Lucene search
K

1539 matches found

Positive Technologies
Positive Technologies
added 2021/04/13 12:0 a.m.2 views

PT-2021-2735

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: The issue is related to incorrect code generation management in Microsoft Exchange Server. It allows a remote attacker to execute arbitrary code. Recommendations: At the...

10CVSS8.9AI score0.34359EPSS
Exploits3References13
Positive Technologies
Positive Technologies
added 2021/04/13 12:0 a.m.2 views

PT-2021-2660 · Microsoft · Office +1

Name of the Vulnerable Software and Affected Versions: Microsoft Office affected versions not specified Description: The issue is related to incorrect code generation management in Microsoft Office, allowing an attacker to execute arbitrary code remotely. This can be exploited by sending a...

7.8CVSS8.2AI score0.12134EPSS
Exploits0References8
Positive Technologies
Positive Technologies
added 2021/04/13 12:0 a.m.2 views

PT-2021-2685 · Microsoft · Office Word +1

Name of the Vulnerable Software and Affected Versions: Microsoft Word affected versions not specified Description: The issue is related to errors in code generation management in Microsoft Word, allowing remote attackers to execute arbitrary code. This can be exploited to gain unauthorized access...

7.8CVSS7.9AI score0.08555EPSS
Exploits0References9
BDU FSTEC
BDU FSTEC
added 2021/04/06 12:0 a.m.2 views

The vulnerability of the Microsoft Visual Studio Code Python Extension, related to improper code generation management, allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Microsoft Visual Studio Code Python Extension is related to improper code generation management. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

9CVSS0.00749EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2021/03/30 12:0 a.m.1 views

The vulnerability of the prive/formulaires/configurer_preferences.php component of the SPIP content management system, related to a lack of mechanism for managing code generation, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the prive/formulaires/configurerpreferences.php component of the SPIP content management system is related to a lack of mechanisms for managing code generation. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity...

9.8CVSS0.0143EPSS
Exploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/03/30 12:0 a.m.1 views

Vulnerability of Microsoft Office packages and 365 Apps for Enterprise, related to improper code generation management, allows attackers to execute arbitrary code.

The vulnerability of Microsoft Office packages and 365 Apps for Enterprise is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9.3CVSS0.03222EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2021/03/30 12:0 a.m.2 views

The vulnerability of the HEVC Video Extension codec, related to improper code generation, allows a perpetrator to execute arbitrary code.

The vulnerability of the HEVC Video Extension codec is related to improper code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS0.10179EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/03/30 12:0 a.m.1 views

The vulnerability of the Git component of Microsoft Visual Studio’s software development tools allows a hacker to execute arbitrary code.

The vulnerability of the Git component in Microsoft Visual Studio relates to improper code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS0.58284EPSS
Exploits5References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/03/30 12:0 a.m.1 views

The vulnerability of HEVC Video Extensions relates to improper code generation, allowing attackers to execute arbitrary code.

The vulnerability of HEVC Video Extensions is related to improper code generation. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

9.3CVSS0.02646EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/03/30 12:0 a.m.1 views

The vulnerability of the HEVC Video Extension codec, related to improper code generation, allows a perpetrator to execute arbitrary code.

The vulnerability of the HEVC Video Extension codec is related to improper code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS0.10179EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/03/30 12:0 a.m.1 views

The vulnerability of clients to virtualization and streaming of Microsoft Application Virtualization (App-V) operating systems for Windows allows a perpetrator to execute arbitrary code.

The vulnerability of clients to virtualization and streaming of Microsoft Application Virtualization App-V operating systems on Windows systems is related to improper code generation. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS0.00685EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2021/03/30 12:0 a.m.2 views

The vulnerability of the Microsoft Office software package, related to improper code generation, allows a malicious actor to execute arbitrary code.

The vulnerability of the Microsoft Office suite is related to improper code generation management. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

7.6CVSS0.02764EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2021/03/30 12:0 a.m.1 views

The vulnerability of the DNS server service in Windows operating systems allows a hacker to cause a service failure.

The vulnerability of the DNS server service in Windows operating systems is related to improper code generation. Exploiting this vulnerability could allow a remote attacker to cause service failures...

9.8CVSS0.09011EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2021/03/30 12:0 a.m.1 views

Vulnerability of Azure Sphere operating systems, related to improper code generation management, allows attackers to execute arbitrary code.

The vulnerability of Azure Sphere operating systems is related to incorrect code generation management. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS0.00133EPSS
Exploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/03/30 12:0 a.m.1 views

The vulnerability of the Graphics Component component of the Windows operating system, which allows a hacker to execute arbitrary code.

The vulnerability of the Graphics Component component in the Windows operating system is related to improper code generation. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS0.12481EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2021/03/30 12:0 a.m.1 views

The vulnerability of the can_optimize function in the Linux operating system’s kernel code (arch/x86/kernel/kprobes/opt.c) allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the canoptimize function in the Linux operating system’s kernel code arch/x86/kernel/kprobes/opt.c is related to improper code generation management. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

6.7CVSS0.00111EPSS
Exploits1References13Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/03/30 12:0 a.m.1 views

The vulnerability of the HEVC Video Extension codec, related to improper code generation, allows a perpetrator to execute arbitrary code.

The vulnerability of the HEVC Video Extension codec is related to improper code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS0.02646EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2021/03/29 12:0 a.m.3 views

Npm is-my-json-valid 资源管理错误漏洞

Npm is-my-json-valid is an application of the United States Npm . A JSONSchema is very fast to validate using a code generation mechanism. A resource management error vulnerability exists in is-my-json-valid, which stems from the use of an inefficient regular expression to validate a JSON field...

5.3CVSS6.5AI score0.00255EPSS
Exploits1References5
BDU FSTEC
BDU FSTEC
added 2021/03/25 12:0 a.m.1 views

The vulnerability of the HEVC Video Extension codec, related to improper code generation, allows a perpetrator to execute arbitrary code.

The vulnerability of the HEVC Video Extension codec is related to improper code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS0.10179EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.1 views

The vulnerability of the Gem Name Handler component in the Bundler’s dependency management tool for Ruby applications relates to a lack of mechanisms for managing code generation. This vulnerability allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Gem Name Handler component in the Bundler dependency management tool for Ruby applications relates to improper handling of gems with identical names. Exploiting this vulnerability can allow an attacker to gain access to sensitive data, compromise its integrity, and cause...

9.8CVSS0.02779EPSS
Exploits1References9Affected Software2
Rows per page
Query Builder