Lucene search
K

878 matches found

OSV
OSV
added 2025/04/15 6:15 p.m.1 views

CVE-2025-29705

code-gen =2.0.6 is vulnerable to Incorrect Access Control. The project does not have permission control allowing anyone to access such projects...

4.3CVSS5.8AI score0.00305EPSS
Exploits1References2
CNNVD
CNNVD
added 2025/04/15 12:0 a.m.1 views

code-gen 安全漏洞

code-gen is a code generation tool for tanghc individual developers. A security vulnerability exists in code-gen 2.0.6 and earlier versions, which stems from a lack of privilege control and could lead to arbitrary access...

4.3CVSS7.2AI score0.00305EPSS
Exploits1References2
CVE
CVE
added 2025/04/15 12:0 a.m.49 views

CVE-2025-29705

The CVE-2025-29705 entry concerns code-gen versions 2.0.6 and earlier, with an underlying flaw of Incorrect Access Control due to missing permission controls. This allows anyone to access such projects (impact described as unauthenticated access to projects). Public references corroborate the vul...

4.3CVSS7.1AI score0.00305EPSS
Exploits1References2Affected Software1
OSV
OSV
added 2025/03/18 2:15 p.m.1 views

CVE-2024-21760

An improper control of generation of code 'Code Injection' vulnerability CWE-94 in FortiSOAR Connector FortiSOAR 7.4 all versions, 7.3 all versions, 7.2 all versions, 7.0 all versions, 6.4 all versions may allow an authenticated attacker to execute arbitrary code on the host via a playbook code...

8.4CVSS6.1AI score0.00282EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/03/18 12:0 a.m.2 views

Fortinet FortiSOAR 代码注入漏洞

Fortinet FortiSOAR is a Security Orchestration, Automation and Response SOAR solution from Fortinet. A code injection vulnerability exists in Fortinet FortiSOAR that stems from improper code generation controls and can be exploited by an attacker to cause arbitrary code to be executed...

8.4CVSS7.6AI score0.00282EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/02/22 4:19 p.m.9 views

CVE-2025-0161

IBM Security Verify Access Appliance 10.0.0.0 through 10.0.0.9 and 11.0.0.0 could allow a local user to execute arbitrary code due to improper restrictions on code generation...

7.8CVSS7.8AI score0.00007EPSS
Exploits0References1
OSV
OSV
added 2025/02/20 4:15 p.m.1 views

CVE-2025-0161

IBM Security Verify Access Appliance 10.0.0.0 through 10.0.0.9 and 11.0.0.0 could allow a local user to execute arbitrary code due to improper restrictions on code generation...

7.8CVSS6.1AI score
Exploits0References1
NVD
NVD
added 2025/02/20 4:15 p.m.9 views

CVE-2025-0161

IBM Security Verify Access Appliance 10.0.0.0 through 10.0.0.9 and 11.0.0.0 could allow a local user to execute arbitrary code due to improper restrictions on code generation...

7.8CVSS0.00007EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/02/20 12:0 a.m.1 views

IBM Security Verify Access 代码注入漏洞

IBM Security Verify Access ISAM is a service from International Business Machines IBM that improves user access security. A code injection vulnerability exists in IBM Security Verify Access versions 10.0.0.0 through 10.0.0.9 and 11.0.0.0, which stems from improper restrictions on code generation...

7.8CVSS7.5AI score0.00007EPSS
Exploits0References2
RedHat Linux
RedHat Linux
added 2025/02/12 4:23 a.m.1 views

firefox: thunderbird: A bug in WebAssembly code generation could result in a crash

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: A bug in WebAssembly code generation could lead to a crash. It may be possible for an attacker to leverage this to achieve code execution...

9.8CVSS7.3AI score0.00291EPSS
Exploits0References9
RedHat Linux
RedHat Linux
added 2025/02/12 4:17 a.m.3 views

firefox: thunderbird: A bug in WebAssembly code generation could result in a crash

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: A bug in WebAssembly code generation could lead to a crash. It may be possible for an attacker to leverage this to achieve code execution...

9.8CVSS7.3AI score0.00291EPSS
Exploits0References9
RedHat Linux
RedHat Linux
added 2025/02/11 9:57 a.m.1 views

firefox: thunderbird: A bug in WebAssembly code generation could result in a crash

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: A bug in WebAssembly code generation could lead to a crash. It may be possible for an attacker to leverage this to achieve code execution...

9.8CVSS7.3AI score0.00291EPSS
Exploits0References9
RedHat Linux
RedHat Linux
added 2025/02/10 1:29 a.m.2 views

firefox: thunderbird: A bug in WebAssembly code generation could result in a crash

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: A bug in WebAssembly code generation could lead to a crash. It may be possible for an attacker to leverage this to achieve code execution...

9.8CVSS7.3AI score0.00291EPSS
Exploits0References9
Tenable Nessus
Tenable Nessus
added 2025/02/10 12:0 a.m.12 views

Azure Linux 3.0 Security Update: golang / msft-golang (CVE-2023-29402)

The version of golang / msft-golang installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-29402 advisory. - The go command May generate unexpected code at build time when using cgo. This May result in...

9.8CVSS7AI score0.00125EPSS
Exploits0References2
RedHat Linux
RedHat Linux
added 2025/02/06 11:52 a.m.3 views

firefox: thunderbird: A bug in WebAssembly code generation could result in a crash

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: A bug in WebAssembly code generation could lead to a crash. It may be possible for an attacker to leverage this to achieve code execution...

9.8CVSS7.3AI score0.00291EPSS
Exploits0References9
RedHat Linux
RedHat Linux
added 2025/02/06 11:41 a.m.3 views

firefox: thunderbird: A bug in WebAssembly code generation could result in a crash

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: A bug in WebAssembly code generation could lead to a crash. It may be possible for an attacker to leverage this to achieve code execution...

9.8CVSS7.3AI score0.00291EPSS
Exploits0References9
RedHat Linux
RedHat Linux
added 2025/02/06 11:24 a.m.2 views

firefox: thunderbird: A bug in WebAssembly code generation could result in a crash

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: A bug in WebAssembly code generation could lead to a crash. It may be possible for an attacker to leverage this to achieve code execution...

9.8CVSS7.3AI score0.00291EPSS
Exploits0References9
RedHat Linux
RedHat Linux
added 2025/02/06 11:20 a.m.3 views

firefox: thunderbird: A bug in WebAssembly code generation could result in a crash

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: A bug in WebAssembly code generation could lead to a crash. It may be possible for an attacker to leverage this to achieve code execution...

9.8CVSS7.3AI score0.00291EPSS
Exploits0References9
OSV
OSV
added 2025/02/06 12:0 a.m.0 views

UBUNTU-CVE-2025-1011

A bug in WebAssembly code generation could have lead to a crash. It may have been possible for an attacker to leverage this to achieve code execution. This vulnerability was fixed in Firefox 135, Firefox ESR 128.7, Thunderbird 128.7, and Thunderbird 135...

9.8CVSS7.4AI score0.00291EPSS
Exploits0References12
RedhatCVE
RedhatCVE
added 2025/02/05 5:2 a.m.5 views

CVE-2024-10094

Pega Platform versions 6.x to Infinity 24.1.1 are affected by an issue with Improper Control of Generation of Code...

9.8CVSS6.8AI score0.00532EPSS
Exploits0References1
Rows per page
Query Builder