Lucene search
K

1541 matches found

BDU FSTEC
BDU FSTEC
added 2022/05/17 12:0 a.m.1 views

The vulnerability of the Redis database management system allows a hacker to execute arbitrary code.

The vulnerability of the Redis database management system is related to improper code generation. Exploiting this vulnerability allows an attacker to execute arbitrary code...

3.9CVSS7AI score0.0168EPSS
Exploits1References14Affected Software4
OSV
OSV
added 2022/05/13 1:25 a.m.23 views

GHSA-R4M4-PMVW-M6J5 Apache Thrift Go Library Command Injection

The Apache Thrift Go client library exposed the potential during code generation for command injection due to using an external formatting tool. Affected Apache Thrift 0.9.3 and older, Fixed in Apache Thrift 0.10.0...

8.8CVSS8.9AI score0.22566EPSS
Exploits0References7
Github Security Blog
Github Security Blog
added 2022/05/13 1:25 a.m.26 views

Apache Thrift Go Library Command Injection

The Apache Thrift Go client library exposed the potential during code generation for command injection due to using an external formatting tool. Affected Apache Thrift 0.9.3 and older, Fixed in Apache Thrift 0.10.0...

9CVSS9AI score0.22566EPSS
Exploits0References8Affected Software1
vulnersOsv
vulnersOsv
added 2022/05/13 1:5 a.m.1 views

ar.com.fdvs:DynamicJasper (>=4.0.4 <=5.0.8), br.com.prixma:vraptor-jasperreport (>=1.0.0 <=4.1.1) +379 more potentially affected by CVE-2014-3004 via org.codehaus.castor:castor (>=1.0.5 <=1.2)

org.codehaus.castor:castor MAVEN version =1.0.5, =4.0.4, =1.0.0, =1.6, =1.0, =1.0.14, =1.0.14, =1.0.14, =1.0.33, =1.0.14, =1.0.14, =1.0.33, =1.0.33, =1.0.33, =1.0.14, =1.0.37 and more Source cves: CVE-2014-3004 Source advisory: OSV:GHSA-JWWR-FJGH-CV2X...

4.3CVSS7.1AI score0.03627EPSS
Exploits3
OSV
OSV
added 2022/05/13 1:2 a.m.27 views

GHSA-GH27-38P5-MRXC Improper Control of Generation of Code in Apache Kafka

In Apache Kafka 0.9.0.0 to 0.9.0.1, 0.10.0.0 to 0.10.2.1, 0.11.0.0 to 0.11.0.2, and 1.0.0, authenticated Kafka users may perform action reserved for the Broker via a manually created fetch request interfering with data replication, resulting in data loss...

5.4CVSS5.4AI score0.00688EPSS
Exploits0References11
Github Security Blog
Github Security Blog
added 2022/05/13 1:2 a.m.26 views

Improper Control of Generation of Code in Apache Kafka

In Apache Kafka 0.9.0.0 to 0.9.0.1, 0.10.0.0 to 0.10.2.1, 0.11.0.0 to 0.11.0.2, and 1.0.0, authenticated Kafka users may perform action reserved for the Broker via a manually created fetch request interfering with data replication, resulting in data loss...

5.5CVSS4.4AI score0.00688EPSS
Exploits0References12Affected Software1
Fedora
Fedora
added 2022/05/07 5:10 a.m.22 views

[SECURITY] Fedora 36 Update: CuraEngine-4.13.1-2.fc36

CuraEngine is a C++ console application for 3D printing G-code generation. It has been made as a better and faster alternative to the old Skeinforge engine. This is just a console application for G-code generation. For a full graphical application look at cura with is the graphical frontend for...

6.5CVSS6.8AI score0.01116EPSS
Exploits1
BDU FSTEC
BDU FSTEC
added 2022/05/05 12:0 a.m.1 views

The vulnerability of the Microsoft Office and Microsoft 365 Apps for Enterprise software packages relates to improper code generation management, allowing an attacker to execute arbitrary code.

The vulnerability of the Microsoft Office and Microsoft 365 Apps for Enterprise software packages is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

7.8CVSS7.8AI score0.04203EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2022/05/04 12:0 a.m.1 views

The vulnerability of the Microsoft Office Graphics Editor for spreadsheet applications, Microsoft Excel, allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft Office Graphics Editor for spreadsheet applications, Microsoft Excel, is related to improper handling of code generation. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.6AI score0.05015EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2022/05/04 12:0 a.m.1 views

The vulnerability of Microsoft Windows Defender, a security software for Windows operating systems, allows a hacker to execute arbitrary code.

The vulnerability of Microsoft’s Windows Defender operating system is related to improper code generation management. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

9.3CVSS7.7AI score0.05072EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2022/05/04 12:0 a.m.2 views

The vulnerability of Microsoft Excel editors, related to improper handling of code generation, allows attackers to execute arbitrary code.

The vulnerability of Microsoft Excel editors is related to improper handling of code generation. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.7AI score0.09094EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2022/05/04 12:0 a.m.1 views

The vulnerability of the NanoSSL library in microprogramming software for Aruba switches such as Aruba 5400R, Aruba 3810, Aruba 2920, Aruba 2930F, Aruba 2930M, Aruba 2530, and Aruba 2540 allows a hacker to execute arbitrary code.

The vulnerability of the NanoSSL microprogramming software library used in Aruba 5400R, Aruba 3810, Aruba 2920, Aruba 2930F, Aruba 2930M, Aruba 2530, and Aruba 2540 switches is related to improper code generation management. Exploiting this vulnerability allows a remote attacker to execute...

10CVSS6AI score
Exploits0References3Affected Software7
BDU FSTEC
BDU FSTEC
added 2022/05/04 12:0 a.m.2 views

The vulnerability of the HEVC Video Extension codec, related to improper code generation, allows a perpetrator to execute arbitrary code.

The vulnerability of the HEVC Video Extension codec is related to improper code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS7.6AI score0.01109EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2022/04/27 12:0 a.m.2 views

The vulnerability of microprogrammed software in programmable logic controllers such as ControlLogix 5580, GuardLogix 5580, CompactLogix 5380, CompactLogix 5480, and Compact GuardLogix 5380 lies in improper code generation. This allows attackers to implant code into the controller that the user will be unable to detect.

The vulnerability of microprogrammed software in programmable logic controllers such as ControlLogix 5580, GuardLogix 5580, CompactLogix 5380, CompactLogix 5480, and Compact GuardLogix 5380 lies in improper code generation. Exploiting this vulnerability allows an intruder to implant code into the...

7.7CVSS7.5AI score0.00026EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2022/04/27 12:0 a.m.1 views

The vulnerability of the _compile function in the Perl programming language allows attackers to execute arbitrary commands.

The vulnerability of the compile function in the Perl programming language is related to improper handling of code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

7.5CVSS8.2AI score0.81971EPSS
Exploits13References18Affected Software4
BDU FSTEC
BDU FSTEC
added 2022/04/21 12:0 a.m.1 views

The vulnerability of the distributed database management system Apache Cassandra, related to improper code generation, allows a hacker to execute arbitrary code on the host.

The vulnerability of the distributed database management system Apache Cassandra is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the host remotely...

9.1CVSS8.5AI score0.91007EPSS
Exploits6References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/20 12:0 a.m.1 views

The vulnerability of the CMS system SDCMS, related to improper code generation, allows a hacker to execute arbitrary PHP code.

The vulnerability of the CMS system SDCMS is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary PHP code...

9CVSS8.1AI score0.01016EPSS
Exploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/04/18 12:0 a.m.2 views

The vulnerability of the Network File System (NFS) of the Microsoft Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Network File System NFS of the Microsoft Windows operating system is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created NFS network message protocol...

10CVSS8.5AI score0.37582EPSS
Exploits1References5
BDU FSTEC
BDU FSTEC
added 2022/04/18 12:0 a.m.1 views

The vulnerability of the Network File System (NFS) of the Microsoft Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Network File System NFS of the Microsoft Windows operating system is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created NFS network message protocol...

10CVSS8.5AI score0.37582EPSS
Exploits1References3
BDU FSTEC
BDU FSTEC
added 2022/04/18 12:0 a.m.2 views

The vulnerability affects the runtime of procedure calls in the Microsoft Windows operating system, allowing an attacker to execute arbitrary code.

The vulnerability of remote procedure call runtime in the Microsoft Windows operating system is related to improper code generation management. Exploitation of this vulnerability can allow a malicious actor to execute arbitrary code remotely...

10CVSS8.4AI score0.04978EPSS
Exploits0References4
Rows per page
Query Builder