Lucene search
+L

2052 matches found

BDU FSTEC
BDU FSTEC
•added 2022/08/24 12:00 a.m.•21 views

The vulnerability of the Portal for ArcGIS web portal, related to improper code generation management, allows a malicious actor to execute arbitrary code.

The vulnerability of the Portal for ArcGIS web portal is related to incorrect code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

6.4CVSS7.7AI score0.00906EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2022/08/18 6:15 a.m.•8 views

CVE-2022-35173

An issue was discovered in Nginx NJS v0.7.5. The JUMP offset for a break instruction was not set to a correct offset during code generation, leading to a segmentation violation...

7.5CVSS5.8AI score0.01385EPSS
SaveExploits1References4
NVD
NVD
•added 2022/08/18 6:15 a.m.•33 views

CVE-2022-35173

An issue was discovered in Nginx NJS v0.7.5. The JUMP offset for a break instruction was not set to a correct offset during code generation, leading to a segmentation violation...

7.5CVSS0.01385EPSS
SaveExploits1References3
AlpineLinux
AlpineLinux
•added 2022/08/18 6:15 a.m.•76 views

CVE-2022-35173

An issue was discovered in Nginx NJS v0.7.5. The JUMP offset for a break instruction was not set to a correct offset during code generation, leading to a segmentation violation...

7.5CVSS2.1AI score0.01385EPSS
SaveExploits1
Mend
Mend
•added 2022/08/18 5:08 a.m.•3 views

CVE-2022-35173

An issue was discovered in Nginx NJS v0.7.5. The JUMP offset for a break instruction was not set to a correct offset during code generation, leading to a segmentation violation...

8.7CVSS0.01385EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2022/08/18 5:08 a.m.•47 views

CVE-2022-35173

An issue was discovered in Nginx NJS v0.7.5. The JUMP offset for a break instruction was not set to a correct offset during code generation, leading to a segmentation violation...

7.7AI score0.01385EPSS
SaveExploits1References3
OSV
OSV
•added 2022/08/18 5:08 a.m.•21 views

CVE-2022-35173

An issue was discovered in Nginx NJS v0.7.5. The JUMP offset for a break instruction was not set to a correct offset during code generation, leading to a segmentation violation...

7AI score
SaveExploits0References5
CVE
CVE
•added 2022/08/18 5:08 a.m.•97 views

CVE-2022-35173

Affected software: Nginx NJS v0.7.5. Issue: the JUMP offset for a break instruction was not set to the correct offset during code generation, leading to a segmentation fault. Impact: described as a segmentation violation with CVSS v3.1 base score 7.5 ( HIGH ). Exploit details are not provided in ...

7.5CVSS7.5AI score0.01385EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/18 12:00 a.m.•4 views

CVE-2022-35173: Improper Check for Unusual or Exceptional Conditions

An issue was discovered in Nginx NJS v0.7.5. The JUMP offset for a break instruction was not set to a correct offset during code generation, leading to a segmentation violation...

7.5CVSS7.3AI score0.01385EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/08/18 12:00 a.m.•20 views

Nginx 代码问题漏洞

Nginx is a lightweight web server/reverse proxy server and email IMAP/POP3 proxy server from the US-based Nginx Corporation. A security vulnerability exists in Nginx NJS version v0.7.5 that stems from a segmentation violation where the JUMP offset of the interrupt directive is not set to the...

7.5CVSS7.4AI score0.01385EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
•added 2022/08/10 12:00 a.m.•21 views

The vulnerability of the VMware Workspace One Access application management platform, the VMware Identity Manager administration console, and the VMware vRealize Automation virtual infrastructure management tools is related to improper code generation. This allows an attacker to execute arbitrary code.

The vulnerability of the VMware Workspace One Access application management platform, the VMware Identity Manager administration console, and the VMware vRealize Automation virtual infrastructure management tools is related to improper code generation. Exploiting this vulnerability allows a...

7.6CVSS8.1AI score0.02446EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
•added 2022/08/05 12:00 a.m.•33 views

PT-2022-17811 · Hestiacp · Hestiacp

Name of the Vulnerable Software and Affected Versions: hestiacp/hestiacp versions prior to 1.6.6 Description: The issue is related to improper control of generation of code, also known as 'code injection', and improper input validation in the hestiacp/hestiacp GitHub repository. Recommendations:...

8.8CVSS8.6AI score0.01323EPSS
SaveExploits1References5
BDU FSTEC
BDU FSTEC
•added 2022/08/04 12:00 a.m.•22 views

The vulnerability of the Illumina Local Run Manager software, related to improper code generation management, allows a malicious actor to execute arbitrary code, modify settings, configurations, software, or gain access to confidential data of the affected product.

The vulnerability of the Illumina Local Run Manager software is related to improper code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code, modify settings, configurations, software, or gain access to confidential data of the affected product...

10CVSS8.4AI score0.01779EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/08/04 12:00 a.m.•21 views

The vulnerability of the server management application CentOS Web Panel lies in improper code generation, allowing attackers to execute arbitrary code.

The vulnerability of the CentOS Web Panel server management application is related to incorrect code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created request...

10CVSS8.5AI score0.55338EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2022/08/02 12:00 a.m.•15 views

PT-2022-4059 · Vmware · Vmware Vrealize Automation +2

Name of the Vulnerable Software and Affected Versions: VMware Workspace ONE Access, Identity Manager and vRealize Automation affected versions not specified Description: The issue is related to incorrect code generation management in the administration platform of VMware Workspace One Access,...

9CVSS8.6AI score0.02196EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2022/08/02 12:00 a.m.•12 views

PT-2022-4055 · Vmware · Vmware Vrealize Automation +2

Name of the Vulnerable Software and Affected Versions: VMware Workspace ONE Access, Identity Manager and vRealize Automation affected versions not specified Description: The issue is related to incorrect code generation management in the administration platform of VMware Workspace One Access,...

7.5CVSS8.6AI score0.02446EPSS
SaveExploits1References6
BDU FSTEC
BDU FSTEC
•added 2022/08/02 12:00 a.m.•30 views

The vulnerability of the Drupal CMS system, related to improper code generation, allows attackers to execute arbitrary code.

The vulnerability of the Drupal CMS system is related to improper handling of code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9CVSS7.5AI score0.01422EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/08/01 12:00 a.m.•15 views

The vulnerability of the QVPN Service software, related to improper code generation, allows a hacker to execute arbitrary code.

The vulnerability of the QVPN Service software is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS6AI score
SaveExploits0References3Affected Software1
Fedora
Fedora
•added 2022/07/30 1:57 a.m.•20 views

[SECURITY] Fedora 36 Update: golang-github-google-wire-0.5.0-4.fc36

Wire is a code generation tool that automates connecting components using dependency injection. Dependencies between components are represented in Wire as function parameters, encouraging explicit initialization instead of global variables. Because Wire operates without runtime state or reflectio...

7.8AI score
SaveExploits0
Fedora
Fedora
•added 2022/07/30 1:57 a.m.•40 views

[SECURITY] Fedora 36 Update: golang-github-googleapis-gnostic-0.5.3-7.fc36

This package contains a Go command line tool which converts JSON and YAML OpenAPI descriptions to and from equivalent Protocol Buffer representations. Protocol Buffers provide a language-neutral, platform-neutral, extensible mechanism for serializing structured data. gnostic's Protocol Buffer...

7.4AI score
SaveExploits0
Rows per page
Query Builder