CVE-2023-44381: Improper Control of Generation of Code

October is a Content Management System CMS and web platform to assist with development workflow. An authenticated backend user with the editor.cmspages, editor.cmslayouts, or editor.cmspartials permissions who would normally not be permitted to provide PHP code to be executed by the CMS due to...

CVE-2023-5226: Improper Control of Generation of Code

An issue has been discovered in GitLab affecting all versions before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting from 16.6 before 16.6.1. Under certain circumstances, a malicious actor bypass prohibited branch checks using a specially crafted branch name to...

ROS-20231115-04

Visual Studio Coden source code editor vulnerability related to improper control of code generation. code generation. Exploitation of the vulnerability may allow an attacker to execute arbitrary code Visual Studio Code source code editor vulnerability is related to insufficient protection of...

CVE-2023-43177: Improper Control of Dynamically-Managed Code Resources

CrushFTP prior to 10.5.1 is vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes...

CVE-2023-36437: Improper Control of Generation of Code

Azure DevOps Server Remote Code Execution Vulnerability...

CVE-2023-45560: Improper Control of Generation of Code

An issue in Yasukawa memberscard v.13.6.1 allows attackers to send crafted notifications via leakage of the channel access token...

CVE-2023-6125: Improper Control of Generation of Code

Code Injection in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2...

CVE-2023-36014: Improper Control of Generation of Code

Microsoft Edge Chromium-based Remote Code Execution Vulnerability...

CVE-2023-5539: Improper Control of Generation of Code

A remote code execution risk was identified in the Lesson activity. By default this was only available to teachers and managers...

CVE-2023-36570: Improper Control of Generation of Code

Microsoft Message Queuing MSMQ Remote Code Execution Vulnerability...

CVE-2023-36591: Improper Control of Generation of Code

Microsoft Message Queuing MSMQ Remote Code Execution Vulnerability...

CVE-2023-36589: Improper Control of Generation of Code

Microsoft Message Queuing MSMQ Remote Code Execution Vulnerability...

CVE-2023-36575: Improper Control of Generation of Code

Microsoft Message Queuing MSMQ Remote Code Execution Vulnerability...

CVE-2023-36574: Improper Control of Generation of Code

Microsoft Message Queuing MSMQ Remote Code Execution Vulnerability...

CVE-2023-36571: Improper Control of Generation of Code

Microsoft Message Queuing MSMQ Remote Code Execution Vulnerability...

CVE-2023-36592: Improper Control of Generation of Code

Microsoft Message Queuing MSMQ Remote Code Execution Vulnerability...

CVE-2023-36702: Improper Control of Generation of Code

Microsoft DirectMusic Remote Code Execution Vulnerability...

CVE-2023-36572: Improper Control of Generation of Code

Microsoft Message Queuing MSMQ Remote Code Execution Vulnerability...

CVE-2023-36789: Improper Control of Generation of Code

Skype for Business Remote Code Execution Vulnerability...

Trane Symbio Improper Control of Generation of Code (CVE-2021-38448)

The affected controllers do not properly sanitize the input containing code syntax. As a result, an attacker could craft code to alter the intended controller flow of the software. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more informatio...