E-DDC3.3 Automation Station Web Interface Arbitrary Command Execution

The vulnerability of the E-DDC3.3 automation station’s web interface involves incorrect code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands by sending specially crafted web requests via the CGI protocol...

PT-2024-4418 · Clang +2 · Clang +2

Name of the Vulnerable Software and Affected Versions: LLVM versions prior to 18.1.3 Description: The issue is related to a buffer overflow in memory when handling the LR register connection due to incorrect code generation management. This can lead to an exploitable error in the flow of control,...

HtmlUnit Code Execution

The vulnerability of HtmlUnit, a browser without a graphical interface, is related to incorrect code generation. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

AppleMobileFileIntegrity Code Execution

The vulnerability of the AppleMobileFileIntegrity component in the macOS operating system is related to improper code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Citrix ADC Code Execution

The vulnerability of Citrix ADC application delivery controllers formerly known as Citrix NetScaler Application Delivery Controller, as well as the Citrix Gateway access control system formerly known as Citrix NetScaler Gateway, is related to improper code generation. Exploiting this vulnerabilit...

CVE-2023-6548

Improper Control of Generation of Code 'Code Injection' in NetScaler ADC and NetScaler Gateway allows an attacker with access to NSIP, CLIP or SNIP with management interface to perform Authenticated low privileged remote code execution on Management Interface...

XWiki Platform Code Execution

The vulnerability of the XWiki Platform lies in improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

XWiki Platform Code Execution

The vulnerability of the user interface for searching the XWiki Platform, a platform for creating collaborative web applications, is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Struts2 Code Execution

The vulnerability of the Struts2 component in the software for managing power sources of Voltronic Power ViewPower Pro is related to improper code generation. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

PT-2024-1714

Name of the Vulnerable Software and Affected Versions SAP Application Interface Framework File Adapter version 702 Description The issue allows a high privilege user to use a function module to traverse through various layers and execute OS commands directly, controlling the behavior of the...

CVE-2023-46623

Improper Control of Generation of Code 'Code Injection' vulnerability in TienCOP WP EXtra.This issue affects WP EXtra: from n/a through 6.2...

CVE-2023-47840

Improper Control of Generation of Code 'Code Injection' vulnerability in Qode Interactive Qode Essential Addons.This issue affects Qode Essential Addons: from n/a through 1.5.2...

PT-2023-8708 · Unknown · Myq Print Server

Name of the Vulnerable Software and Affected Versions: MyQ Print Server affected versions not specified Description: The issue is related to incorrect code generation management in the MyQ Print Server, allowing a remote attacker to execute arbitrary code. This could potentially expose sensitive...

Helix Core Code Execution

The vulnerability of the Helix Core version control software is related to improper code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Apache OFBiz Code Execution

The vulnerability of the Apache OFBiz resource planning software lies in improper code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2023-8225

Name of the Vulnerable Software and Affected Versions XWiki Platform versions 2.3 through 14.10.14 XWiki Platform versions 15.5.1 and earlier XWiki Platform versions prior to 15.7-rc-1 Description The issue is related to incorrect code generation management in the XWiki Platform, allowing a remot...

PT-2023-32139 · Frauscher · Fds102 For Fadc/Fadci +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: This issue allows a remote attacker with low privileges to exploit Improper Control of Generation of Code, also known as 'Code Injection', to gain full...

GE Proficy HMI/SCADA iFIX Code Generation

The vulnerability of the GE Proficy HMI/SCADA iFIX supervisory control software lies in improper code generation. Exploiting this vulnerability can allow an attacker to gain full control over the software by introducing a malicious configuration file into the expected web server execution path...

Apache Airflow Hive Provider Code Execution

The vulnerability of the Apache Airflow Hive Provider network software is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Zabbix Agent Code Execution

The vulnerability of the Zabbix universal monitoring agent is related to incorrect code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...