Lucene search
K

876 matches found

CVE
CVE
added 2025/04/15 12:0 a.m.49 views

CVE-2025-29705

The CVE-2025-29705 entry concerns code-gen versions 2.0.6 and earlier, with an underlying flaw of Incorrect Access Control due to missing permission controls. This allows anyone to access such projects (impact described as unauthenticated access to projects). Public references corroborate the vul...

4.3CVSS7.1AI score0.00305EPSS
Exploits1References2Affected Software1
OSV
OSV
added 2025/03/18 2:15 p.m.1 views

CVE-2024-21760

An improper control of generation of code 'Code Injection' vulnerability CWE-94 in FortiSOAR Connector FortiSOAR 7.4 all versions, 7.3 all versions, 7.2 all versions, 7.0 all versions, 6.4 all versions may allow an authenticated attacker to execute arbitrary code on the host via a playbook code...

8.4CVSS6.1AI score0.00282EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/03/18 12:0 a.m.2 views

Fortinet FortiSOAR 代码注入漏洞

Fortinet FortiSOAR is a Security Orchestration, Automation and Response SOAR solution from Fortinet. A code injection vulnerability exists in Fortinet FortiSOAR that stems from improper code generation controls and can be exploited by an attacker to cause arbitrary code to be executed...

8.4CVSS7.6AI score0.00282EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/02/22 4:19 p.m.9 views

CVE-2025-0161

IBM Security Verify Access Appliance 10.0.0.0 through 10.0.0.9 and 11.0.0.0 could allow a local user to execute arbitrary code due to improper restrictions on code generation...

7.8CVSS7.8AI score0.00007EPSS
Exploits0References1
OSV
OSV
added 2025/02/20 4:15 p.m.0 views

CVE-2025-0161

IBM Security Verify Access Appliance 10.0.0.0 through 10.0.0.9 and 11.0.0.0 could allow a local user to execute arbitrary code due to improper restrictions on code generation...

7.8CVSS6.1AI score
Exploits0References1
NVD
NVD
added 2025/02/20 4:15 p.m.9 views

CVE-2025-0161

IBM Security Verify Access Appliance 10.0.0.0 through 10.0.0.9 and 11.0.0.0 could allow a local user to execute arbitrary code due to improper restrictions on code generation...

7.8CVSS0.00007EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/02/20 12:0 a.m.1 views

IBM Security Verify Access 代码注入漏洞

IBM Security Verify Access ISAM is a service from International Business Machines IBM that improves user access security. A code injection vulnerability exists in IBM Security Verify Access versions 10.0.0.0 through 10.0.0.9 and 11.0.0.0, which stems from improper restrictions on code generation...

7.8CVSS7.5AI score0.00007EPSS
Exploits0References2
RedHat Linux
RedHat Linux
added 2025/02/12 4:23 a.m.1 views

firefox: thunderbird: A bug in WebAssembly code generation could result in a crash

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: A bug in WebAssembly code generation could lead to a crash. It may be possible for an attacker to leverage this to achieve code execution...

9.8CVSS7.3AI score0.00291EPSS
Exploits0References9
RedHat Linux
RedHat Linux
added 2025/02/12 4:17 a.m.3 views

firefox: thunderbird: A bug in WebAssembly code generation could result in a crash

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: A bug in WebAssembly code generation could lead to a crash. It may be possible for an attacker to leverage this to achieve code execution...

9.8CVSS7.3AI score0.00291EPSS
Exploits0References9
RedHat Linux
RedHat Linux
added 2025/02/11 9:57 a.m.1 views

firefox: thunderbird: A bug in WebAssembly code generation could result in a crash

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: A bug in WebAssembly code generation could lead to a crash. It may be possible for an attacker to leverage this to achieve code execution...

9.8CVSS7.3AI score0.00291EPSS
Exploits0References9
RedHat Linux
RedHat Linux
added 2025/02/10 1:29 a.m.2 views

firefox: thunderbird: A bug in WebAssembly code generation could result in a crash

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: A bug in WebAssembly code generation could lead to a crash. It may be possible for an attacker to leverage this to achieve code execution...

9.8CVSS7.3AI score0.00291EPSS
Exploits0References9
Tenable Nessus
Tenable Nessus
added 2025/02/10 12:0 a.m.12 views

Azure Linux 3.0 Security Update: golang / msft-golang (CVE-2023-29402)

The version of golang / msft-golang installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-29402 advisory. - The go command May generate unexpected code at build time when using cgo. This May result in...

9.8CVSS7AI score0.00125EPSS
Exploits0References2
RedHat Linux
RedHat Linux
added 2025/02/06 11:52 a.m.3 views

firefox: thunderbird: A bug in WebAssembly code generation could result in a crash

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: A bug in WebAssembly code generation could lead to a crash. It may be possible for an attacker to leverage this to achieve code execution...

9.8CVSS7.3AI score0.00291EPSS
Exploits0References9
RedHat Linux
RedHat Linux
added 2025/02/06 11:41 a.m.3 views

firefox: thunderbird: A bug in WebAssembly code generation could result in a crash

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: A bug in WebAssembly code generation could lead to a crash. It may be possible for an attacker to leverage this to achieve code execution...

9.8CVSS7.3AI score0.00291EPSS
Exploits0References9
RedHat Linux
RedHat Linux
added 2025/02/06 11:24 a.m.2 views

firefox: thunderbird: A bug in WebAssembly code generation could result in a crash

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: A bug in WebAssembly code generation could lead to a crash. It may be possible for an attacker to leverage this to achieve code execution...

9.8CVSS7.3AI score0.00291EPSS
Exploits0References9
RedHat Linux
RedHat Linux
added 2025/02/06 11:20 a.m.3 views

firefox: thunderbird: A bug in WebAssembly code generation could result in a crash

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: A bug in WebAssembly code generation could lead to a crash. It may be possible for an attacker to leverage this to achieve code execution...

9.8CVSS7.3AI score0.00291EPSS
Exploits0References9
OSV
OSV
added 2025/02/06 12:0 a.m.0 views

UBUNTU-CVE-2025-1011

A bug in WebAssembly code generation could have lead to a crash. It may have been possible for an attacker to leverage this to achieve code execution. This vulnerability was fixed in Firefox 135, Firefox ESR 128.7, Thunderbird 128.7, and Thunderbird 135...

9.8CVSS7.4AI score0.00291EPSS
Exploits0References12
RedhatCVE
RedhatCVE
added 2025/02/05 5:2 a.m.5 views

CVE-2024-10094

Pega Platform versions 6.x to Infinity 24.1.1 are affected by an issue with Improper Control of Generation of Code...

9.8CVSS6.8AI score0.00532EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 12:31 a.m.2 views

CVE-2024-31380

Improper Control of Generation of Code 'Code Injection' vulnerability in Soflyy Oxygen Builder allows Code Injection. Vendor is ignoring report, refuses to patch the issue.This issue affects Oxygen Builder: from n/a through 4.9...

9.9CVSS6.9AI score0.00127EPSS
Exploits0References1
OSV
OSV
added 2025/02/04 8:15 a.m.1 views

CVE-2025-22204

Improper control of generation of code in the sourcerer extension for Joomla in versions before 11.0.0 lead to a remote code execution vulnerability...

9.8CVSS6.3AI score
Exploits0References1
Rows per page
Query Builder