1907 matches found
ROS-20251217-7323
A vulnerability in the Redis database management system DBMS is related to mismanagement of code generation. Exploitation of the vulnerability could allow an attacker to execute arbitrary code...
The vulnerability of the has_metacommands() function in the pgAdmin 4 database management tool allows a hacker to bypass existing security mechanisms.
The vulnerability of the hasmetacommands function in the pgAdmin 4 database management tool is related to improper code generation. Exploiting this vulnerability could allow a malicious actor to bypass existing security mechanisms by introducing specially crafted SQL files...
CVE-2025-66533
Improper Control of Generation of Code 'Code Injection' vulnerability in StellarWP GiveWP give allows Code Injection.This issue affects GiveWP: from n/a through = 4.13.1...
The vulnerability of the Longwatch video surveillance and monitoring system lies in improper code generation. This allows intruders to enhance their privileges and execute arbitrary codes.
The vulnerability of the Longwatch video surveillance and monitoring system is related to incorrect code generation. Exploiting this vulnerability can allow a remote attacker to enhance their privileges and execute arbitrary code by sending specially crafted GET requests...
[SECURITY] Fedora 42 Update: CuraEngine-5.4.0-10.fc42
CuraEngine is a C++ console application for 3D printing G-code generation. It has been made as a better and faster alternative to the old Skeinforge engine. This is just a console application for G-code generation. For a full graphical application look at cura with is the graphical frontend for...
[SECURITY] Fedora 43 Update: CuraEngine-5.4.0-10.fc43
CuraEngine is a C++ console application for 3D printing G-code generation. It has been made as a better and faster alternative to the old Skeinforge engine. This is just a console application for G-code generation. For a full graphical application look at cura with is the graphical frontend for...
The vulnerability of BERT, the language model encoder for NVIDIA NeMo’s complex platform for training and applying neural networks in speech processing and natural language processing, allows a perpetrator to execute arbitrary code, gain unauthorized access to protected information, or replace data.
The vulnerability of BERT, the language model encoder for NVIDIA NeMo’s complex platform used for training and applying neural networks in speech processing and natural language processing, relates to improper code generation management. Exploiting this vulnerability can allow attackers to genera...
The vulnerabilities of the NLP and LLM components of the NVIDIA NeMo comprehensive platform for training and applying neural networks in speech processing and natural language processing allow a perpetrator to execute arbitrary codes, enhance their privileges, and gain unauthorized access to protected information.
The vulnerability of the NLP and LLM components of the NVIDIA NeMo comprehensive platform for training and applying neural networks in speech processing and natural language processing is related to improper code generation management. Exploiting this vulnerability can allow attackers to execute...
The vulnerability of the NVIDIA Isaac GR00T development platform for universal humanoid robots, related to improper code generation management, allows attackers to escalate their privileges and gain unauthorized access to protected information.
The vulnerability of the NVIDIA Isaac GR00T platform for developing universal humanoid robots is related to improper code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code, enhance their privileges, and gain unauthorized access to protected...
The vulnerability of the NVIDIA Isaac GR00T development platform for universal humanoid robots, related to improper code generation management, allows attackers to escalate their privileges and gain unauthorized access to protected information.
The vulnerability of the NVIDIA Isaac GR00T platform for developing universal humanoid robots is related to improper code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code, enhance their privileges, and gain unauthorized access to protected...
The vulnerability of the Bizerba BRAIN2 industrial software platform, related to improper code generation, allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the Bizerba BRAIN2 industrial software platform is related to improper code generation management. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
LLM-CSEC: Empirical Evaluation of Security in C/C++ Code Generated by Large Language Models
The security of code generated by large language models LLMs is a significant concern, as studies indicate that such code often contains vulnerabilities and lacks essential defensive programming constructs. This work focuses on examining and evaluating the security of LLM-generated code,...
DUALGUAGE: Automated Joint Security-Functionality Benchmarking for Secure Code Generation
Large language models LLMs and autonomous coding agents are increasingly used to generate software across a wide range of domains. Yet a core requirement remains unmet: ensuring that generated code is secure without compromising its functional correctness. Existing benchmarks and evaluations for...
EUVD-2025-198338
An issue was discovered in weijiang1994 university-bbs aka Blogin in commit 9e06bab430bfc729f27b4284ba7570db3b11ce84 2025-01-13. A weak verification code generation mechanism combined with missing rate limiting allows attackers to perform brute-force attacks on verification codes without...
TencentOS Server 4: firefox (TSSA-2024:0162)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0162 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...
The vulnerability of the client to interacting with the SAP HANA database via JDBC allows a malicious actor to execute arbitrary code. This vulnerability is related to improper code generation, enabling the intruder to perform arbitrary actions.
The vulnerability of clients to interacting with the SAP HANA database via JDBC is related to incorrect code generation management. Exploiting this vulnerability allows an attacker to execute arbitrary code...
The vulnerability of the SAP Solution Manager platform, related to improper code generation management, allows a perpetrator to execute arbitrary code.
The vulnerability of the SAP Solution Manager software platform is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the pgAdmin 4 database management tool, related to improper code generation, allows a hacker to execute arbitrary code.
The vulnerability of the pgAdmin 4 database management tool is related to improper code generation. Exploiting this vulnerability allows an attacker to execute arbitrary code during data restoration from PLAIN files...
The vulnerability of SAP NetWeaver AS Java software integration platforms, related to improper code generation management, allows attackers to load any arbitrary file.
The vulnerability of SAP NetWeaver AS Java software-based integration platforms is related to incorrect code generation management. Exploiting this vulnerability allows a malicious actor to download any arbitrary file remotely...
Grid-STIX: A STIX 2.1-Compliant Cyber-Physical Security Ontology for Power Grid
Modern electrical power grids represent complex cyber-physical systems requiring specialized cybersecurity frameworks beyond traditional IT security models. Existing threat intelligence standards such as STIX 2.1 and MITRE ATT&CK lack coverage for grid-specific assets, operational technology...