Lucene search
+L

68 matches found

BDU FSTEC
BDU FSTEC
•added 2023/06/02 12:00 a.m.•11 views

The vulnerability of the Advantech WebAccess remote monitoring software lies in improper code generation, allowing a hacker to execute arbitrary code.

The vulnerability of Advantech WebAccess remote monitoring software is related to improper code generation management. Exploiting this vulnerability allows a malicious actor operating remotely to execute arbitrary code...

8.3CVSS8.2AI score0.00898EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/05/29 12:00 a.m.•17 views

The vulnerability of the Drive Explorer disk driver for macOS, related to improper code generation, allows a hacker to execute arbitrary code.

The vulnerability of the Drive Explorer disk driver for macOS is related to improper code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

9CVSS8.1AI score0.00576EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/11/17 12:00 a.m.•30 views

The vulnerability of the WDAC OLE DB driver for SQL Server on the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the WDAC OLE DB driver for SQL Server on the Windows operating system is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS8.2AI score0.02002EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2022/10/26 12:00 a.m.•15 views

The vulnerability of the JavaScript library’s template function for working with arrays like Underscore allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the JavaScript library’s template function for working with arrays like Underscore is related to incorrect code generation practices. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

9CVSS6.5AI score0.04087EPSS
SaveExploits2References9Affected Software3
BDU FSTEC
BDU FSTEC
•added 2022/10/12 12:00 a.m.•21 views

The vulnerability of the coverterCheckList function in the meta_driver_srv.js class of software for monitoring and controlling power supply in Eaton Intelligent Power Manager (IPM) allows a attacker to execute arbitrary code.

The vulnerability of the coverterCheckList function in the metadriversrv.js class of software for monitoring and controlling Eaton Intelligent Power Manager IPM is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by connecting t...

10CVSS8.2AI score0.02235EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/06/14 12:00 a.m.•15 views

The vulnerability of the DNS server of the Microsoft Windows operating system, allowing a hacker to execute arbitrary code.

The vulnerability of the DNS server of the Microsoft Windows operating system is related to incorrect code generation management. Exploitation of this vulnerability can allow a remote attacker to execute arbitrary code...

9CVSS7.8AI score0.03516EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2022/04/14 12:00 a.m.•20 views

The vulnerability of the Jszip zip file processing library, related to improper code generation, allows a hacker to cause a service failure.

The vulnerability of the Jszip zip file processing library is related to incorrect handling of file names. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

5.3CVSS6.3AI score0.03441EPSS
SaveExploits1References9Affected Software3
BDU FSTEC
BDU FSTEC
•added 2022/04/13 12:00 a.m.•23 views

The vulnerability of PHP Smarty template handlers relates to improper code generation during the processing of invalid function names, allowing attackers to execute arbitrary code.

The vulnerability of PHP Smarty templates relates to improper handling of code generation when processing invalid function names. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

10CVSS7AI score0.82316EPSS
SaveExploits1References7Affected Software3
BDU FSTEC
BDU FSTEC
•added 2022/03/28 12:00 a.m.•13 views

The vulnerability of Microsoft Edge browser, related to improper code generation, allows attackers to bypass security restrictions and enhance their privileges.

The vulnerability of Microsoft Edge is related to improper handling of code generation. Exploiting this vulnerability allows a remote attacker to bypass security restrictions and enhance their privileges through a specially created malicious web page...

7.5CVSS7.7AI score0.00716EPSS
SaveExploits0References3Affected Software3
BDU FSTEC
BDU FSTEC
•added 2022/03/28 12:00 a.m.•15 views

The vulnerability of the plugin for viewing RAW images, related to improper handling of code generation, allows a hacker to execute arbitrary code.

The vulnerability of the plugin for viewing RAW images is related to incorrect code generation. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.7AI score0.02258EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/03/28 12:00 a.m.•15 views

The vulnerability of the plugin for viewing RAW images relates to improper handling of code generation, allowing a malicious actor to execute arbitrary code.

The vulnerability of the plugin for viewing RAW images is related to incorrect code generation. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.7AI score0.02258EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/03/04 12:00 a.m.•12 views

The vulnerability of the xmltok_impl.c component in the ExPat library allows a hacker to execute arbitrary code.

The vulnerability of the xmltokimpl.c component in the ExPat library is related to incorrect code generation management. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially crafted request...

10CVSS8.2AI score0.04955EPSS
SaveExploits0References23Affected Software9
BDU FSTEC
BDU FSTEC
•added 2022/02/25 12:00 a.m.•18 views

The vulnerability of the Microsoft Dynamics 365 resource planning software and Microsoft Office packages lies in improper code generation management, allowing an attacker to execute arbitrary code.

The vulnerability of the Microsoft Dynamics 365 resource planning software and the Microsoft Office suite is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9.3CVSS7.6AI score0.02944EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2021/12/17 12:00 a.m.•13 views

The vulnerability of the CommCell storage management software lies in its flawed code generation mechanism, which allows an attacker to execute arbitrary code.

The vulnerability of the CommCell storage management software is related to improper handling of code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted request remotely...

9CVSS8AI score0.05789EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
•added 2021/12/14 12:00 a.m.•14 views

PT-2021-6389

Name of the Vulnerable Software and Affected Versions Microsoft Excel affected versions not specified Description The issue is related to incorrect code generation management in Microsoft Office, Microsoft Excel, and Microsoft 365 packages. This allows a remote attacker to execute arbitrary code...

9.3CVSS7.5AI score0.02181EPSS
SaveExploits0References10
OSV
OSV
•added 2021/11/02 7:15 p.m.•13 views

CVE-2021-42754

An improper control of generation of code vulnerability CWE-94 in FortiClientMacOS versions 7.0.0 and below and 6.4.5 and below may allow an authenticated attacker to hijack the MacOS camera without the user permission via the malicious dylib file...

5CVSS6AI score0.00427EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2021/10/08 12:00 a.m.•21 views

The vulnerability of the Bluetooth Classic environment for developing IoT applications allows a attacker to execute arbitrary code.

The vulnerability of the Espressif esp-idf software is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.8CVSS8.7AI score0.0139EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/09/29 12:00 a.m.•15 views

The vulnerability of the DNS Server component of the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the DNS Server component of the Windows operating system is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.8CVSS7.9AI score0.01995EPSS
SaveExploits0References3
OSV
OSV
•added 2021/08/25 9:01 p.m.•84 views

GHSA-HPQH-2WQX-7QP5 Memory access due to code generation flaw in Cranelift module

There is a bug in 0.73.0 of the Cranelift x64 backend that can create a scenario that could result in a potential sandbox escape in a WebAssembly module. Users of versions 0.73.0 of Cranelift should upgrade to either 0.73.1 or 0.74 to remediate this vulnerability. Users of Cranelift prior to 0.73...

7.2CVSS8.5AI score0.00455EPSS
SaveExploits1References9
BDU FSTEC
BDU FSTEC
•added 2021/08/02 12:00 a.m.•18 views

The vulnerability of the config/configuration.php component of the VoIPmonitor traffic analyzer allows a attacker to execute arbitrary PHP code.

The vulnerability of the config/configuration.php component of the VoIPmonitor traffic analyzer is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary PHP code...

10CVSS8.2AI score0.36632EPSS
SaveExploits5References5Affected Software1
Rows per page
Query Builder