Test IT testing system Command Execution

The vulnerability of the Test IT testing system relates to the use of externally controlled input data for class selection. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

Perl-DBI Code Execution

The vulnerability of the Perl-DBI interface for connecting to and working with databases involves the use of externally controlled input data for class selection. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20260902-73-0022

The vulnerability in perl-DBI relates to the use of external control for selecting classes based on input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

GHSA-C2RV-HWQM-WJPG Apache Calcite is Vulnerable to Use of Externally-Controlled Input to Select Classes

Use of Externally-Controlled Input to Select Classes or Code 'Unsafe Reflection' vulnerability in Apache Calcite. This issue affects Apache Calcite: from 1.5.0 before 1.42. Users are recommended to upgrade to version 1.42, which fixes the issue...

Zabbix IT-infrastructure Monitoring System Code Execution

The vulnerability of the Zabbix IT-infrastructure monitoring system lies in the use of externally controlled input data for class selection. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20260505-73-0001

Vulnerability in zabbix7.4 related to the use of externally controlled input data for class selection. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code...

HSQLDB Code Execution

The vulnerability of the HyperSQL Database Management System HSQLDB is related to the use of externally controlled input data for class selection. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Telerik UI External Control DoS

The vulnerability of the Telerik UI software for ASP.NET AJAX relates to the use of externally controlled input data for class selection. Exploiting this vulnerability could allow a malicious actor to cause service failures...

GENESIS64 SCADA External Control Code Execution

The vulnerability of the GENESIS64 SCADA system’s software packages for monitoring and data collection via MC Works64 is related to the use of externally controlled input data for class selection. Exploiting this vulnerability allows a perpetrator to execute arbitrary code...

Telerik Report Server Code Execution

The vulnerability of the Telerik Report Server reporting control software lies in the use of external control for selecting classes when input data is provided. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Telerik Report Server Code Execution

The vulnerability of the Telerik Report Server reporting management software lies in the use of external control for selecting classes when input data is provided. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Mitsubishi Electric Software External Control Code Execution

The vulnerabilities of Mitsubishi Electric’s software products, including EZSocket, FR Configurator2, GT Designer3 Version1GOT1000, GT Designer3 Version1GOT2000, GX Works2, GX Works3, MELSOFT Navigator, MT Works2, MX Component, and MX OPC Server DA/UA software included with MC Works64, are relate...

GitHub Enterprise Server Code Execution

The vulnerability of the corporate version of the GitHub Enterprise Server is related to the use of external management input data for class selection. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

JXPathContext Code Execution

The vulnerability of the JXPathContext class functions except for compile and compilePath in the JXPath processing library is related to the use of externally controlled input data for class selection. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

Check Point Endpoint Security External Control Disabling Protection

The vulnerability of Check Point Endpoint Security’s comprehensive network endpoint protection lies in the use of externally controlled input data for determining class assignments. Exploiting this vulnerability can allow an attacker to disable the protection for certain network endpoints...

Spring Core Code Execution

The vulnerability of the Spring Core module of the Spring Framework is related to the use of externally controlled input data for class selection. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Kylin data processing Class.forName Data Compromise

The vulnerability of the Class.forName... method in the Kylin data processing platform is related to the use of externally controlled input parameters for class selection. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of...

Rouge formatting tool Class Selection Confidential Data Compromise

The vulnerability of the Rouge formatting tools for grammatical analysis and Markdown format conversion allows attackers to gain access to confidential data, compromise its integrity, and cause service failures. This vulnerability is related to the lack of restrictions on the space used by the...

Infinispan invokeAccessibly Code Execution

The vulnerability of the invokeAccessibly method in Infinispan data storage software relates to the use of externally controlled input parameters for class selection. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

JBoss Operations Network ClassLoader Code Execution

The vulnerability of the ClassLoader implementation in the Red Hat JBoss Operations Network platform is related to the use of externally controlled input data for class selection. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...