Lucene search
+L

1649 matches found

Debian CVE
Debian CVE
•added 2024/12/11 6:54 p.m.•24 views

CVE-2024-47540

GStreamer is a library for constructing graphs of media-handling components. An uninitialized stack variable vulnerability has been identified in the gstmatroskademuxaddwvpkheader function within matroska-demux.c. When size allocator-memunmapfull or mem-allocator-memunmap. This vulnerability coul...

9.8CVSS8.7AI score0.01007EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2024/12/11 6:54 p.m.•21 views

CVE-2024-47540

GStreamer is a library for constructing graphs of media-handling components. An uninitialized stack variable vulnerability has been identified in the gstmatroskademuxaddwvpkheader function within matroska-demux.c. When size allocator-memunmapfull or mem-allocator-memunmap. This vulnerability coul...

9.8CVSS7.2AI score0.01007EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2024/12/11 12:00 a.m.•6 views

GStreamer 安全漏洞

GStreamer is an open source set of frameworks for processing streaming media from GStreamer. A security vulnerability exists in GStreamer that stems from an uninitialized stack variable vulnerability found in the gstmatroskademuxaddwvpkheader function in matroska-demux.c. The vulnerability is...

9.8CVSS9AI score0.01007EPSS
SaveExploits0References5
Zero Day Initiative
Zero Day Initiative
•added 2024/12/10 12:00 a.m.•25 views

Rockwell Automation Arena Simulation DOE File Parsing Use of Uninitialized Variable Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Rockwell Automation Arena Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

7.8CVSS6.8AI score0.00232EPSS
SaveExploits0References1
OSV
OSV
•added 2024/12/05 6:15 p.m.•13 views

CVE-2024-11158

An “uninitialized variable” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to craft a DOE file and force the software to access a variable before it being initialized. If exploited, a threat actor could leverage this vulnerability to execute...

8.5CVSS6.3AI score0.00232EPSS
SaveExploits0References1
NVD
NVD
•added 2024/12/05 6:15 p.m.•36 views

CVE-2024-11158

An “uninitialized variable” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to craft a DOE file and force the software to access a variable before it being initialized. If exploited, a threat actor could leverage this vulnerability to execute...

8.5CVSS0.00232EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/12/05 5:41 p.m.•23 views

CVE-2024-11158 Rockwell Automation Arena® Uninitialized Vulnerability

An “uninitialized variable” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to craft a DOE file and force the software to access a variable before it being initialized. If exploited, a threat actor could leverage this vulnerability to execute...

8.5CVSS7.7AI score0.00232EPSS
SaveExploits0References1
CVE
CVE
•added 2024/12/05 5:41 p.m.•113 views

CVE-2024-11158

Rockwell Automation Arena (including Arena Simulation) is reported to have an uninitialized variable vulnerability in DOE file parsing that can lead to remote arbitrary code execution when a user runs malicious DOE content. The flaw, described across CVE-2024-11158 entries, requires that the atta...

8.5CVSS7.3AI score0.00232EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2024/12/05 12:00 a.m.•20 views

Rockwell Automation Arena 安全漏洞

Rockwell Automation Arena is a discrete event simulation and automation software from Rockwell Automation USA. A security vulnerability exists in Rockwell Automation Arena version 16.20.00 and prior versions that stems from the presence of an uninitialized variable code execution vulnerability th...

8.5CVSS7.2AI score0.00232EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/05 12:00 a.m.•9 views

CVE-2024-11158: Improper Initialization

An “uninitialized variable” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to craft a DOE file and force the software to access a variable before it being initialized. If exploited, a threat actor could leverage this vulnerability to execute...

8.5CVSS6.9AI score0.00232EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/12/05 12:00 a.m.•19 views

PT-2025-3603

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the Linux kernel's ptrace system call, specifically the arm64 architecture. The problem arises from the fpmr set function not initializing the temporary fpmr...

9.8CVSS6.2AI score0.00639EPSS
SaveExploits2References340
Positive Technologies
Positive Technologies
•added 2024/12/04 12:00 a.m.•4 views

PT-2024-10000

Name of the Vulnerable Software and Affected Versions Rockwell Automation Arena affected versions not specified Description A code execution vulnerability exists due to an uninitialized variable in Rockwell Automation Arena. This issue could allow a threat actor to craft a DOE file, forcing the...

8.5CVSS0.00232EPSS
SaveExploits0References10
NVD
NVD
•added 2024/11/26 2:15 p.m.•45 views

CVE-2017-18306

Information disclosure due to uninitialized variable...

8.4CVSS0.00115EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/11/26 1:56 p.m.•35 views

CVE-2017-18306 Information Exposure in Camera Driver

Information disclosure due to uninitialized variable...

8.4CVSS6.8AI score0.00115EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/11/26 12:00 a.m.•11 views

PT-2024-10596 · Qualcomm · Snapdragon +6

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue is related to information disclosure due to an uninitialized variable. This means that sensitive data may be exposed because a variable was not properly set before being...

8.4CVSS6.2AI score0.00115EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/26 12:00 a.m.•5 views

CVE-2017-18306: Exposure of Sensitive Information to an Unauthorized Actor

Information disclosure due to uninitialized variable...

8.4CVSS7.9AI score0.00115EPSS
SaveExploits0References1
NVD
NVD
•added 2024/11/22 9:15 p.m.•29 views

CVE-2024-8842

PDF-XChange Editor RTF File Parsing Uninitialized Variable Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must...

7.8CVSS0.0038EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/22 9:05 p.m.•38 views

CVE-2024-8842 PDF-XChange Editor RTF File Parsing Uninitialized Variable Remote Code Execution Vulnerability

PDF-XChange Editor RTF File Parsing Uninitialized Variable Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must...

7.8CVSS0.0038EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/11/22 9:05 p.m.•15 views

CVE-2024-8842 PDF-XChange Editor RTF File Parsing Uninitialized Variable Remote Code Execution Vulnerability

PDF-XChange Editor RTF File Parsing Uninitialized Variable Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must...

7.8CVSS8AI score0.0038EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/22 8:51 p.m.•51 views

CVE-2024-9717 Trimble SketchUp Viewer SKP File Parsing Uninitialized Variable Remote Code Execution Vulnerability

Trimble SketchUp Viewer SKP File Parsing Uninitialized Variable Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in that the...

7.8CVSS0.00286EPSS
SaveExploits0References1
Rows per page
Query Builder