Lucene search
+L

1674 matches found

RedhatCVE
RedhatCVE
•added 2024/12/12 8:44 a.m.•27 views

CVE-2024-47540

A flaw was found in the Matroska/WebM demuxer in the GStreamer library. Processing a specially crafted input file can cause the usage of uninitialized stack memory, allowing calls to uninitialized function pointers, potentially resulting in code execution or an application crash. Mitigation Do no...

8.8CVSS6.5AI score0.01007EPSS
SaveExploits0References6
NVD
NVD
•added 2024/12/12 2:03 a.m.•37 views

CVE-2024-47540

GStreamer is a library for constructing graphs of media-handling components. An uninitialized stack variable vulnerability has been identified in the gstmatroskademuxaddwvpkheader function within matroska-demux.c. When size allocator-memunmapfull or mem-allocator-memunmap. This vulnerability coul...

9.8CVSS0.01007EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2024/12/12 12:00 a.m.•20 views

Rockwell Automation Arena < 16.20.06 Multiple Vulnerabilities

The version of Rockwell Automation Arena installed on the remote Windows host is prior to 16.20.06. It is, therefore, affected by a number of different vulnerabilities - A “use after free” code execution vulnerability exists in the affected products that could allow a threat actor to craft a...

8.5CVSS6.7AI score0.00233EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/12 12:00 a.m.•4 views

CVE-2024-47540: Use of Uninitialized Variable

GStreamer is a library for constructing graphs of media-handling components. An uninitialized stack variable vulnerability has been identified in the gstmatroskademuxaddwvpkheader function within matroska-demux.c. When size allocator-memunmapfull or mem-allocator-memunmap. This vulnerability coul...

9.8CVSS6.2AI score0.01007EPSS
SaveExploits0References1
CVE
CVE
•added 2024/12/11 6:54 p.m.•124 views

CVE-2024-47540

CVE-2024-47540 affects GStreamer, caused by an uninitialized stack variable in gst_matroska_demux_add_wvpk_header (matroska-demux.c). When size

9.8CVSS7.4AI score0.01007EPSS
SaveExploits0References4Affected Software1
AlpineLinux
AlpineLinux
•added 2024/12/11 6:54 p.m.•24 views

CVE-2024-47540

GStreamer is a library for constructing graphs of media-handling components. An uninitialized stack variable vulnerability has been identified in the gstmatroskademuxaddwvpkheader function within matroska-demux.c. When size allocator-memunmapfull or mem-allocator-memunmap. This vulnerability coul...

9.8CVSS7.2AI score0.01007EPSS
SaveExploits0References4
Debian CVE
Debian CVE
•added 2024/12/11 6:54 p.m.•24 views

CVE-2024-47540

GStreamer is a library for constructing graphs of media-handling components. An uninitialized stack variable vulnerability has been identified in the gstmatroskademuxaddwvpkheader function within matroska-demux.c. When size allocator-memunmapfull or mem-allocator-memunmap. This vulnerability coul...

9.8CVSS8.7AI score0.01007EPSS
SaveExploits0
CNNVD
CNNVD
•added 2024/12/11 12:00 a.m.•6 views

GStreamer 安全漏洞

GStreamer is an open source set of frameworks for processing streaming media from GStreamer. A security vulnerability exists in GStreamer that stems from an uninitialized stack variable vulnerability found in the gstmatroskademuxaddwvpkheader function in matroska-demux.c. The vulnerability is...

9.8CVSS9AI score0.01007EPSS
SaveExploits0References5
Zero Day Initiative
Zero Day Initiative
•added 2024/12/10 12:00 a.m.•25 views

Rockwell Automation Arena Simulation DOE File Parsing Use of Uninitialized Variable Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Rockwell Automation Arena Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

7.8CVSS6.8AI score0.00232EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2024/12/05 6:15 p.m.•14 views

CVE-2024-11158

An “uninitialized variable” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to craft a DOE file and force the software to access a variable before it being initialized. If exploited, a threat actor could leverage this vulnerability to execute...

8.5CVSS6.3AI score0.00232EPSS
SaveExploits0References1
NVD
NVD
•added 2024/12/05 6:15 p.m.•39 views

CVE-2024-11158

An “uninitialized variable” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to craft a DOE file and force the software to access a variable before it being initialized. If exploited, a threat actor could leverage this vulnerability to execute...

8.5CVSS0.00232EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/12/05 5:41 p.m.•24 views

CVE-2024-11158 Rockwell Automation Arena® Uninitialized Vulnerability

An “uninitialized variable” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to craft a DOE file and force the software to access a variable before it being initialized. If exploited, a threat actor could leverage this vulnerability to execute...

8.5CVSS7.7AI score0.00232EPSS
SaveExploits0References1
CVE
CVE
•added 2024/12/05 5:41 p.m.•121 views

CVE-2024-11158

Rockwell Automation Arena (including Arena Simulation) is reported to have an uninitialized variable vulnerability in DOE file parsing that can lead to remote arbitrary code execution when a user runs malicious DOE content. The flaw, described across CVE-2024-11158 entries, requires that the atta...

8.5CVSS7.3AI score0.00232EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2024/12/05 12:00 a.m.•23 views

Rockwell Automation Arena 安全漏洞

Rockwell Automation Arena is a discrete event simulation and automation software from Rockwell Automation USA. A security vulnerability exists in Rockwell Automation Arena version 16.20.00 and prior versions that stems from the presence of an uninitialized variable code execution vulnerability th...

8.5CVSS7.2AI score0.00232EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/05 12:00 a.m.•13 views

CVE-2024-11158: Improper Initialization

An “uninitialized variable” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to craft a DOE file and force the software to access a variable before it being initialized. If exploited, a threat actor could leverage this vulnerability to execute...

8.5CVSS6.9AI score0.00232EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/12/05 12:00 a.m.•20 views

PT-2025-3603

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the Linux kernel's ptrace system call, specifically the arm64 architecture. The problem arises from the fpmr set function not initializing the temporary fpmr...

9.8CVSS6.2AI score0.00639EPSS
SaveExploits2References340
Positive Technologies
Positive Technologies
•added 2024/12/04 12:00 a.m.•5 views

PT-2024-10000

Name of the Vulnerable Software and Affected Versions Rockwell Automation Arena affected versions not specified Description A code execution vulnerability exists due to an uninitialized variable in Rockwell Automation Arena. This issue could allow a threat actor to craft a DOE file, forcing the...

8.5CVSS0.00232EPSS
SaveExploits0References10
NVD
NVD
•added 2024/11/26 2:15 p.m.•47 views

CVE-2017-18306

Information disclosure due to uninitialized variable...

8.4CVSS0.00115EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/11/26 1:56 p.m.•37 views

CVE-2017-18306 Information Exposure in Camera Driver

Information disclosure due to uninitialized variable...

8.4CVSS6.8AI score0.00115EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/11/26 12:00 a.m.•12 views

PT-2024-10596 · Qualcomm · Snapdragon +6

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue is related to information disclosure due to an uninitialized variable. This means that sensitive data may be exposed because a variable was not properly set before being...

8.4CVSS6.2AI score0.00115EPSS
SaveExploits0References2
Rows per page
Query Builder