903 matches found
Omron CJ/CS/CP Series
View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION : Exploitable remotely/low attack complexity Vendor : Omron Equipment : Sysmac CJ/CS/CP Series Vulnerability : Improper Control of Interaction Frequency 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to...
CVE-2023-4977: Improper Control of Generation of Code
Code Injection in GitHub repository librenms/librenms prior to 23.9.0...
CVE-2023-41892: Improper Control of Generation of Code
Craft CMS is a platform for creating digital experiences. This is a high-impact, low-complexity attack vector. Users running Craft installations before 4.4.15 are encouraged to update to at least that version to mitigate the issue. This issue has been fixed in Craft CMS 4.4.15...
CVE-2023-39956: Improper Control of Generation of Code
Electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Electron apps that are launched as command line executables are impacted. Specifically this issue can only be exploited if the following conditions are met: 1. The app is launched with...
CVE-2023-32809
In bluetooth driver, there is a possible read and write access to registers due to improper access control of register interface. This could lead to local leak of sensitive information with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07849753...
CVE-2020-22612: Improper Control of Generation of Code
Installer RCE on settings file write in MyBB before 1.8.22...
CVE-2023-37424: Improper Control of Generation of Code
A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation of this vulnerabilit...
CVE-2023-40252
Improper Control of Generation of Code 'Code Injection' vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, Genians Genian NAC Suite V5.0, Genians Genian ZTNA allows Replace Trusted Executable.This issue affects Genian NAC V4.0: from V4.0.0 through V4.0.155; Genian NAC V5.0: from...
CVE-2023-3401: Improper Control of Generation of Code
An issue has been discovered in GitLab affecting all versions before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. The main branch of a repository with a specially designed name allows an attacker to create repositories with malicious code...
CVE-2023-37273: Improper Control of Generation of Code
Auto-GPT is an experimental open-source application showcasing the capabilities of the GPT-4 language model. Running Auto-GPT version prior to 0.4.3 by cloning the git repo and executing docker compose run auto-gpt in the repo root uses a different docker-compose.yml file from the one suggested i...
CVE-2023-37199
A CWE-94: Improper Control of Generation of Code 'Code Injection' vulnerability exists that could cause remote code execution when an admin user on DCE tampers with backups which are then manually restored...
CVE-2023-38068: Improper Control of Interaction Frequency
In JetBrains YouTrack before 2023.1.16597 captcha was not properly validated for Helpdesk forms...
Improper Control of Generation of Code
Description Kimai Plugin EasyBackupBundle allows admins to edit mysql commands from the configuration tab, an attacker can append arbitrary commands to achieve code execution. This can be also extended to an arbitrary file read while specifying filenames such as /etc/passwd in backup. Proof of...
CVE-2023-35930: Improper Control of Dynamically-Managed Code Resources
SpiceDB is an open source, Google Zanzibar-inspired, database system for creating and managing security-critical application permissions. Any user making a negative authorization decision based on the results of a LookupResources request with 1.22.0 is affected. For example, using LookupResources...
CVE-2023-2359: Improper Control of Generation of Code
The Slider Revolution WordPress plugin through 6.6.12 does not check for valid image files upon import, leading to an arbitrary file upload which may be escalated to Remote Code Execution in some server configurations...
Code injection
A CWE-94: Improper Control of Generation of Code 'Code Injection' vulnerability exists that could cause execution of malicious code when an unsuspicious user loads a project file from the local filesystem into the HMI...
CVE-2023-33131: Improper Control of Generation of Code
Microsoft Outlook Remote Code Execution Vulnerability...
CVE-2023-21569: Improper Control of Generation of Code
Azure DevOps Server Spoofing Vulnerability...
CVE-2019-16283: Improper Control of Generation of Code
A potential security vulnerability has been identified with a version of the HP Softpaq installer that can lead to arbitrary code execution...