Lucene search
K

879 matches found

Positive Technologies
Positive Technologies
added 2021/06/08 12:0 a.m.2 views

PT-2021-3292 · Microsoft · Office Graphics +1

Name of the Vulnerable Software and Affected Versions: Microsoft Office Graphics affected versions not specified Description: The issue is related to incorrect code generation management in the Microsoft Office Graphics component. This can allow a remote attacker to execute arbitrary code...

10CVSS7.5AI score0.12134EPSS
Exploits0References11
Positive Technologies
Positive Technologies
added 2021/06/08 12:0 a.m.2 views

PT-2021-3373 · Unknown · Vp9 Video Extensions

Name of the Vulnerable Software and Affected Versions: VP9 Video Extensions affected versions not specified Description: The issue is related to incorrect code generation management in the VP9 Video Extensions package. An attacker can exploit this by sending a specially crafted request, potential...

8.8CVSS7.4AI score0.10509EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2021/06/08 12:0 a.m.3 views

PT-2021-3285 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: The issue is related to incorrect code generation management in Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server...

9CVSS6.9AI score0.06417EPSS
Exploits0References11
Positive Technologies
Positive Technologies
added 2021/06/08 12:0 a.m.1 views

PT-2021-3297 · Microsoft · Outlook

Name of the Vulnerable Software and Affected Versions: Microsoft Outlook affected versions not specified Description: The issue is related to incorrect code generation management in the Microsoft Outlook email client. It allows a remote attacker to execute arbitrary code. Recommendations: At the...

7.8CVSS7.2AI score0.03508EPSS
Exploits0References8
OSV
OSV
added 2021/06/03 5:15 p.m.1 views

CVE-2021-22336

There is an Improper Control of Generation of Code vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause denial of security services on a rooted device...

7.5CVSS5.8AI score0.00206EPSS
Exploits0References1
NVD
NVD
added 2021/06/03 5:15 p.m.17 views

CVE-2021-22336

There is an Improper Control of Generation of Code vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause denial of security services on a rooted device...

7.5CVSS0.00206EPSS
Exploits0References1
CNVD
CNVD
added 2021/05/31 12:0 a.m.2 views

SQL Injection Vulnerability in Ricochet Cloud Group Live Code Generation System (CNVD-2021-41720)

RikerCloud live code management system is an open source, free, live code system that can be operated online to improve efficiency, get more resources and so on. A SQL injection vulnerability exists in the Ricochet Cloud Live Code Generation System, which can be exploited by attackers to obtain...

7.8AI score
Exploits0
Cvelist
Cvelist
added 2021/05/24 3:35 p.m.12 views

CVE-2021-32629 Memory access due to code generation flaw in Cranelift module

Cranelift is an open-source code generator maintained by Bytecode Alliance. It translates a target-independent intermediate representation into executable machine code. There is a bug in 0.73 of the Cranelift x64 backend that can create a scenario that could result in a potential sandbox escape i...

7.2CVSS8.9AI score0.0007EPSS
Exploits1References4
RustSec
RustSec
added 2021/05/21 12:0 p.m.11 views

Memory access due to code generation flaw in Cranelift module

There is a bug in 0.73.0 of the Cranelift x64 backend that can create a scenario that could result in a potential sandbox escape in a WebAssembly module. Users of versions 0.73.0 of Cranelift should upgrade to either 0.73.1 or 0.74 to remediate this vulnerability. Users of Cranelift prior to 0.73...

8.8CVSS1.6AI score0.0007EPSS
Exploits1Affected Software1
OSV
OSV
added 2021/05/21 12:0 p.m.13 views

RUSTSEC-2021-0067 Memory access due to code generation flaw in Cranelift module

There is a bug in 0.73.0 of the Cranelift x64 backend that can create a scenario that could result in a potential sandbox escape in a WebAssembly module. Users of versions 0.73.0 of Cranelift should upgrade to either 0.73.1 or 0.74 to remediate this vulnerability. Users of Cranelift prior to 0.73...

8.8CVSS8.7AI score0.0007EPSS
Exploits1References3
Github Security Blog
Github Security Blog
added 2021/05/11 12:4 a.m.72 views

Creation of Temporary File in Directory with Insecure Permissions in the OpenAPI-Generator online generator

Impact On Unix like systems, the system's temporary directory is shared between all users on that system. A collocated user can observe the process of creating a temporary sub directory in the shared temporary directory and race to complete the creation of the temporary subdirectory. This...

9.3CVSS0.5AI score0.0005EPSS
Exploits1References6Affected Software1
OSV
OSV
added 2021/05/11 12:4 a.m.14 views

GHSA-23X4-M842-FMWF Creation of Temporary File in Directory with Insecure Permissions in the OpenAPI-Generator online generator

Impact On Unix like systems, the system's temporary directory is shared between all users on that system. A collocated user can observe the process of creating a temporary sub directory in the shared temporary directory and race to complete the creation of the temporary subdirectory. This...

9.3CVSS6.1AI score0.0005EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2021/05/11 12:0 a.m.1 views

PT-2021-3138 · Microsoft · Visual Studio Code

Name of the Vulnerable Software and Affected Versions: Visual Studio Code affected versions not specified Description: The issue is related to incorrect code generation management in Visual Studio Code. Exploitation of this issue may allow an attacker to execute arbitrary code using a specially...

7.8CVSS7.6AI score0.09313EPSS
Exploits0References8
Positive Technologies
Positive Technologies
added 2021/05/11 12:0 a.m.2 views

PT-2021-3044 · Microsoft · Lync +3

Name of the Vulnerable Software and Affected Versions: Skype for Business and Lync affected versions not specified Description: The issue is related to incorrect code generation management in the Skype for Business Server Microsoft Lync Server, which can be exploited by a remote attacker to execu...

9CVSS7.1AI score0.04366EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2021/05/11 12:0 a.m.3 views

PT-2021-3009 · Microsoft · Web Media Extensions

Name of the Vulnerable Software and Affected Versions: Web Media Extensions affected versions not specified Description: The issue is related to incorrect code generation management in the Web Media Extensions package, allowing an attacker to execute arbitrary code. Recommendations: At the moment...

7.8CVSS7.6AI score0.14217EPSS
Exploits0References8
Positive Technologies
Positive Technologies
added 2021/05/11 12:0 a.m.1 views

PT-2021-3149 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to the incorrect management of code generation in the implementation of OLE Automation technology in Microsoft Windows. This can be exploited by a remote...

8.8CVSS8.8AI score0.13537EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2021/05/11 12:0 a.m.4 views

PT-2021-3272 · Nni · Nni

Name of the Vulnerable Software and Affected Versions: NNI versions affected versions not specified Description: The issue is related to incorrect code generation management in the common utils.py module of the Neural Network Intelligence NNI toolkit, which is used for automating design, neural...

9CVSS7AI score0.02568EPSS
Exploits0References10
Positive Technologies
Positive Technologies
added 2021/05/11 12:0 a.m.2 views

PT-2021-3142 · Microsoft · Visual Studio

Name of the Vulnerable Software and Affected Versions: Visual Studio affected versions not specified Description: The issue is related to incorrect code generation management in the software development tool. It may allow a remote attacker to execute arbitrary code. Recommendations: At the moment...

10CVSS8.6AI score0.16964EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2021/05/11 12:0 a.m.1 views

PT-2021-3014 · Microsoft · Exchange Server

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: The issue is related to incorrect code generation management in Microsoft Exchange Server. It allows a remote attacker to execute arbitrary code. Recommendations: At the...

8.8CVSS9.6AI score0.79828EPSS
Exploits3References11
Positive Technologies
Positive Technologies
added 2021/05/11 12:0 a.m.1 views

PT-2021-3095 · Microsoft · Exchange Server

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: The issue is related to incorrect code generation management in Microsoft Exchange Server, allowing remote attackers to execute arbitrary code. This can be exploited by...

7.8CVSS7.7AI score0.03957EPSS
Exploits0References8
Rows per page
Query Builder