Lucene search
+L

1633 matches found

Positive Technologies
Positive Technologies
added 2022/07/12 12:0 a.m.5 views

PT-2022-3742 · Microsoft · Windows Network File System +1

Name of the Vulnerable Software and Affected Versions: Windows Network File System affected versions not specified Description: The issue is related to incorrect code generation management in the Windows Network File System NFS, allowing remote attackers to execute arbitrary code and affect the...

8.1CVSS8.4AI score0.05175EPSS
SaveExploits2References12
BDU FSTEC
BDU FSTEC
added 2022/07/11 12:0 a.m.13 views

The vulnerability of the Apache Commons Configuration library, related to improper code generation management, allows attackers to execute arbitrary code.

The vulnerability of the Apache Commons Configuration library is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially crafted script, DNS, and URL requests...

7.1CVSS7.6AI score0.42646EPSS
SaveExploits3References4Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/07/06 12:0 a.m.15 views

The vulnerability of the component allows for the creation, design, configuration, and display of information panels within the Self Service Composition Environment (SSCE) of the SAP Manufacturing Integration and Intelligence platform. This vulnerability enables a perpetrator to execute arbitrary code or escalate their privileges.

The vulnerability of the component responsible for creating, designing, configuring, and displaying information panels of the Self Service Composition Environment SSCE platform for SAP Manufacturing Integration and Intelligence is related to deficiencies in access control and improper management ...

9.9CVSS8.1AI score0.50913EPSS
SaveExploits0References7Affected Software1
Fedora
Fedora
added 2022/07/04 1:35 a.m.24 views

[SECURITY] Fedora 36 Update: golang-github-google-wire-0.5.0-3.fc36

Wire is a code generation tool that automates connecting components using dependency injection. Dependencies between components are represented in Wire as function parameters, encouraging explicit initialization instead of global variables. Because Wire operates without runtime state or reflectio...

9.3CVSS9AI score0.0995EPSS
SaveExploits4
Fedora
Fedora
added 2022/07/04 1:35 a.m.30 views

[SECURITY] Fedora 36 Update: golang-github-googleapis-gnostic-0.5.3-6.fc36

This package contains a Go command line tool which converts JSON and YAML OpenAPI descriptions to and from equivalent Protocol Buffer representations. Protocol Buffers provide a language-neutral, platform-neutral, extensible mechanism for serializing structured data. gnostic's Protocol Buffer...

9.3CVSS8AI score0.0995EPSS
SaveExploits4
BDU FSTEC
BDU FSTEC
added 2022/06/29 12:0 a.m.8 views

The vulnerability of Intel microprogramming software, related to improper code generation management, allows attackers to gain unauthorized access to protected information.

The vulnerability of Intel microprogramming software is related to improper code generation management. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

5.3CVSS6.4AI score0.00347EPSS
SaveExploits0References10Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/06/29 12:0 a.m.12 views

The vulnerability of PHP Smarty template handlers, related to improper code generation, allows attackers to execute arbitrary PHP code.

The vulnerability of PHP Smarty templates is related to incorrect code generation management. Exploiting this vulnerability allows an attacker to execute arbitrary PHP code remotely...

9CVSS7AI score0.04841EPSS
SaveExploits1References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/06/23 12:0 a.m.9 views

The vulnerability of the gitserver service in the Sourcegraph search and navigation system, related to improper code generation management, allows a violator to execute arbitrary code.

The vulnerability of the gitserver service in the Sourcegraph search and navigation system is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted HTTP request...

8.8CVSS8.1AI score0.7431EPSS
SaveExploits8References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/06/17 12:0 a.m.12 views

The vulnerability of the Windows Hyper-V hardware virtualization system allows a perpetrator to execute arbitrary code.

The vulnerability of the Windows Hyper-V hardware virtualization technology in Windows operating systems is related to improper code generation. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

8.8CVSS8.1AI score0.00599EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2022/06/16 11:54 p.m.29 views

Generated code can read and write out of bounds in safe code

Code generated by flatbuffers' compiler is unsafe but not marked as such. See https://github.com/google/flatbuffers/issues/6627 for details. All users that use generated code by flatbuffers compiler are recommended to: 1. not expose flatbuffer generated code as part of their public APIs 2. audit...

0.8AI score
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/06/14 12:0 a.m.16 views

The vulnerability of the Win32 Stream Enumeration component in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Win32 Stream Enumeration component in Windows operating systems is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.6CVSS7.8AI score0.01604EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/06/14 12:0 a.m.12 views

The vulnerability of the Win32 Stream Enumeration component in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Win32 Stream Enumeration component in Windows operating systems is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.6CVSS7.8AI score0.0179EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/06/14 12:0 a.m.9 views

The vulnerability of the DNS server of the Microsoft Windows operating system, allowing a hacker to execute arbitrary code.

The vulnerability of the DNS server of the Microsoft Windows operating system is related to incorrect code generation management. Exploitation of this vulnerability can allow a remote attacker to execute arbitrary code...

9CVSS7.8AI score0.03357EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/06/14 12:0 a.m.11 views

The vulnerability of the Remote Desktop Protocol implementation in the Microsoft Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Remote Desktop Protocol implementation in the Microsoft Windows operating system is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.5CVSS8.2AI score0.05294EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/06/10 12:0 a.m.13 views

The vulnerability of the Win32 Stream Enumeration component in Windows operating systems, related to improper code generation, allows a malicious actor to execute arbitrary code.

The vulnerability of the Win32 Stream Enumeration component in Windows operating systems is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.6CVSS7.8AI score0.01936EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/06/09 12:0 a.m.9 views

The vulnerability of the DNS server of the Microsoft Windows operating system, allowing a hacker to execute arbitrary code.

The vulnerability of the DNS server of the Microsoft Windows operating system is related to incorrect code generation management. Exploitation of this vulnerability can allow a remote attacker to execute arbitrary code...

9CVSS7.9AI score0.03665EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/06/09 12:0 a.m.11 views

The vulnerability of the DNS server of the Microsoft Windows operating system, allowing a hacker to execute arbitrary code.

The vulnerability of the DNS server of the Microsoft Windows operating system is related to incorrect code generation management. Exploitation of this vulnerability can allow a remote attacker to execute arbitrary code...

9CVSS7.8AI score0.03357EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/06/06 12:0 a.m.11 views

The vulnerability of the DNS server of the Microsoft Windows operating system, allowing a hacker to execute arbitrary code.

The vulnerability of the DNS server of the Microsoft Windows operating system is related to incorrect code generation management. Exploitation of this vulnerability can allow a remote attacker to execute arbitrary code...

9CVSS7.8AI score0.03415EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/06/02 12:0 a.m.10 views

The vulnerability of the DNS server of the Microsoft Windows operating system, allowing a hacker to execute arbitrary code.

The vulnerability of the DNS server of the Microsoft Windows operating system is related to incorrect code generation management. Exploitation of this vulnerability can allow a remote attacker to execute arbitrary code...

9CVSS7.7AI score0.03665EPSS
SaveExploits0References3
Redos
Redos
added 2022/05/30 12:0 a.m.69 views

ROS-20220530-03

Vulnerability of Array method of Mozilla Firefox and Mozilla Firefox ESR browsers and Thunderbird mail client is related to code generation errors. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary JavaScript code. remotely to execute arbitrary...

8.8CVSS8.8AI score0.26709EPSS
SaveExploits0
Rows per page
Query Builder