CVE-2021-0966

In code generated by BuildParcelFields of generatecpp.cpp, there is a possible way for a crafted parcelable to reveal uninitialized memory of a target process due to uninitialized data. This could lead to local information disclosure across Binder transactions with no additional execution...

CVE-2022-35173

An issue was discovered in Nginx NJS v0.7.5. The JUMP offset for a break instruction was not set to a correct offset during code generation, leading to a segmentation violation...

CVE-2025-23251

NVIDIA NeMo Framework contains a vulnerability where a user could cause an improper control of generation of code by remote code execution. A successful exploit of this vulnerability might lead to code execution and data tampering...

The vulnerability of the EDA component of the Red Hat Ansible Automation Platform allows a perpetrator to execute arbitrary commands.

The vulnerability of the EDA component of the Red Hat Ansible Automation Platform is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

The vulnerability of the Dyad application development platform, related to improper code generation management, allows a hacker to execute arbitrary code.

The vulnerability of the Dyad application development platform is related to improper code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the plugin for controlling the display of Block Logic blocks in the WordPress content management system is related to improper code generation, allowing attackers to execute arbitrary code.

The vulnerability of the plugin for controlling the display of Block Logic blocks in the WordPress content management system is related to improper handling of code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the OpenCTI platform for analyzing cyber threats, related to improper code generation, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the OpenCTI platform for analyzing cyber threats is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the Remote for Mac remote control tool, related to improper code generation, allows a hacker to execute arbitrary code.

The vulnerability of the Remote for Mac remote control tool is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the software network firewall based on the FreeBSD operating system, Netgate pfSense, arises from incorrect code generation, allowing a hacker to execute arbitrary code.

The vulnerability of the software network firewall based on the FreeBSD operating system, Netgate pfSense, is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the UniSharp laravel-filemanager software package, related to improper code generation, allows a hacker to execute arbitrary code.

The vulnerability of the UniSharp laravel-filemanager software package is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Case Display Page component of the FoxCMS content management system allows a hacker to execute arbitrary code.

The vulnerability of the Case Display Page component of the FoxCMS content management system is related to improper handling of code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the org.apache.commons.jxpath.JXPathContext component in the Knowage business analytics and data analysis platform allows attackers to execute arbitrary code.

The vulnerability of the org.apache.commons.jxpath.JXPathContext component in the Knowage business analytics and data analysis platform is related to improper code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Sitecore Experience Platform (XP) and Sitecore Experience Manager (XM) content management systems, related to improper code generation, allows attackers to execute arbitrary code.

The vulnerability of the Sitecore Experience Platform XP and Sitecore Experience Manager XM content management systems is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

CVE-2025-11837

An improper control of generation of code vulnerability has been reported to affect Malware Remover. The remote attackers can then exploit the vulnerability to bypass protection mechanism. We have already fixed the vulnerability in the following version: Malware Remover 6.6.8.20251023 and later...

CVE-2025-11837

An improper control of generation of code vulnerability has been reported to affect Malware Remover. The remote attackers can then exploit the vulnerability to bypass protection mechanism. We have already fixed the vulnerability in the following version: Malware Remover 6.6.8.20251023 and later...

CVE-2025-11837

An improper control of generation of code vulnerability has been reported to affect Malware Remover. The remote attackers can then exploit the vulnerability to bypass protection mechanism. We have already fixed the vulnerability in the following version: Malware Remover 6.6.8.20251023 and later...

CVE-2025-11837 Malware Remover

An improper control of generation of code vulnerability has been reported to affect Malware Remover. The remote attackers can then exploit the vulnerability to bypass protection mechanism. We have already fixed the vulnerability in the following version: Malware Remover 6.6.8.20251023 and later...

CVE-2025-11837 Malware Remover

An improper control of generation of code vulnerability has been reported to affect Malware Remover. The remote attackers can then exploit the vulnerability to bypass protection mechanism. We have already fixed the vulnerability in the following version: Malware Remover 6.6.8.20251023 and later...

QNAP Systems Malware Remover 代码注入漏洞

QNAP Systems Malware Remover is a built-in security application from Taiwan, China-based QNAP Systems. A code injection vulnerability exists in QNAP Systems Malware Remover, which stems from improper code generation controls that could lead to a bypass of protection mechanisms...

[SECURITY] Fedora 42 Update: golang-github-google-wire-0.6.0-14.fc42

Wire is a code generation tool that automates connecting components using dependency injection. Dependencies between components are represented in Wire as function parameters, encouraging explicit initialization instead of global variables. Because Wire operates without runtime state or reflectio...