Lucene search
K

386 matches found

BDU FSTEC
BDU FSTEC
added 2024/04/11 12:0 a.m.2 views

The vulnerability of the Fortinet FortiClient security device for Linux, related to improper code generation management, allows a hacker to execute arbitrary code.

The vulnerability of Fortinet’s FortiClient security device for Linux is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely, provided that the user visits a specially crafted malicious website...

10CVSS6.3AI score0.01524EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/04/02 12:0 a.m.2 views

The vulnerability of the CMS system Grav CMS, related to improper code generation, allows a hacker to execute arbitrary code.

The vulnerability of the CMS system Grav CMS is related to improper handling of code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially created data...

9CVSS8AI score0.0576EPSS
Exploits4References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/03/26 12:0 a.m.1 views

The vulnerability of the Ruby/Gitt library interpreter in Ruby, allowing attackers to execute arbitrary code

The vulnerability of the Ruby/Gitt library interpreter in Ruby is related to improper code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS7.2AI score0.01351EPSS
Exploits0References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2024/03/26 12:0 a.m.1 views

The vulnerability of Mozilla Firefox and Firefox ESR browsers allows attackers to elevate their privileges and execute arbitrary code.

The vulnerability of Mozilla Firefox and Firefox ESR browsers is related to incorrect event handling due to improper code generation. Exploiting this vulnerability allows a remote attacker to enhance their privileges and execute arbitrary code...

10CVSS7.7AI score0.047EPSS
Exploits0References15Affected Software5
BDU FSTEC
BDU FSTEC
added 2024/02/29 12:0 a.m.2 views

The vulnerability of the MyQ Print Server printing server lies in its improper handling of code generation, allowing attackers to execute arbitrary codes.

The vulnerability of the MyQ Print Server printer server is related to improper management of code generation. Exploiting this vulnerability allows a remote attacker to generate arbitrary codes...

10CVSS5.7AI score
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2024/02/27 12:0 a.m.5 views

The vulnerability of the Apache DolphinScheduler scheduler platform, related to improper code generation management, allows a hacker to execute arbitrary code.

The vulnerability of the Apache DolphinScheduler scheduler platform is related to improper management of code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS8.1AI score0.02301EPSS
Exploits0References7Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/02/19 12:0 a.m.2 views

The vulnerability of the Inter-Device Communication component of Cisco Firepower Threat Defense’s microprogramming software and Cisco Firepower Management Center’s network management software allows a attacker to execute arbitrary commands with root privileges.

The vulnerability of the Inter-Device Communication component of Cisco Firepower Threat Defense’s microprogramming-based network interface controllers, as well as the Cisco Firepower Management Center’s network management software, is related to improper code generation. Exploiting this...

8.2CVSS7.9AI score0.00234EPSS
Exploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/02/19 12:0 a.m.4 views

The vulnerability of the SAP Application Interface Framework, a software tool for developing and managing application interfaces, arises from improper code generation. This vulnerability allows attackers to compromise the confidentiality, integrity, and accessibility of data.

The vulnerability of the SAP Application Interface Framework, a software tool for developing and managing application interfaces, is related to improper code generation. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of data...

8.4CVSS7.8AI score0.00611EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/02/14 12:0 a.m.1 views

The vulnerability of the XWiki platform, which is related to improper code generation management, allows a perpetrator to execute arbitrary code.

The vulnerability of the XWiki Platform lies in improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9CVSS8AI score0.00985EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/02/06 12:0 a.m.4 views

The vulnerability of the ServiceNow Data Flow data management platform, related to improper code generation, allows a malicious actor to execute arbitrary code.

The vulnerability of the Data Flow management platform ServiceNow is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9CVSS8AI score0.00402EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/02/06 12:0 a.m.3 views

The vulnerability of the user registration function of the XWiki Platform allows a perpetrator to execute arbitrary code.

The vulnerability of the user registration function of the XWiki Platform is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS8.1AI score0.9348EPSS
Exploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/02/02 12:0 a.m.3 views

The vulnerability of the digital platform for Miro’s collaborative work with macOS operating systems arises from improper code generation management. This allows a hacker to execute arbitrary code.

The vulnerability of the digital platform for Miro’s collaborative work with macOS operating systems is related to improper code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.2AI score0.01288EPSS
Exploits2References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/01/18 12:0 a.m.2 views

The vulnerability of Citrix ADC application delivery controllers (formerly known as Citrix NetScaler Application Delivery Controller) and Citrix Gateway access control systems (formerly known as Citrix NetScaler Gateway) stems from improper code generation, allowing attackers to execute arbitrary code.

The vulnerability of Citrix ADC application delivery controllers formerly known as Citrix NetScaler Application Delivery Controller, as well as the Citrix Gateway access control system formerly known as Citrix NetScaler Gateway, is related to improper code generation. Exploiting this vulnerabilit...

6.5CVSS8.3AI score0.03191EPSS
Exploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/01/12 12:0 a.m.2 views

The vulnerability of the XWiki platform, which is related to improper code generation management, allows a perpetrator to execute arbitrary code.

The vulnerability of the XWiki Platform lies in improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9.9CVSS8AI score0.01188EPSS
Exploits0References9Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/01/12 12:0 a.m.2 views

The vulnerability of the user interface for searching the platform that creates collaborative web applications – XWiki Platform. XWiki allows a perpetrator to execute arbitrary code.

The vulnerability of the user interface for searching the XWiki Platform, a platform for creating collaborative web applications, is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9.9CVSS8AI score0.78812EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/01/11 12:0 a.m.2 views

The vulnerability of the Struts2 software component for managing power supply sources in Voltronic Power View allows a perpetrator to execute arbitrary code.

The vulnerability of the Struts2 component in the software for managing power sources of Voltronic Power ViewPower Pro is related to improper code generation. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

10CVSS8.2AI score0.01603EPSS
Exploits0References5
OSV
OSV
added 2023/12/29 9:15 a.m.2 views

CVE-2023-47840

Improper Control of Generation of Code 'Code Injection' vulnerability in Qode Interactive Qode Essential Addons.This issue affects Qode Essential Addons: from n/a through 1.5.2...

8.8CVSS7.3AI score0.01408EPSS
Exploits1References1
BDU FSTEC
BDU FSTEC
added 2023/12/20 12:0 a.m.4 views

The vulnerability of the Helix Core version control software, related to improper code generation management, allows a perpetrator to execute arbitrary code.

The vulnerability of the Helix Core version control software is related to improper code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS7.8AI score0.01115EPSS
Exploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2023/12/11 12:0 a.m.3 views

PT-2023-32139 · Frauscher · Fds102 For Fadc/Fadci +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: This issue allows a remote attacker with low privileges to exploit Improper Control of Generation of Code, also known as 'Code Injection', to gain full...

8.8CVSS8.8AI score0.00958EPSS
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2023/12/08 12:0 a.m.4 views

The vulnerability of the GE Proficy HMI/SCADA iFIX software control system lies in improper code generation, which allows attackers to gain full control over the software.

The vulnerability of the GE Proficy HMI/SCADA iFIX supervisory control software lies in improper code generation. Exploiting this vulnerability can allow an attacker to gain full control over the software by introducing a malicious configuration file into the expected web server execution path...

10CVSS8AI score0.00571EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder