CVE-2023-21569: Improper Control of Generation of Code

Azure DevOps Server Spoofing Vulnerability...

CVE-2023-33131: Improper Control of Generation of Code

Microsoft Outlook Remote Code Execution Vulnerability...

CVE-2019-16283: Improper Control of Generation of Code

A potential security vulnerability has been identified with a version of the HP Softpaq installer that can lead to arbitrary code execution...

CVE-2022-35743: Improper Control of Generation of Code

Microsoft Windows Support Diagnostic Tool MSDT Remote Code Execution Vulnerability...

CVE-2023-1178: Improper Control of Generation of Code

An issue has been discovered in GitLab CE/EE affecting all versions from 8.6 before 15.9.6, all versions starting from 15.10 before 15.10.5, all versions starting from 15.11 before 15.11.1. File integrity may be compromised when source code or installation packages are pulled from a tag or from a...

CVE-2023-27897: Improper Control of Generation of Code

In SAP CRM - versions 700, 701, 702, 712, 713, an attacker who is authenticated with a non-administrative role and a common remote execution authorization can use a vulnerable interface to execute an application function to perform actions which they would not normally be permitted to perform...

CVE-2023-25261: Improper Control of Generation of Code

Certain Stimulsoft GmbH products are affected by: Remote Code Execution. This affects Stimulsoft Designer Desktop 2023.1.4 and Stimulsoft Designer Web 2023.1.3 and Stimulsoft Viewer Web 2023.1.3. Access to the local file system is not prohibited in any way. Therefore, an attacker may include sour...

CVE-2023-27893: Improper Control of Generation of Code

An attacker authenticated as a user with a non-administrative role and a common remote execution authorization in SAP Solution Manager and ABAP managed systems ST-PI - versions 20881700, 20081710, 740, can use a vulnerable interface to execute an application function to perform actions which they...

Kardex Mlog MCC 5.7.12+0-a203c2a213-master File Inclusion / Remote Code Execution Vulnerabilities

Kardex Mlog MCC version 5.7.12+0-a203c2a213-master suffers from a file inclusion vulnerability that allows for remote code execution. Remote Code Execution in Kardex MLOG ======================================================================= Product: Kardex Mlog MCC Vendor: Kardex Holding AG...

Kardex Mlog MCC 5.7.12+0-a203c2a213-master File Inclusion / Remote Code Execution

Remote Code Execution in Kardex MLOG ======================================================================= Product: Kardex Mlog MCC Vendor: Kardex Holding AG Tested Version: 5.7.12+0-a203c2a213-master Fixed Version: inline patch - no new version number Vulnerability Type: Improper Control of...

CVE-2021-26277: Improper Control of Generation of Code

The framework service handles pendingIntent incorrectly, allowing a malicious application with certain privileges to perform privileged actions...

CVE-2023-21553: Improper Control of Generation of Code

Azure DevOps Server Remote Code Execution Vulnerability...

CVE-2023-0575 Remote Code Execution

External Control of Critical State Data, Improper Control of Generation of Code 'Code Injection' vulnerability in YugaByte, Inc. Yugabyte DB on Windows, Linux, MacOS, iOS DevopsBase.Java:execCommand, TableManager.Java:runCommand modules allows API Manipulation, Privilege Abuse. This vulnerability...

CVE-2021-37774: Improper Control of Generation of Code

An issue was discovered in function httpProcDataSrv in TL-WDR7660 2.0.30 that allows attackers to execute arbitrary code...

CVE-2023-21890: Improper Control of Generation of Code

Vulnerability in the Oracle Communications Converged Application Server product of Oracle Communications component: Core. Supported versions that are affected are 7.1.0 and 8.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via UDP to compromise Oracle...

CVE-2023-21886: Improper Control of Generation of Code

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 6.1.42 and prior to 7.0.6. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Orac...

CVE-2023-0022: Improper Control of Generation of Code

SAP BusinessObjects Business Intelligence Analysis edition for OLAP allows an authenticated attacker to inject malicious code that can be executed by the application over the network. On successful exploitation, an attacker can perform operations that may completely compromise the application...

CVE-2023-0048: Improper Control of Generation of Code

Code Injection in GitHub repository lirantal/daloradius prior to master-branch...

CVE-2022-46874: Improper Control of Generation of Code

A file with a long filename could have had its filename truncated to remove the valid extension, leaving a malicious extension in its place. This could potentially led to user confusion and the execution of malicious code. Note: This issue was originally included in the advisories for Thunderbird...

CVE-2022-43486: Improper Control of Generation of Code

Hidden functionality vulnerability in Buffalo network devices allows a network-adjacent attacker with an administrative privilege to enable the debug functionalities and execute an arbitrary command on the affected devices...