Apache DolphinScheduler Code Execution

The vulnerability of the Apache DolphinScheduler scheduler platform is related to improper management of code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

SAP Application Interface Framework Code Generation

The vulnerability of the SAP Application Interface Framework, a software tool for developing and managing application interfaces, is related to improper code generation. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of data...

Inter-Device Communication component of Privilege Escalation

The vulnerability of the Inter-Device Communication component of Cisco Firepower Threat Defense’s microprogramming-based network interface controllers, as well as the Cisco Firepower Management Center’s network management software, is related to improper code generation. Exploiting this...

XWiki Platform Code Execution

The vulnerability of the XWiki Platform lies in improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

ServiceNow Data Flow Code Execution

The vulnerability of the Data Flow management platform ServiceNow is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

XWiki Platform User Registration Code Execution

The vulnerability of the user registration function of the XWiki Platform is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Miro Digital Platform Code Generation Code Execution

The vulnerability of the digital platform for Miro’s collaborative work with macOS operating systems is related to improper code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Citrix ADC Code Execution

The vulnerability of Citrix ADC application delivery controllers formerly known as Citrix NetScaler Application Delivery Controller, as well as the Citrix Gateway access control system formerly known as Citrix NetScaler Gateway, is related to improper code generation. Exploiting this vulnerabilit...

XWiki Platform Code Execution

The vulnerability of the XWiki Platform lies in improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

XWiki Platform Code Execution

The vulnerability of the user interface for searching the XWiki Platform, a platform for creating collaborative web applications, is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Struts2 Code Execution

The vulnerability of the Struts2 component in the software for managing power sources of Voltronic Power ViewPower Pro is related to improper code generation. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

CVE-2023-47840

Improper Control of Generation of Code 'Code Injection' vulnerability in Qode Interactive Qode Essential Addons.This issue affects Qode Essential Addons: from n/a through 1.5.2...

Helix Core Code Execution

The vulnerability of the Helix Core version control software is related to improper code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2023-32139 · Frauscher · Fds102 For Fadc/Fadci +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: This issue allows a remote attacker with low privileges to exploit Improper Control of Generation of Code, also known as 'Code Injection', to gain full...

GE Proficy HMI/SCADA iFIX Code Generation

The vulnerability of the GE Proficy HMI/SCADA iFIX supervisory control software lies in improper code generation. Exploiting this vulnerability can allow an attacker to gain full control over the software by introducing a malicious configuration file into the expected web server execution path...

Zabbix Agent Code Execution

The vulnerability of the Zabbix universal monitoring agent is related to incorrect code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

EdgeRouter Router Code Execution

The vulnerability of Microprogrammed Software in EdgeRouter routers and UniF Security Gateways is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Ghostscript gdevijs.c Code Execution

The vulnerability of the gdevijs.c component in the Ghostscript document processing software lies in improper code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

StruxureWare Data Center Expert Code Execution

The vulnerability of the StruxureWare Data Center Expert monitoring system relates to improper code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

RocketMQ Arbitrary Command Execution

The vulnerability of the RocketMQ messaging platform is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...