Now Platform IT-infrastructure management system Code Execution

The vulnerability of the Now Platform IT infrastructure management system is related to incorrect code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Application Development Environment Angular Code Execution

The vulnerability of the application development environment and the Angular single-page application platform is related to improper code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ASPECT Enterprise Embedded Network Control Code Execution

The vulnerability of microprogramming software in embedded network control controllers of ASPECT Enterprise, NEXUS Series, and MATRIX Series is related to improper code generation. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

Qlik Sense Enterprise Data Compromise

The vulnerability of the Qlik Sense Enterprise data analysis platform is related to improper code generation management. Exploiting this vulnerability can allow an attacker operating remotely to compromise the confidentiality, integrity, and accessibility of the protected information...

Sonatype Nexus Repository Manager Code Execution

The vulnerability of Sonatype Nexus Repository Manager is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by publishing Maven artifacts...

ASPECT Enterprise Embedded Network Control Code Execution

The vulnerability of microprogramming software in embedded network control controllers of ASPECT Enterprise, NEXUS Series, and MATRIX Series is related to improper code generation. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

SourceTree Code Execution

The vulnerability of the visual Git client SourceTree is related to incorrect code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Apache OFBiz SSRF

The vulnerability of Apache OFBiz’s resource planning software lies in improper code generation management. Exploiting this vulnerability allows a remote attacker to execute an SSRF attack...

CVE-2024-10094

Pega Platform versions 6.x to Infinity 24.1.1 are affected by an issue with Improper Control of Generation of Code...

BG-TEK Informatics CoslatV3: Code Injection Vulnerability

BG-TEK Informatics CoslatV3 is an application from BG-TEK Informatics. A code injection vulnerability exists in BG-TEK Informatics CoslatV3 version 3.1069 and earlier, which stems from improper code generation controls that allow command injection...

Cisco Adaptive Security Appliance Code Execution

The vulnerability in Cisco Adaptive Security Appliance ASA and Cisco Firepower Threat Defense FTD VPN microprogramming device controllers is related to improper code generation. Exploitation of this vulnerability could allow an attacker to execute arbitrary code...

Dell OpenManage Enterprise Code Execution

The vulnerability of the Dell OpenManage Enterprise system management console is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

WordPress plugin ScottCart has a code injection vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A code injection...

Grafana Expressions Code Execution

The vulnerability of the Expressions function on the Grafana monitoring and observation platform is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by injecting specially crafted SQL queries...

WordPress plugin ajax-extend has a code injection vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code injection...

MindsDB eval Code Execution

The vulnerability of the eval function in software platforms for automating data exchange between MindsDB queues is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by introducing a specially crafted INSERT query...

MindsDB eval Code Execution

The vulnerability of the eval function in software platforms for automating data exchange between MindsDB queues is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by introducing a specially crafted INSERT query...

Veeam Service Provider Console RCE

The vulnerability of the application software interface for data backup and restoration solutions for Veeam Service Provider Console VSPC remote and cloud customers is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Veeam Service Provider Console Improper Code Generation Code Execution

The vulnerability of the backup and data recovery software for Veeam Service Provider Console VSPC for remote and cloud-based customers is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

D-Link DAP-2310 Code Execution

The vulnerability of the microprogrammed software in the wireless access point D-Link DAP-2310 is related to improper code generation. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...