Lucene search
+L

1631 matches found

BDU FSTEC
BDU FSTEC
added 2021/05/24 12:0 a.m.11 views

The vulnerability of the Hyper-V component of the Windows operating system, related to improper code generation, allows a perpetrator to execute arbitrary code.

The vulnerability of the Hyper-V component of the Windows operating system is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9.9CVSS8.4AI score0.38625EPSS
SaveExploits4References4
BDU FSTEC
BDU FSTEC
added 2021/05/24 12:0 a.m.13 views

The vulnerability of Microsoft Office Web Apps Server, Microsoft Office, Office Online Server, and Microsoft Excel stems from improper code generation management, allowing attackers to execute arbitrary code.

The vulnerability of Microsoft Office Web Apps Server, Microsoft Office, Office Online Server, and Microsoft Excel is related to improper code generation. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

7.8CVSS7.9AI score0.13494EPSS
SaveExploits0References4
RustSec
RustSec
added 2021/05/21 12:0 p.m.18 views

Memory access due to code generation flaw in Cranelift module

There is a bug in 0.73.0 of the Cranelift x64 backend that can create a scenario that could result in a potential sandbox escape in a WebAssembly module. Users of versions 0.73.0 of Cranelift should upgrade to either 0.73.1 or 0.74 to remediate this vulnerability. Users of Cranelift prior to 0.73...

8.8CVSS1.6AI score0.00455EPSS
SaveExploits1Affected Software1
OSV
OSV
added 2021/05/21 12:0 p.m.55 views

RUSTSEC-2021-0067 Memory access due to code generation flaw in Cranelift module

There is a bug in 0.73.0 of the Cranelift x64 backend that can create a scenario that could result in a potential sandbox escape in a WebAssembly module. Users of versions 0.73.0 of Cranelift should upgrade to either 0.73.1 or 0.74 to remediate this vulnerability. Users of Cranelift prior to 0.73...

8.8CVSS8.7AI score0.00455EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2021/05/20 12:0 a.m.12 views

The vulnerability of Web Media Extensions, related to improper code generation management, allows a hacker to execute arbitrary code.

The vulnerability of the Web Media Extensions extension package is related to incorrect code generation management. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.2AI score0.03663EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2021/05/20 12:0 a.m.11 views

The vulnerability of the Microsoft Exchange Server mail server, related to improper code generation, allows a hacker to execute arbitrary code.

The vulnerability of Microsoft Exchange Server is related to incorrect code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

7.8CVSS7.8AI score0.73676EPSS
SaveExploits3References4
BDU FSTEC
BDU FSTEC
added 2021/05/20 12:0 a.m.19 views

Vulnerability of the Windows Media Foundation Core component in Microsoft Windows operating systems, allowing attackers to execute arbitrary code

The vulnerability of the Windows Media Foundation Core component in Microsoft Windows operating systems is related to improper code generation. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.3CVSS7.6AI score0.02253EPSS
SaveExploits0References4
OSV
OSV
added 2021/05/11 12:4 a.m.72 views

GHSA-23X4-M842-FMWF Creation of Temporary File in Directory with Insecure Permissions in the OpenAPI-Generator online generator

Impact On Unix like systems, the system's temporary directory is shared between all users on that system. A collocated user can observe the process of creating a temporary sub directory in the shared temporary directory and race to complete the creation of the temporary subdirectory. This...

9.3CVSS6.1AI score0.00351EPSS
SaveExploits1References6
Github Security Blog
Github Security Blog
added 2021/05/11 12:4 a.m.89 views

Creation of Temporary File in Directory with Insecure Permissions in the OpenAPI-Generator online generator

Impact On Unix like systems, the system's temporary directory is shared between all users on that system. A collocated user can observe the process of creating a temporary sub directory in the shared temporary directory and race to complete the creation of the temporary subdirectory. This...

9.3CVSS0.5AI score0.00351EPSS
SaveExploits1References6Affected Software1
Positive Technologies
Positive Technologies
added 2021/05/11 12:0 a.m.4 views

PT-2021-3138 · Microsoft · Visual Studio Code

Name of the Vulnerable Software and Affected Versions: Visual Studio Code affected versions not specified Description: The issue is related to incorrect code generation management in Visual Studio Code. Exploitation of this issue may allow an attacker to execute arbitrary code using a specially...

7.8CVSS7.6AI score0.02519EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2021/05/11 12:0 a.m.6 views

PT-2021-3009 · Microsoft · Web Media Extensions

Name of the Vulnerable Software and Affected Versions: Web Media Extensions affected versions not specified Description: The issue is related to incorrect code generation management in the Web Media Extensions package, allowing an attacker to execute arbitrary code. Recommendations: At the moment...

7.8CVSS7.6AI score0.03663EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2021/05/11 12:0 a.m.11 views

PT-2021-3056 · Microsoft · Visual Studio Code +1

Name of the Vulnerable Software and Affected Versions: Visual Studio Code Remote Containers Extension affected versions not specified Description: The issue is related to incorrect code generation management in the Visual Studio Code editor. Exploitation of this issue may allow a remote attacker ...

9.3CVSS7.8AI score0.52751EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2021/05/11 12:0 a.m.6 views

PT-2021-3142 · Microsoft · Visual Studio

Name of the Vulnerable Software and Affected Versions: Visual Studio affected versions not specified Description: The issue is related to incorrect code generation management in the software development tool. It may allow a remote attacker to execute arbitrary code. Recommendations: At the moment...

10CVSS8.6AI score0.53582EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2021/05/11 12:0 a.m.3 views

PT-2021-3095 · Microsoft · Exchange Server

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: The issue is related to incorrect code generation management in Microsoft Exchange Server, allowing remote attackers to execute arbitrary code. This can be exploited by...

7.8CVSS7.7AI score0.04873EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2021/05/11 12:0 a.m.4 views

PT-2021-3014 · Microsoft · Exchange Server

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: The issue is related to incorrect code generation management in Microsoft Exchange Server. It allows a remote attacker to execute arbitrary code. Recommendations: At the...

8.8CVSS9.6AI score0.73676EPSS
SaveExploits3References11
Positive Technologies
Positive Technologies
added 2021/05/11 12:0 a.m.7 views

PT-2021-3272 · Nni · Nni

Name of the Vulnerable Software and Affected Versions: NNI versions affected versions not specified Description: The issue is related to incorrect code generation management in the common utils.py module of the Neural Network Intelligence NNI toolkit, which is used for automating design, neural...

9CVSS7AI score0.02482EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2021/05/11 12:0 a.m.7 views

PT-2021-3044 · Microsoft · Lync +3

Name of the Vulnerable Software and Affected Versions: Skype for Business and Lync affected versions not specified Description: The issue is related to incorrect code generation management in the Skype for Business Server Microsoft Lync Server, which can be exploited by a remote attacker to execu...

9CVSS7.1AI score0.02219EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2021/05/11 12:0 a.m.5 views

PT-2021-3149 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to the incorrect management of code generation in the implementation of OLE Automation technology in Microsoft Windows. This can be exploited by a remote...

8.8CVSS8.8AI score0.02352EPSS
SaveExploits0References7
OSV
OSV
added 2021/05/10 7:15 p.m.40 views

CVE-2021-21428

Openapi generator is a java tool which allows generation of API client libraries SDK generation, server stubs, documentation and configuration automatically given an OpenAPI Spec. openapi-generator-online creates insecure temporary folders with File.createTempFile during the code generation...

7CVSS6.8AI score
SaveExploits0References2
Prion
Prion
added 2021/05/10 7:15 p.m.25 views

Design/Logic Flaw

Openapi generator is a java tool which allows generation of API client libraries SDK generation, server stubs, documentation and configuration automatically given an OpenAPI Spec. openapi-generator-online creates insecure temporary folders with File.createTempFile during the code generation...

4.4CVSS6.7AI score0.00351EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder