The vulnerability of the eval function in software platforms for automating data exchange between MindsDB queues allows a hacker to execute arbitrary code.

The vulnerability of the eval function in software platforms for automating data exchange between MindsDB queues is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by introducing a specially crafted INSERT query...

The vulnerability of the application software interface of the backup and recovery software for Veeam Service Provider Console (VSPC) for remote and cloud customers allows a perpetrator to execute arbitrary code.

The vulnerability of the application software interface for data backup and restoration solutions for Veeam Service Provider Console VSPC remote and cloud customers is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the backup and data recovery software for Veeam Service Provider Console (VSPC) clients that are located remotely or in the cloud lies in improper code generation. This allows an attacker to execute arbitrary code.

The vulnerability of the backup and data recovery software for Veeam Service Provider Console VSPC for remote and cloud-based customers is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the Apache InLong data integration platform, related to improper control over code generation, allows attackers to execute arbitrary code.

The vulnerability of the Apache InLong data integration platform is related to improper code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2024-7104

Improper Control of Generation of Code 'Code Injection' vulnerability in SFS Consulting ww.Winsure allows Code Injection. This issue affects ww.Winsure: before 4.6.2...

SFS Consulting ww.Winsure 代码注入漏洞

SFS Consulting ww.Winsure is an application from SFS Consulting, Inc. A code injection vulnerability exists in SFS Consulting ww.Winsure versions prior to 4.6.2 that stems from improper code generation controls that allow code injection...

The vulnerability of the JS Help Desk plugin of the WordPress content management system allows a hacker to execute arbitrary PHP code.

The vulnerability of the JS Help Desk plugin of the WordPress content management system is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary PHP code remotely...

The vulnerability of the universal monitoring system Zabbix, related to improper control of code generation, allows a intruder to execute arbitrary code.

The vulnerability of the Zabbix universal monitoring system is related to improper control of code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the `torch.jit.annotations.parse_type_line()` function in the PyTorch machine learning framework allows a hacker to execute arbitrary code.

The vulnerability of the torch.jit.annotations.parsetypeline function in the PyTorch machine learning framework is related to incorrect code generation. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the microprogrammed software of the wireless access point D-Link DAP-2310, related to improper code generation, allows a intruder to execute arbitrary code.

The vulnerability of the microprogrammed software in the wireless access point D-Link DAP-2310 is related to improper code generation. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

CVE-2024-43922

Improper Control of Generation of Code 'Code Injection' vulnerability in NitroPack Inc. NitroPack allows Code Injection.This issue affects NitroPack: from n/a through 1.16.7...

WordPress plugin NitroPack 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

The vulnerability of the library used for creating graphical user interfaces in GTK (GIMP Toolkit) arises from improper code generation. This allows attackers to escalate their privileges.

The vulnerability of the library used for creating graphical user interfaces in GTK GIMP Toolkit is related to improper code generation. Exploiting this vulnerability can allow an attacker to increase their privileges...

CBL Mariner 2.0 Security Update: libcxx / llvm / rust (CVE-2024-31852)

The version of libcxx / llvm / rust installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-31852 advisory. - LLVM before 18.1.3 generates code in which the LR register can be overwritten without data bei...

ROS-20240812-08

Node.js software platform vulnerability is related to mismanagement of code generation. Exploitation The vulnerability could allow a remote attacker to activate arbitrary code with elevated privileges when handling CAPNETBINDSERVICE exceptions. elevated privileges when handling CAPNETBINDSERVICE...

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to improper code generation management, allows a hacker to execute arbitrary code.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to incorrect representation of the web application and command-line interface due to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute...

PT-2024-6293 · Apache · Apache Inlong

Name of the Vulnerable Software and Affected Versions: Apache InLong versions 1.10.0 through 1.12.0 Description: The issue affects Apache InLong due to improper control of code generation, which could lead to remote code execution. This allows a remote attacker to execute arbitrary code. Users ar...

The vulnerability of the getCustomLoginUrlTemplate method of the OpenAM access and rights management software allows a perpetrator to execute arbitrary code.

The vulnerability of the getCustomLoginUrlTemplate method in the OpenAM access and rights management software is related to improper code generation. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the eval() function in the framework for creating, managing, and launching autonomous agents based on artificial intelligence, SuperAGI, allows a perpetrator to execute arbitrary code and gain full control over the application.

The vulnerability of the eval function in the framework for creating, managing, and launching autonomous agents based on artificial intelligence, SuperAGI, is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code and gain full contro...

USN-6916-1: Lua vulnerabilities

It was discovered that Lua did not properly generate code when "ENV" is constant. An attacker could possibly use this issue to cause a denial of service or execute arbitrary unstrusted lua code. CVE-2022-28805 It was discovered that Lua did not properly handle C stack overflows during error...