Generated code can read and write out of bounds in safe code

Code generated by flatbuffers' compiler is unsafe but not marked as such. See https://github.com/google/flatbuffers/issues/6627 for details. All users that use generated code by flatbuffers compiler are recommended to: 1. not expose flatbuffer generated code as part of their public APIs 2. audit...

The vulnerability of the DNS server of the Microsoft Windows operating system, allowing a hacker to execute arbitrary code.

The vulnerability of the DNS server of the Microsoft Windows operating system is related to incorrect code generation management. Exploitation of this vulnerability can allow a remote attacker to execute arbitrary code...

The vulnerability of the Remote Desktop Protocol implementation in the Microsoft Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Remote Desktop Protocol implementation in the Microsoft Windows operating system is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Win32 Stream Enumeration component in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Win32 Stream Enumeration component in Windows operating systems is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Win32 Stream Enumeration component in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Win32 Stream Enumeration component in Windows operating systems is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Win32 Stream Enumeration component in Windows operating systems, related to improper code generation, allows a malicious actor to execute arbitrary code.

The vulnerability of the Win32 Stream Enumeration component in Windows operating systems is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the DNS server of the Microsoft Windows operating system, allowing a hacker to execute arbitrary code.

The vulnerability of the DNS server of the Microsoft Windows operating system is related to incorrect code generation management. Exploitation of this vulnerability can allow a remote attacker to execute arbitrary code...

The vulnerability of the DNS server of the Microsoft Windows operating system, allowing a hacker to execute arbitrary code.

The vulnerability of the DNS server of the Microsoft Windows operating system is related to incorrect code generation management. Exploitation of this vulnerability can allow a remote attacker to execute arbitrary code...

The vulnerability of the DNS server of the Microsoft Windows operating system, allowing a hacker to execute arbitrary code.

The vulnerability of the DNS server of the Microsoft Windows operating system is related to incorrect code generation management. Exploitation of this vulnerability can allow a remote attacker to execute arbitrary code...

The vulnerability of the DNS server of the Microsoft Windows operating system, allowing a hacker to execute arbitrary code.

The vulnerability of the DNS server of the Microsoft Windows operating system is related to incorrect code generation management. Exploitation of this vulnerability can allow a remote attacker to execute arbitrary code...

ROS-20220530-03

Vulnerability of Array method of Mozilla Firefox and Mozilla Firefox ESR browsers and Thunderbird mail client is related to code generation errors. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary JavaScript code. remotely to execute arbitrary...

The vulnerability of Microsoft Excel editors, related to improper handling of code generation, allows attackers to execute arbitrary code.

The vulnerability of Microsoft Excel editors is related to improper handling of code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of Microsoft Excel editors, related to improper handling of code generation, allows attackers to execute arbitrary code.

The vulnerability of Microsoft Excel editors is related to improper handling of code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

GHSA-297X-8XJ4-VCXV Improper Control of Generation of Code in doT

The dot package v1.1.2 uses Function to compile templates. This can be exploited by the attacker if they can control the given template or if they can control the value set on Object.prototype...

Improper Control of Generation of Code in doT

The dot package v1.1.2 uses Function to compile templates. This can be exploited by the attacker if they can control the given template or if they can control the value set on Object.prototype...

The vulnerability of the Array method in Mozilla Firefox and Mozilla Firefox ESR browsers, as well as the Thunderbird email client, allows a malicious actor to execute arbitrary JavaScript code in a privileged context.

The vulnerability of the Array method in Mozilla Firefox and Mozilla Firefox ESR browsers, as well as the Thunderbird email client, is related to errors during code generation. Exploiting this vulnerability allows an attacker to execute arbitrary JavaScript code in a privileged context...

The vulnerability of the Admin CP configuration module of the MyBB forum creation software allows a hacker to execute arbitrary code.

The vulnerability of the Admin CP module for the MyBB forum creation software is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the Microsoft Office Access Connectivity Engine component of the Microsoft Office software suite, related to improper code generation, allows a malicious actor to execute arbitrary code.

The vulnerability of the Microsoft Office Access Connectivity Engine component of the Microsoft Office software suite is related to improper code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

GHSA-5XM9-RF63-WJ7H Improper Control of Generation of Code in Spring Security

CRLF injection vulnerability in the logout functionality in VMware SpringSource Spring Security before 2.0.7 and 3.0.x before 3.0.6 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the spring-security-redirect parameter...

Improper Control of Generation of Code in Spring Security

CRLF injection vulnerability in the logout functionality in VMware SpringSource Spring Security before 2.0.7 and 3.0.x before 3.0.6 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the spring-security-redirect parameter...