Lucene search
+L

2046 matches found

BDU FSTEC
BDU FSTEC
•added 2022/02/07 12:00 a.m.•17 views

The vulnerability of Microsoft Windows Defender operating system, related to improper code generation management, allows attackers to execute arbitrary code.

The vulnerability of Microsoft’s Windows Defender operating system is related to improper code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code through a specially crafted request...

9.3CVSS7.7AI score0.02721EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/02/05 12:00 a.m.•8 views

PT-2022-1874

Name of the Vulnerable Software and Affected Versions VP9 Video Extensions affected versions not specified Description The issue is related to incorrect code generation management in the VP9 Video Extensions package. An attacker can exploit this by sending a specially crafted request, potentially...

7.8CVSS7.4AI score0.02276EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2022/02/05 12:00 a.m.•18 views

PT-2022-1894 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to incorrect code generation management in Azure Site Recovery. It allows a remote attacker to execute arbitrary code. Recommendations: At the moment, there...

9CVSS7.3AI score0.02416EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2022/02/05 12:00 a.m.•10 views

PT-2022-1856 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to incorrect code generation management in Azure Site Recovery, allowing a remote attacker to execute arbitrary code. Recommendations: At the moment, there ...

9CVSS7.3AI score0.02416EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2022/02/05 12:00 a.m.•8 views

PT-2022-1942 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to incorrect code generation management. It may allow a remote attacker to execute arbitrary code. Recommendations: At the moment, there is no information...

9CVSS7.3AI score0.02416EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2022/02/05 12:00 a.m.•13 views

PT-2022-2245 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to incorrect code generation management in the Remote Procedure Call Runtime. It allows remote attackers to execute arbitrary code on the system...

10CVSS9.3AI score0.03088EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
•added 2022/02/05 12:00 a.m.•10 views

PT-2022-1855 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to incorrect code generation management in Azure Site Recovery, allowing a remote attacker to execute arbitrary code. Recommendations: At the moment, there ...

9CVSS7.3AI score0.02416EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2022/02/05 12:00 a.m.•7 views

PT-2022-1887 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to incorrect code generation management. It may allow a remote attacker to execute arbitrary code. Recommendations: At the moment, there is no information...

9CVSS7.2AI score0.02416EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2022/02/05 12:00 a.m.•9 views

PT-2022-1895 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to incorrect code generation management in Azure Site Recovery. It allows a remote attacker to execute arbitrary code. Recommendations: At the moment, there...

9CVSS7.3AI score0.02416EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2022/02/05 12:00 a.m.•8 views

PT-2022-1891

Name of the Vulnerable Software and Affected Versions VP9 Video Extensions affected versions not specified Description The issue is related to incorrect code generation management in the VP9 Video Extensions package. An attacker can exploit this by sending a specially crafted request to execute...

7.8CVSS7.6AI score0.02592EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
•added 2022/02/01 12:00 a.m.•17 views

The vulnerability of the cleanup.exe executable of the McAfee Agent antivirus software allows a malicious actor to execute arbitrary commands.

The vulnerability of the cleanup.exe executable of the McAfee Agent antivirus software is related to inadequate code generation management. Exploiting this vulnerability allows an attacker to execute arbitrary commands...

7.7CVSS7.6AI score0.01012EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/01/26 12:00 a.m.•19 views

The vulnerability in the built-in software of NETGEAR Wi-Fi routers such as D6200, D7000, R6020, R6080, R6050, JR6150, R6120, R6220, R6230, R6260, R6800, R6900v2, R6700v2, R7450, AC2100, AC2400, AC2600, RBK40, RBR40, RBS40, RBK20, RBR20, RBS20, RBK50, RBR50, RBS50, RBS50Y, and WNR2020 stems from incorrect code generation. This allows attackers to execute attacks on the server side using Server Side Include Injection (SSI).

The vulnerability of the built-in Wi-Fi router software of NETGEAR models D6200, D7000, R6020, R6080, R6050, JR6150, R6120, R6220, R6230, R6260, R6800, R6900v2, R6700v2, R7450, AC2100, AC2400, AC2600, RBK40, RBR40, RBS40, RBK20, RBR20, RBS20, RBK50, RBR50, RBS50, RBS50Y, and WNR2020 is related to...

7.1CVSS7.3AI score0.00336EPSS
SaveExploits0References3Affected Software28
BDU FSTEC
BDU FSTEC
•added 2022/01/25 12:00 a.m.•23 views

The vulnerability of NETGEAR’s Wi-Fi routers, namely RBK40, RBR40, and RBS40, stems from improper handling of the cryptographic generation process. This allows attackers to execute a Server Side Include Injection (SSI) attack.

The vulnerability of the built-in Wi-Fi router software from NETGEAR, namely RBK40, RBR40, and RBS40, is related to incorrect code generation. Exploiting this vulnerability could allow an attacker to execute a Server Side Include Injection SSI attack...

7.1CVSS7.4AI score0.00336EPSS
SaveExploits0References3Affected Software10
BDU FSTEC
BDU FSTEC
•added 2022/01/25 12:00 a.m.•21 views

The vulnerability in the built-in software of NETGEAR Wi-Fi routers such as D6200, D7000, R6020, R6080, R6050, JR6150, R6120, R6220, R6230, R6260, R6800, R6900v2, R6700v2, R7450, AC2100, AC2400, AC2600, RBK40, RBR40, RBS40, RBK20, RBR20, RBS20, RBK50, RBR50, RBS50, and RBS50Y stems from incorrect code generation. This allows attackers to execute attacks on the server side using Server Side Include Injection (SSI).

The vulnerability of the built-in Wi-Fi router software from NETGEAR, including models D6200, D7000, R6020, R6080, R6050, JR6150, R6120, R6220, R6230, R6260, R6800, R6900v2, R6700v2, R7450, AC2100, AC2400, AC2600, RBK40, RBR40, RBS40, RBK20, RBR20, RBS20, RBK50, RBR50, RBS50, and RBS50Y, is relat...

7.1CVSS7.3AI score0.00313EPSS
SaveExploits0References3Affected Software1
attackerkb
attackerkb
•added 2022/01/18 5:15 p.m.•11 views

CVE-2021-39946

Improper neutralization of user input in GitLab CE/EE versions 14.3 to 14.3.6, 14.4 to 14.4.4, and 14.5 to 14.5.2 allowed an attacker to exploit XSS by abusing the generation of the HTML code related to emojis...

8.7CVSS6.7AI score0.01042EPSS
SaveExploits0References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/18 12:00 a.m.•5 views

CVE-2021-39946: Improper Neutralization of Input During Web Page Generation

Improper neutralization of user input in GitLab CE/EE versions 14.3 to 14.3.6, 14.4 to 14.4.4, and 14.5 to 14.5.2 allowed an attacker to exploit XSS by abusing the generation of the HTML code related to emojis...

8.7CVSS5.8AI score0.01042EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/01/15 12:00 a.m.•8 views

PT-2022-1986 · Microsoft · Windows Remote Desktop Client +1

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Remote Desktop Client affected versions not specified Description: The issue is related to incorrect code generation management in the Remote Desktop Client of Microsoft Windows. It allows a remote attacker to execute...

9.3CVSS8.6AI score0.25628EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
•added 2022/01/15 12:00 a.m.•7 views

PT-2022-1952 · Unknown · Raw Image Extension

Name of the Vulnerable Software and Affected Versions: Raw Image Extension affected versions not specified Description: The issue is related to incorrect code generation management in the Raw Image Extension plugin for viewing RAW images. Exploitation of this issue may allow an attacker to execut...

7.8CVSS7.7AI score0.02258EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
•added 2022/01/12 12:00 a.m.•16 views

The vulnerability of the MSHTML platform on Microsoft Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the MSHTML platform in Microsoft Windows systems is related to improper handling of code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code through a specially created web page...

8.8CVSS7.5AI score0.02145EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2022/01/12 12:00 a.m.•18 views

The vulnerability of HEVC Video Extensions relates to improper code generation, allowing attackers to execute arbitrary code.

The vulnerability of HEVC Video Extensions is related to incorrect code generation management. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.7AI score0.02361EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder