flaw is result of improper validation of user-supplied data. If exploited a threat actor can disclose information and execute arbitrary code on the system. To exploit the...

8.5CVSS0.00293EPSS
SaveExploits0References1
OSV
OSV
added 2025/04/08 4:15 p.m.6 views

CVE-2025-2285

A local code execution vulnerability exists in the Rockwell Automation Arena® due to an uninitialized pointer. The flaw is result of improper validation of user-supplied data. If exploited a threat actor can disclose information and execute arbitrary code on the system. To exploit the...

7.8CVSS6.3AI score0.00292EPSS
SaveExploits0References1
NVD
NVD
added 2025/04/08 4:15 p.m.16 views

CVE-2025-2286

A local code execution vulnerability exists in the Rockwell Automation Arena® due to an uninitialized pointer. The flaw is result of improper validation of user-supplied data. If exploited a threat actor can disclose information and execute arbitrary code on the system. To exploit the...

8.5CVSS0.00293EPSS
SaveExploits0References1
OSV
OSV
added 2025/04/08 4:15 p.m.6 views

CVE-2025-2286

A local code execution vulnerability exists in the Rockwell Automation Arena® due to an uninitialized pointer. The flaw is result of improper validation of user-supplied data. If exploited a threat actor can disclose information and execute arbitrary code on the system. To exploit the...

7.8CVSS7.1AI score0.00293EPSS
SaveExploits0References1
NVD
NVD
added 2025/04/08 4:15 p.m.14 views

CVE-2025-2285

A local code execution vulnerability exists in the Rockwell Automation Arena® due to an uninitialized pointer. The flaw is result of improper validation of user-supplied data. If exploited a threat actor can disclose information and execute arbitrary code on the system. To exploit the...

8.5CVSS0.00292EPSS
SaveExploits0References1
OSV
OSV
added 2025/04/08 4:15 p.m.6 views

CVE-2025-2287

A local code execution vulnerability exists in the Rockwell Automation Arena® due to an uninitialized pointer. The flaw is result of improper validation of user-supplied data. If exploited a threat actor can disclose information and execute arbitrary code on the system. To exploit the...

7.8CVSS6.3AI score0.00293EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/08 3:16 p.m.66 views

CVE-2025-2287

CVE-2025-2287 is a local code-execution vulnerability in Rockwell Automation Arena® caused by an uninitialized pointer resulting from improper validation of user-supplied data. A threat actor could disclose information and execute arbitrary code if a legitimate user opens a malicious DOE file. Ex...

8.5CVSS7.6AI score0.00293EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2025/04/08 3:16 p.m.41 views

CVE-2025-2287 Local Code Execution Vulnerability in Arena®

A local code execution vulnerability exists in the Rockwell Automation Arena® due to an uninitialized pointer. The flaw is result of improper validation of user-supplied data. If exploited a threat actor can disclose information and execute arbitrary code on the system. To exploit the...

8.5CVSS0.00293EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/08 3:16 p.m.56 views

CVE-2025-2286

CVE-2025-2286 : Local code execution in Rockwell Automation Arena due to an uninitialized pointer from improper validation of user-supplied data. A legitimate user must open a malicious DOE file to exploit, enabling information disclosure and arbitrary code execution on the system. Reported remed...

8.5CVSS7.6AI score0.00293EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/04/08 3:16 p.m.5 views

CVE-2025-2286 Local Code Execution Vulnerability in Arena®

A local code execution vulnerability exists in the Rockwell Automation Arena® due to an uninitialized pointer. The flaw is result of improper validation of user-supplied data. If exploited a threat actor can disclose information and execute arbitrary code on the system. To exploit the...

8.5CVSS7.6AI score0.00293EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/04/08 3:16 p.m.22 views

CVE-2025-2286 Local Code Execution Vulnerability in Arena®

A local code execution vulnerability exists in the Rockwell Automation Arena® due to an uninitialized pointer. The flaw is result of improper validation of user-supplied data. If exploited a threat actor can disclose information and execute arbitrary code on the system. To exploit the...

8.5CVSS0.00293EPSS
SaveExploits0References1
Rows per page
Query Builder