1905 matches found
ROS-20260910-73-0030
The vulnerability of the USB component in Google Chrome and Microsoft Edge browsers is related to improper code generation. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
ROS-20260909-73-0113
The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to improper code generation. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...
ROS-20260909-73-0171
The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to improper code generation. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
ROS-20260909-73-0126
The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to improper code generation. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...
CVE-2026-25194
CVE-2026-35194 — Apache Flink SQL 代码注入 通过 SQL 代码生成注入，在 Apache Flink TaskManager 上实现远程代码执行。 | ---|--- CVE| CVE-2026-35194 CVSS| 8.1（高危） CWE| CWE-94 — 代码注入 受影响版本| Flink 1.15.0 – 1.20.3 / 2.0.0 – 2.2.0 修复版本| 1.20.4 / 2.0.2 / 2.1.2 / 2.2.1 攻击面| SQL Gateway REST API（默认端口 8083，无认证） 快速开始 1. 部署漏洞实验环境...
ROS-20260908-73-0086
The vulnerability of the Safe Browsing service in Google Chrome and Microsoft Edge is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code through a malicious file...
The vulnerability of the process_command_opts() function in the libtiff library, which allows a hacker to execute arbitrary code.
The vulnerability of the processcommandopts function in the libtiff library is related to improper code generation. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the application software interface of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B allows a hacker to execute arbitrary code.
The vulnerability of the application software interface of programming platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B is related to the lack of measures taken to neutralize special elements in the template creation mechanism...
The vulnerability of the Pre-Logon Access Provider (PLAP) component of the software for secure remote access to data in the Palo Alto Networks GlobalProtect App allows a perpetrator to execute arbitrary code.
The vulnerability of the Pre-Logon Access Provider PLAP component of the Palo Alto Networks GlobalProtect App, which enables secure remote access to data, is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with SYSTEM privilege...
The vulnerability of the debugging console for the WatchMan-Site7 plugin of the WordPress content management system allows a hacker to execute arbitrary code.
The vulnerability of the debugging console for the WatchMan-Site7 plugin of the WordPress content management system is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the bpf_tracing_prog_attach() function in the kernel/bpf/syscall.c module, which supports the BPF interpreter for Linux kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the bpftracingprogattach function in the kernel/bpf/syscall.c module, which supports the BPF interpreter for Linux kernels, is related to incorrect code generation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
GHSA-FG9P-MRXR-HVQ7 Orval: RCE via OpenAPI path -> unescaped request-URL template literal (backtick breakout)
Summary Orval emits the OpenAPI path into the generated request URL as a TEMPLATE LITERAL /users/... without escaping the backtick character. A path containing a backtick closes the template literal and injects a concatenation expression that is evaluated when the generated URL/request/key functi...
The vulnerability of the analyse_resultat_skel() function in the SPIP content management system allows a hacker to execute arbitrary code.
The vulnerability of the analyseresultatskel function in the SPIP content management system is related to improper handling of code generation. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the JavaScript script handler in Google Chrome’s V8 browser allows a hacker to trigger a service failure.
The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to improper code generation. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge web browsers allows attackers to induce a service failure.
The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to improper code generation. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
EUVD-2026-69130
Improper Control of Generation of Code 'Code Injection' vulnerability in Klemsan Electrical Electronics Inc. KIO Klemsan Internet Objects allows Code Injection. This issue affects KIO Klemsan Internet Objects: before v1.9...
PT-2026-84218
Improper Control of Generation of Code 'Code Injection' vulnerability in Klemsan Electrical Electronics Inc. KIO Klemsan Internet Objects allows Code Injection. This issue affects KIO Klemsan Internet Objects: before v1.9...
The vulnerability of the Headless web browsers Google Chrome and Microsoft Edge, which allows a hacker to trigger a service failure
The vulnerability of the Headless web browsers Google Chrome and Microsoft Edge is related to improper code generation. Exploiting this vulnerability can allow a malicious actor to trigger a service failure through a specially created HTML page...
The vulnerability in the Accessibility component of Google Chrome and Microsoft Edge browsers allows attackers to access confidential data and influence data integrity.
The vulnerability of the Accessibility component in Google Chrome and Microsoft Edge is related to improper code generation. Exploiting this vulnerability can allow an attacker to gain access to confidential data and compromise data integrity...