Lucene search
+L

2045 matches found

OSV
OSV
•added 2022/05/17 4:17 a.m.•86 views

GHSA-49J7-QGHP-5WJ8 Improper Control of Generation of Code in HawtJNI

Race condition in hawtjni-runtime/src/main/java/org/fusesource/hawtjni/runtime/Library.java in HawtJNI before 1.8, when a custom library path is not specified, allows local users to execute arbitrary Java code by overwriting a temporary JAR file with a predictable name in /tmp...

4.4CVSS6.1AI score0.00589EPSS
SaveExploits1References15
BDU FSTEC
BDU FSTEC
•added 2022/05/17 12:00 a.m.•10 views

The vulnerability of the Redis database management system allows a hacker to execute arbitrary code.

The vulnerability of the Redis database management system is related to improper code generation. Exploiting this vulnerability allows an attacker to execute arbitrary code...

3.9CVSS7AI score0.02264EPSS
SaveExploits1References14Affected Software4
OSV
OSV
•added 2022/05/13 1:25 a.m.•44 views

GHSA-R4M4-PMVW-M6J5 Apache Thrift Go Library Command Injection

The Apache Thrift Go client library exposed the potential during code generation for command injection due to using an external formatting tool. Affected Apache Thrift 0.9.3 and older, Fixed in Apache Thrift 0.10.0...

8.8CVSS8.9AI score0.06873EPSS
SaveExploits0References7
Github Security Blog
Github Security Blog
•added 2022/05/13 1:25 a.m.•40 views

Apache Thrift Go Library Command Injection

The Apache Thrift Go client library exposed the potential during code generation for command injection due to using an external formatting tool. Affected Apache Thrift 0.9.3 and older, Fixed in Apache Thrift 0.10.0...

9CVSS9AI score0.06873EPSS
SaveExploits0References8Affected Software1
Github Security Blog
Github Security Blog
•added 2022/05/13 1:02 a.m.•42 views

Improper Control of Generation of Code in Apache Kafka

In Apache Kafka 0.9.0.0 to 0.9.0.1, 0.10.0.0 to 0.10.2.1, 0.11.0.0 to 0.11.0.2, and 1.0.0, authenticated Kafka users may perform action reserved for the Broker via a manually created fetch request interfering with data replication, resulting in data loss...

5.5CVSS4.4AI score0.04801EPSS
SaveExploits0References12Affected Software1
OSV
OSV
•added 2022/05/13 1:02 a.m.•65 views

GHSA-GH27-38P5-MRXC Improper Control of Generation of Code in Apache Kafka

In Apache Kafka 0.9.0.0 to 0.9.0.1, 0.10.0.0 to 0.10.2.1, 0.11.0.0 to 0.11.0.2, and 1.0.0, authenticated Kafka users may perform action reserved for the Broker via a manually created fetch request interfering with data replication, resulting in data loss...

5.4CVSS5.4AI score0.04801EPSS
SaveExploits0References11
Fedora
Fedora
•added 2022/05/07 5:10 a.m.•41 views

[SECURITY] Fedora 36 Update: CuraEngine-4.13.1-2.fc36

CuraEngine is a C++ console application for 3D printing G-code generation. It has been made as a better and faster alternative to the old Skeinforge engine. This is just a console application for G-code generation. For a full graphical application look at cura with is the graphical frontend for...

6.5CVSS6.8AI score0.02111EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
•added 2022/05/05 12:00 a.m.•20 views

The vulnerability of the Microsoft Office and Microsoft 365 Apps for Enterprise software packages relates to improper code generation management, allowing an attacker to execute arbitrary code.

The vulnerability of the Microsoft Office and Microsoft 365 Apps for Enterprise software packages is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

7.8CVSS7.8AI score0.06358EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2022/05/04 12:00 a.m.•16 views

The vulnerability of the HEVC Video Extension codec, related to improper code generation, allows a perpetrator to execute arbitrary code.

The vulnerability of the HEVC Video Extension codec is related to improper code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS7.6AI score0.02294EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2022/05/04 12:00 a.m.•23 views

The vulnerability of Microsoft Excel editors, related to improper handling of code generation, allows attackers to execute arbitrary code.

The vulnerability of Microsoft Excel editors is related to improper handling of code generation. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.7AI score0.51673EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2022/05/04 12:00 a.m.•19 views

The vulnerability of the Microsoft Office Graphics Editor for spreadsheet applications, Microsoft Excel, allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft Office Graphics Editor for spreadsheet applications, Microsoft Excel, is related to improper handling of code generation. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.6AI score0.02294EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2022/05/04 12:00 a.m.•19 views

The vulnerability of Microsoft Windows Defender, a security software for Windows operating systems, allows a hacker to execute arbitrary code.

The vulnerability of Microsoft’s Windows Defender operating system is related to improper code generation management. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

9.3CVSS7.7AI score0.02643EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2022/05/04 12:00 a.m.•24 views

The vulnerability of the NanoSSL library in microprogramming software for Aruba switches such as Aruba 5400R, Aruba 3810, Aruba 2920, Aruba 2930F, Aruba 2930M, Aruba 2530, and Aruba 2540 allows a hacker to execute arbitrary code.

The vulnerability of the NanoSSL microprogramming software library used in Aruba 5400R, Aruba 3810, Aruba 2920, Aruba 2930F, Aruba 2930M, Aruba 2530, and Aruba 2540 switches is related to improper code generation management. Exploiting this vulnerability allows a remote attacker to execute...

10CVSS6AI score0.20526EPSS
SaveExploits0References3Affected Software7
BDU FSTEC
BDU FSTEC
•added 2022/04/27 12:00 a.m.•14 views

The vulnerability of the _compile function in the Perl programming language allows attackers to execute arbitrary commands.

The vulnerability of the compile function in the Perl programming language is related to improper handling of code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

7.5CVSS8.2AI score0.63738EPSS
SaveExploits13References18Affected Software4
BDU FSTEC
BDU FSTEC
•added 2022/04/27 12:00 a.m.•22 views

The vulnerability of microprogrammed software in programmable logic controllers such as ControlLogix 5580, GuardLogix 5580, CompactLogix 5380, CompactLogix 5480, and Compact GuardLogix 5380 lies in improper code generation. This allows attackers to implant code into the controller that the user will be unable to detect.

The vulnerability of microprogrammed software in programmable logic controllers such as ControlLogix 5580, GuardLogix 5580, CompactLogix 5380, CompactLogix 5480, and Compact GuardLogix 5380 lies in improper code generation. Exploiting this vulnerability allows an intruder to implant code into the...

7.7CVSS7.5AI score0.0345EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2022/04/21 12:00 a.m.•13 views

The vulnerability of the distributed database management system Apache Cassandra, related to improper code generation, allows a hacker to execute arbitrary code on the host.

The vulnerability of the distributed database management system Apache Cassandra is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the host remotely...

9.1CVSS9.1AI score0.57528EPSS
SaveExploits7References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/04/20 12:00 a.m.•19 views

The vulnerability of the CMS system SDCMS, related to improper code generation, allows a hacker to execute arbitrary PHP code.

The vulnerability of the CMS system SDCMS is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary PHP code...

9CVSS8.1AI score0.02917EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
•added 2022/04/18 12:00 a.m.•16 views

The vulnerability affects the runtime of procedure calls in the Microsoft Windows operating system, allowing an attacker to execute arbitrary code.

The vulnerability of remote procedure call runtime in the Microsoft Windows operating system is related to improper code generation management. Exploitation of this vulnerability can allow a malicious actor to execute arbitrary code remotely...

10CVSS8.4AI score0.02579EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2022/04/18 12:00 a.m.•17 views

The vulnerability of the Network File System (NFS) of the Microsoft Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Network File System NFS of the Microsoft Windows operating system is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created NFS network message protocol...

10CVSS8.5AI score0.34552EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
•added 2022/04/18 12:00 a.m.•15 views

The vulnerability affects the runtime of procedure calls in the Microsoft Windows operating system, allowing an attacker to execute arbitrary code.

The vulnerability of remote procedure call runtime in the Microsoft Windows operating system is related to improper code generation management. Exploitation of this vulnerability can allow a malicious actor to execute arbitrary code remotely...

10CVSS8.4AI score0.03088EPSS
SaveExploits0References4
Rows per page
Query Builder