1631 matches found
GHSA-297X-8XJ4-VCXV Improper Control of Generation of Code in doT
The dot package v1.1.2 uses Function to compile templates. This can be exploited by the attacker if they can control the given template or if they can control the value set on Object.prototype...
Improper Control of Generation of Code in doT
The dot package v1.1.2 uses Function to compile templates. This can be exploited by the attacker if they can control the given template or if they can control the value set on Object.prototype...
The vulnerability of the Array method in Mozilla Firefox and Mozilla Firefox ESR browsers, as well as the Thunderbird email client, allows a malicious actor to execute arbitrary JavaScript code in a privileged context.
The vulnerability of the Array method in Mozilla Firefox and Mozilla Firefox ESR browsers, as well as the Thunderbird email client, is related to errors during code generation. Exploiting this vulnerability allows an attacker to execute arbitrary JavaScript code in a privileged context...
The vulnerability of the Admin CP configuration module of the MyBB forum creation software allows a hacker to execute arbitrary code.
The vulnerability of the Admin CP module for the MyBB forum creation software is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the Microsoft Office Access Connectivity Engine component of the Microsoft Office software suite, related to improper code generation, allows a malicious actor to execute arbitrary code.
The vulnerability of the Microsoft Office Access Connectivity Engine component of the Microsoft Office software suite is related to improper code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Improper Control of Generation of Code in Spring Security
CRLF injection vulnerability in the logout functionality in VMware SpringSource Spring Security before 2.0.7 and 3.0.x before 3.0.6 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the spring-security-redirect parameter...
GHSA-5XM9-RF63-WJ7H Improper Control of Generation of Code in Spring Security
CRLF injection vulnerability in the logout functionality in VMware SpringSource Spring Security before 2.0.7 and 3.0.x before 3.0.6 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the spring-security-redirect parameter...
GHSA-49J7-QGHP-5WJ8 Improper Control of Generation of Code in HawtJNI
Race condition in hawtjni-runtime/src/main/java/org/fusesource/hawtjni/runtime/Library.java in HawtJNI before 1.8, when a custom library path is not specified, allows local users to execute arbitrary Java code by overwriting a temporary JAR file with a predictable name in /tmp...
The vulnerability of the Redis database management system allows a hacker to execute arbitrary code.
The vulnerability of the Redis database management system is related to improper code generation. Exploiting this vulnerability allows an attacker to execute arbitrary code...
GHSA-R4M4-PMVW-M6J5 Apache Thrift Go Library Command Injection
The Apache Thrift Go client library exposed the potential during code generation for command injection due to using an external formatting tool. Affected Apache Thrift 0.9.3 and older, Fixed in Apache Thrift 0.10.0...
Apache Thrift Go Library Command Injection
The Apache Thrift Go client library exposed the potential during code generation for command injection due to using an external formatting tool. Affected Apache Thrift 0.9.3 and older, Fixed in Apache Thrift 0.10.0...
ar.com.fdvs:DynamicJasper (>=4.0.4 <=5.0.8), br.com.prixma:vraptor-jasperreport (>=1.0.0 <=4.1.1) +379 more potentially affected by CVE-2014-3004 via org.codehaus.castor:castor (>=1.0.5 <=1.2)
org.codehaus.castor:castor MAVEN version =1.0.5, =4.0.4, =1.0.0, =1.6, =1.0, =1.0.14, =1.0.14, =1.0.14, =1.0.33, =1.0.14, =1.0.14, =1.0.33, =1.0.33, =1.0.33, =1.0.14, =1.0.37 and more Source cves: CVE-2014-3004 Source advisory: OSV:GHSA-JWWR-FJGH-CV2X...
Improper Control of Generation of Code in Apache Kafka
In Apache Kafka 0.9.0.0 to 0.9.0.1, 0.10.0.0 to 0.10.2.1, 0.11.0.0 to 0.11.0.2, and 1.0.0, authenticated Kafka users may perform action reserved for the Broker via a manually created fetch request interfering with data replication, resulting in data loss...
GHSA-GH27-38P5-MRXC Improper Control of Generation of Code in Apache Kafka
In Apache Kafka 0.9.0.0 to 0.9.0.1, 0.10.0.0 to 0.10.2.1, 0.11.0.0 to 0.11.0.2, and 1.0.0, authenticated Kafka users may perform action reserved for the Broker via a manually created fetch request interfering with data replication, resulting in data loss...
[SECURITY] Fedora 36 Update: CuraEngine-4.13.1-2.fc36
CuraEngine is a C++ console application for 3D printing G-code generation. It has been made as a better and faster alternative to the old Skeinforge engine. This is just a console application for G-code generation. For a full graphical application look at cura with is the graphical frontend for...
The vulnerability of the Microsoft Office and Microsoft 365 Apps for Enterprise software packages relates to improper code generation management, allowing an attacker to execute arbitrary code.
The vulnerability of the Microsoft Office and Microsoft 365 Apps for Enterprise software packages is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the HEVC Video Extension codec, related to improper code generation, allows a perpetrator to execute arbitrary code.
The vulnerability of the HEVC Video Extension codec is related to improper code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
The vulnerability of the Microsoft Office Graphics Editor for spreadsheet applications, Microsoft Excel, allows a hacker to execute arbitrary code.
The vulnerability of the Microsoft Office Graphics Editor for spreadsheet applications, Microsoft Excel, is related to improper handling of code generation. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of Microsoft Windows Defender, a security software for Windows operating systems, allows a hacker to execute arbitrary code.
The vulnerability of Microsoft’s Windows Defender operating system is related to improper code generation management. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of Microsoft Excel editors, related to improper handling of code generation, allows attackers to execute arbitrary code.
The vulnerability of Microsoft Excel editors is related to improper handling of code generation. Exploiting this vulnerability can allow an attacker to execute arbitrary code...