1915 matches found
EUVD-2025-198338
An issue was discovered in weijiang1994 university-bbs aka Blogin in commit 9e06bab430bfc729f27b4284ba7570db3b11ce84 2025-01-13. A weak verification code generation mechanism combined with missing rate limiting allows attackers to perform brute-force attacks on verification codes without...
TencentOS Server 4: firefox (TSSA-2024:0162)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0162 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...
The vulnerability of the client to interacting with the SAP HANA database via JDBC allows a malicious actor to execute arbitrary code. This vulnerability is related to improper code generation, enabling the intruder to perform arbitrary actions.
The vulnerability of clients to interacting with the SAP HANA database via JDBC is related to incorrect code generation management. Exploiting this vulnerability allows an attacker to execute arbitrary code...
The vulnerability of the SAP Solution Manager platform, related to improper code generation management, allows a perpetrator to execute arbitrary code.
The vulnerability of the SAP Solution Manager software platform is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the pgAdmin 4 database management tool, related to improper code generation, allows a hacker to execute arbitrary code.
The vulnerability of the pgAdmin 4 database management tool is related to improper code generation. Exploiting this vulnerability allows an attacker to execute arbitrary code during data restoration from PLAIN files...
The vulnerability of SAP NetWeaver AS Java software integration platforms, related to improper code generation management, allows attackers to load any arbitrary file.
The vulnerability of SAP NetWeaver AS Java software-based integration platforms is related to incorrect code generation management. Exploiting this vulnerability allows a malicious actor to download any arbitrary file remotely...
Grid-STIX: A STIX 2.1-Compliant Cyber-Physical Security Ontology for Power Grid
Modern electrical power grids represent complex cyber-physical systems requiring specialized cybersecurity frameworks beyond traditional IT security models. Existing threat intelligence standards such as STIX 2.1 and MITRE ATT&CK lack coverage for grid-specific assets, operational technology...
CVE-2025-23361
NVIDIA NeMo Framework for all platforms contains a vulnerability in a script, where malicious input created by an attacker may cause improper control of code generation. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and da...
CVE-2025-12637
The Elastic Theme Editor plugin for WordPress is vulnerable to arbitrary file uploads due to a dynamic code generation feature in the processtheme function in all versions up to, and including, 0.0.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to...
PT-2025-46705
Name of the Vulnerable Software and Affected Versions Dell SmartFabric OS10 Software versions prior to 10.6.1.0 Description Dell SmartFabric OS10 Software versions prior to 10.6.1.0 contain an Improper Control of Generation of Code issue, also known as a Code Injection issue. A local attacker wit...
CVE-2025-23361
NVIDIA NeMo Framework for all platforms contains a vulnerability in a script, where malicious input created by an attacker may cause improper control of code generation. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and da...
PT-2025-46373
Name of the Vulnerable Software and Affected Versions NVIDIA NeMo Framework affected versions not specified Description The NVIDIA NeMo Framework contains a flaw in a script that could allow an attacker to manipulate code generation with malicious input. Exploitation of this issue may result in...
CVE-2025-49372
Improper Control of Generation of Code 'Code Injection' vulnerability in VillaTheme HAPPY happy-helpdesk-support-ticket-system allows Remote Code Inclusion.This issue affects HAPPY: from n/a through = 1.0.7...
CVE-2025-49372
Improper Control of Generation of Code 'Code Injection' vulnerability in VillaTheme HAPPY happy-helpdesk-support-ticket-system allows Remote Code Inclusion.This issue affects HAPPY: from n/a through = 1.0.7...
CVE-2025-32222
Improper Control of Generation of Code 'Code Injection' vulnerability in Widgetlogic.org Widget Logic widget-logic allows Code Injection.This issue affects Widget Logic: from n/a through = 6.0.5...
PT-2025-45190
Improper Control of Generation of Code 'Code Injection' vulnerability in Widgetlogic.org Widget Logic widget-logic allows Code Injection.This issue affects Widget Logic: from n/a through = 6.0.5...
[SECURITY] Fedora 42 Update: openapi-python-client-0.26.2-4.fc42
The openapi-python-client is a powerful tool designed to generate modern Python clients from OpenAPI 3.0+ documents supporting both synchronous and asynchronous HTTP requests. It automates the creation of Python classes and methods that correspond to the endpoints and schema defined in your OpenA...
ROS-20251029-06
Vulnerability of drm/amdgpu components of Linux kernel is related to dereferencing of pointer NULL. Exploitation of the vulnerability could allow an attacker to cause a denial of service A vulnerability in the Redis database management system DBMS is related to integer overflow. Exploitation of t...
The implementation of the asynchronous request processing mechanisms in the Webflux library used for creating Spring Cloud Gateway API gateways is vulnerable, allowing attackers to execute arbitrary code.
The vulnerability of the implementation of asynchronous request processing for the Webflux library used in creating Spring Cloud Gateway API gateways is related to incorrect code generation management. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary cod...
