Lucene search
K

1541 matches found

BDU FSTEC
BDU FSTEC
added 2022/06/14 12:0 a.m.2 views

The vulnerability of the Win32 Stream Enumeration component in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Win32 Stream Enumeration component in Windows operating systems is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.6CVSS7.8AI score0.04733EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2022/06/14 12:0 a.m.3 views

The vulnerability of the Win32 Stream Enumeration component in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Win32 Stream Enumeration component in Windows operating systems is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.6CVSS7.8AI score0.06152EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2022/06/14 12:0 a.m.1 views

The vulnerability of the Remote Desktop Protocol implementation in the Microsoft Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Remote Desktop Protocol implementation in the Microsoft Windows operating system is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.5CVSS8.2AI score0.08857EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2022/06/14 12:0 a.m.1 views

The vulnerability of the DNS server of the Microsoft Windows operating system, allowing a hacker to execute arbitrary code.

The vulnerability of the DNS server of the Microsoft Windows operating system is related to incorrect code generation management. Exploitation of this vulnerability can allow a remote attacker to execute arbitrary code...

9CVSS7.8AI score0.10145EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2022/06/10 12:0 a.m.2 views

The vulnerability of the Win32 Stream Enumeration component in Windows operating systems, related to improper code generation, allows a malicious actor to execute arbitrary code.

The vulnerability of the Win32 Stream Enumeration component in Windows operating systems is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.6CVSS7.8AI score0.04733EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2022/06/09 12:0 a.m.2 views

The vulnerability of the DNS server of the Microsoft Windows operating system, allowing a hacker to execute arbitrary code.

The vulnerability of the DNS server of the Microsoft Windows operating system is related to incorrect code generation management. Exploitation of this vulnerability can allow a remote attacker to execute arbitrary code...

9CVSS7.8AI score0.10145EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2022/06/09 12:0 a.m.1 views

The vulnerability of the DNS server of the Microsoft Windows operating system, allowing a hacker to execute arbitrary code.

The vulnerability of the DNS server of the Microsoft Windows operating system is related to incorrect code generation management. Exploitation of this vulnerability can allow a remote attacker to execute arbitrary code...

9CVSS7.9AI score0.06422EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2022/06/06 12:0 a.m.2 views

The vulnerability of the DNS server of the Microsoft Windows operating system, allowing a hacker to execute arbitrary code.

The vulnerability of the DNS server of the Microsoft Windows operating system is related to incorrect code generation management. Exploitation of this vulnerability can allow a remote attacker to execute arbitrary code...

9CVSS7.8AI score0.06971EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2022/06/02 12:0 a.m.2 views

The vulnerability of the DNS server of the Microsoft Windows operating system, allowing a hacker to execute arbitrary code.

The vulnerability of the DNS server of the Microsoft Windows operating system is related to incorrect code generation management. Exploitation of this vulnerability can allow a remote attacker to execute arbitrary code...

9CVSS7.7AI score0.09379EPSS
Exploits0References3
Redos
Redos
added 2022/05/30 12:0 a.m.43 views

ROS-20220530-03

Vulnerability of Array method of Mozilla Firefox and Mozilla Firefox ESR browsers and Thunderbird mail client is related to code generation errors. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary JavaScript code. remotely to execute arbitrary...

8.8CVSS8.8AI score0.67932EPSS
Exploits0
BDU FSTEC
BDU FSTEC
added 2022/05/26 12:0 a.m.1 views

The vulnerability of Microsoft Excel editors, related to improper handling of code generation, allows attackers to execute arbitrary code.

The vulnerability of Microsoft Excel editors is related to improper handling of code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9.3CVSS7.7AI score0.01042EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2022/05/26 12:0 a.m.1 views

The vulnerability of Microsoft Excel editors, related to improper handling of code generation, allows attackers to execute arbitrary code.

The vulnerability of Microsoft Excel editors is related to improper handling of code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9.3CVSS7.8AI score0.02387EPSS
Exploits0References3
OSV
OSV
added 2022/05/24 5:11 p.m.1 views

GHSA-297X-8XJ4-VCXV Improper Control of Generation of Code in doT

The dot package v1.1.2 uses Function to compile templates. This can be exploited by the attacker if they can control the given template or if they can control the value set on Object.prototype...

8.8CVSS7.2AI score0.01037EPSS
Exploits1References2
Github Security Blog
Github Security Blog
added 2022/05/24 5:11 p.m.24 views

Improper Control of Generation of Code in doT

The dot package v1.1.2 uses Function to compile templates. This can be exploited by the attacker if they can control the given template or if they can control the value set on Object.prototype...

8.8CVSS8.3AI score0.01037EPSS
Exploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/05/23 12:0 a.m.2 views

The vulnerability of the Array method in Mozilla Firefox and Mozilla Firefox ESR browsers, as well as the Thunderbird email client, allows a malicious actor to execute arbitrary JavaScript code in a privileged context.

The vulnerability of the Array method in Mozilla Firefox and Mozilla Firefox ESR browsers, as well as the Thunderbird email client, is related to errors during code generation. Exploiting this vulnerability allows an attacker to execute arbitrary JavaScript code in a privileged context...

10CVSS8.2AI score0.67932EPSS
Exploits0References18Affected Software14
BDU FSTEC
BDU FSTEC
added 2022/05/20 12:0 a.m.1 views

The vulnerability of the Admin CP configuration module of the MyBB forum creation software allows a hacker to execute arbitrary code.

The vulnerability of the Admin CP module for the MyBB forum creation software is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9CVSS7.5AI score0.82413EPSS
Exploits9References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/05/20 12:0 a.m.1 views

The vulnerability of the Microsoft Office Access Connectivity Engine component of the Microsoft Office software suite, related to improper code generation, allows a malicious actor to execute arbitrary code.

The vulnerability of the Microsoft Office Access Connectivity Engine component of the Microsoft Office software suite is related to improper code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS7.6AI score0.50932EPSS
Exploits0References4
Github Security Blog
Github Security Blog
added 2022/05/17 5:18 a.m.25 views

Improper Control of Generation of Code in Spring Security

CRLF injection vulnerability in the logout functionality in VMware SpringSource Spring Security before 2.0.7 and 3.0.x before 3.0.6 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the spring-security-redirect parameter...

4.3CVSS5AI score0.07155EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2022/05/17 5:18 a.m.45 views

GHSA-5XM9-RF63-WJ7H Improper Control of Generation of Code in Spring Security

CRLF injection vulnerability in the logout functionality in VMware SpringSource Spring Security before 2.0.7 and 3.0.x before 3.0.6 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the spring-security-redirect parameter...

4.3CVSS6.7AI score0.07155EPSS
Exploits1References4
OSV
OSV
added 2022/05/17 4:17 a.m.1 views

GHSA-49J7-QGHP-5WJ8 Improper Control of Generation of Code in HawtJNI

Race condition in hawtjni-runtime/src/main/java/org/fusesource/hawtjni/runtime/Library.java in HawtJNI before 1.8, when a custom library path is not specified, allows local users to execute arbitrary Java code by overwriting a temporary JAR file with a predictable name in /tmp...

4.4CVSS6.1AI score0.00043EPSS
Exploits1References15
Rows per page
Query Builder