Lucene search
K

1540 matches found

BDU FSTEC
BDU FSTEC
added 2024/11/26 12:0 a.m.1 views

The vulnerability of the Netgear DGN1000WW router’s built-in software, related to improper code generation, allows a hacker to execute arbitrary commands.

The vulnerability of the Netgear DGN1000WW router’s built-in software is related to incorrect code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary commands...

8.8CVSS5.9AI score0.20192EPSS
Exploits0References2Affected Software1
Snyk
Snyk
added 2024/11/22 11:0 p.m.2 views

Arbitrary Code Injection

Overview pycel is an A library for compiling excel spreadsheets to python code & visualizing them as a graph Affected versions of this package are vulnerable to Arbitrary Code Injection through the code generation from a crafted formula in an Excel spreadsheet cell. An attacker can execute...

9.8CVSS8.1AI score0.00937EPSS
Exploits2References2
BDU FSTEC
BDU FSTEC
added 2024/11/22 12:0 a.m.1 views

The vulnerability of the Apache OFBiz resource planning software lies in improper code generation management, which allows attackers to execute SSRF attacks.

The vulnerability of Apache OFBiz’s resource planning software lies in improper code generation management. Exploiting this vulnerability allows a remote attacker to execute an SSRF attack...

7.6CVSS5.7AI score0.00689EPSS
Exploits0References5Affected Software1
OSV
OSV
added 2024/11/20 3:15 p.m.1 views

CVE-2024-10094

Pega Platform versions 6.x to Infinity 24.1.1 are affected by an issue with Improper Control of Generation of Code...

9.8CVSS5.8AI score
Exploits0References1
NVD
NVD
added 2024/11/20 3:15 p.m.12 views

CVE-2024-10094

Pega Platform versions 6.x to Infinity 24.1.1 are affected by an issue with Improper Control of Generation of Code...

9.8CVSS0.00532EPSS
Exploits0References1
CVE
CVE
added 2024/11/20 2:45 p.m.50 views

CVE-2024-10094

CVE-2024-10094 affects Pega Platform versions 6.x through Infinity 24.1.1 due to an issue with Improper Control of Generation of Code. Connected sources consistently identify this as the affected product and root cause. Public details mention a large range of versions but do not provide a confirm...

9.8CVSS9.3AI score0.00532EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/11/20 2:45 p.m.8 views

CVE-2024-10094

Pega Platform versions 6.x to Infinity 24.1.1 are affected by an issue with Improper Control of Generation of Code...

9.1CVSS7AI score0.00532EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/11/20 2:45 p.m.11 views

CVE-2024-10094

Pega Platform versions 6.x to Infinity 24.1.1 are affected by an issue with Improper Control of Generation of Code...

9.1CVSS0.00532EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/11/20 12:0 a.m.1 views

Pegasystem PEGA Platform 安全漏洞

Pegasystem PEGA Platform is a suite of application development platforms from Pegasystem, USA. The platform is used to develop applications such as BPM Business Process Management, Case Management, Real-Time Decision Making and CRM Customer Relationship Management. A security vulnerability exists...

9.8CVSS6.9AI score0.00532EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/11/20 12:0 a.m.2 views

PT-2024-16022 · Pegasystems · Pega Platform

Name of the Vulnerable Software and Affected Versions: Pega Platform versions 6.x through Infinity 24.1.1 Description: The issue is related to Improper Control of Generation of Code. No information is provided about the estimated number of potentially affected devices worldwide or real-world...

9.8CVSS7AI score0.00532EPSS
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2024/11/15 12:0 a.m.1 views

The vulnerability of the Microsoft TorchGeo library for working with geospatial data, related to improper code generation management, allows a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft TorchGeo library for working with geospatial data is related to improper code generation management. Exploiting this vulnerability can allow an attacker operating remotely to execute arbitrary code...

8.1CVSS5.9AI score0.00645EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/11/14 12:0 a.m.1 views

The vulnerability of the client plugin libreswan in the NetworkManager software is related to improper code generation. This allows attackers to increase their privileges and execute arbitrary code.

The vulnerability of the client plugin libreswan in the NetworkManager network management software is related to incorrect code generation. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...

7.8CVSS7.6AI score0.00057EPSS
Exploits0References12Affected Software6
Positive Technologies
Positive Technologies
added 2024/11/12 12:0 a.m.2 views

PT-2024-8093

Name of the Vulnerable Software and Affected Versions: TorchGeo affected versions not specified Description: The issue is related to incorrect code generation management in the TorchGeo library, which handles geospatial data. This can allow a remote attacker to execute arbitrary code...

8.1CVSS6.2AI score0.00645EPSS
Exploits0References20
CNNVD
CNNVD
added 2024/11/04 12:0 a.m.1 views

BG-TEK Informatics CoslatV3 代码注入漏洞

BG-TEK Informatics CoslatV3 is an application from BG-TEK Informatics. A code injection vulnerability exists in BG-TEK Informatics CoslatV3 version 3.1069 and earlier, which stems from improper code generation controls that allow command injection...

9.8CVSS7.7AI score0.01267EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2024/11/01 12:0 a.m.1 views

The vulnerability of Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD), web server software-based network devices, allows attackers to execute arbitrary code.

The vulnerability in Cisco Adaptive Security Appliance ASA and Cisco Firepower Threat Defense FTD VPN microprogramming device controllers is related to improper code generation. Exploitation of this vulnerability could allow an attacker to execute arbitrary code...

6.2CVSS5.9AI score0.00036EPSS
Exploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/10/30 12:0 a.m.1 views

The vulnerability of the Docker Integration component of the Warp terminal emulator allows a hacker to execute arbitrary code.

The vulnerability of the Docker Integration component of the Warp terminal emulator emulator is related to incorrect code generation management. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created link...

6.6CVSS6AI score0.00125EPSS
Exploits1References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/10/29 12:0 a.m.1 views

The vulnerability of the Dell OpenManage Enterprise system management console, related to improper code generation, allows a malicious actor to execute arbitrary code.

The vulnerability of the Dell OpenManage Enterprise system management console is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS6AI score0.00689EPSS
Exploits0References3Affected Software1
CNNVD
CNNVD
added 2024/10/28 12:0 a.m.4 views

WordPress plugin ScottCart 代码注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A code injection...

9.8CVSS7.2AI score0.62257EPSS
Exploits1References1
Fedora
Fedora
added 2024/10/26 3:3 a.m.7 views

[SECURITY] Fedora 41 Update: rust-pyo3-macros-backend-0.22.4-1.fc41

Code generation for PyO3 package...

7.5AI score
Exploits0
Fedora
Fedora
added 2024/10/24 1:28 a.m.6 views

[SECURITY] Fedora 40 Update: rust-pyo3-macros-backend-0.22.4-1.fc40

Code generation for PyO3 package...

7.5AI score
Exploits0
Rows per page
Query Builder