1657 matches found
PT-2022-1874
Name of the Vulnerable Software and Affected Versions VP9 Video Extensions affected versions not specified Description The issue is related to incorrect code generation management in the VP9 Video Extensions package. An attacker can exploit this by sending a specially crafted request, potentially...
The vulnerability of the cleanup.exe executable of the McAfee Agent antivirus software allows a malicious actor to execute arbitrary commands.
The vulnerability of the cleanup.exe executable of the McAfee Agent antivirus software is related to inadequate code generation management. Exploiting this vulnerability allows an attacker to execute arbitrary commands...
The vulnerability in the built-in software of NETGEAR Wi-Fi routers such as D6200, D7000, R6020, R6080, R6050, JR6150, R6120, R6220, R6230, R6260, R6800, R6900v2, R6700v2, R7450, AC2100, AC2400, AC2600, RBK40, RBR40, RBS40, RBK20, RBR20, RBS20, RBK50, RBR50, RBS50, RBS50Y, and WNR2020 stems from incorrect code generation. This allows attackers to execute attacks on the server side using Server Side Include Injection (SSI).
The vulnerability of the built-in Wi-Fi router software of NETGEAR models D6200, D7000, R6020, R6080, R6050, JR6150, R6120, R6220, R6230, R6260, R6800, R6900v2, R6700v2, R7450, AC2100, AC2400, AC2600, RBK40, RBR40, RBS40, RBK20, RBR20, RBS20, RBK50, RBR50, RBS50, RBS50Y, and WNR2020 is related to...
The vulnerability of NETGEAR’s Wi-Fi routers, namely RBK40, RBR40, and RBS40, stems from improper handling of the cryptographic generation process. This allows attackers to execute a Server Side Include Injection (SSI) attack.
The vulnerability of the built-in Wi-Fi router software from NETGEAR, namely RBK40, RBR40, and RBS40, is related to incorrect code generation. Exploiting this vulnerability could allow an attacker to execute a Server Side Include Injection SSI attack...
The vulnerability in the built-in software of NETGEAR Wi-Fi routers such as D6200, D7000, R6020, R6080, R6050, JR6150, R6120, R6220, R6230, R6260, R6800, R6900v2, R6700v2, R7450, AC2100, AC2400, AC2600, RBK40, RBR40, RBS40, RBK20, RBR20, RBS20, RBK50, RBR50, RBS50, and RBS50Y stems from incorrect code generation. This allows attackers to execute attacks on the server side using Server Side Include Injection (SSI).
The vulnerability of the built-in Wi-Fi router software from NETGEAR, including models D6200, D7000, R6020, R6080, R6050, JR6150, R6120, R6220, R6230, R6260, R6800, R6900v2, R6700v2, R7450, AC2100, AC2400, AC2600, RBK40, RBR40, RBS40, RBK20, RBR20, RBS20, RBK50, RBR50, RBS50, and RBS50Y, is relat...
CVE-2021-39946
Improper neutralization of user input in GitLab CE/EE versions 14.3 to 14.3.6, 14.4 to 14.4.4, and 14.5 to 14.5.2 allowed an attacker to exploit XSS by abusing the generation of the HTML code related to emojis...
PT-2022-1986 · Microsoft · Windows Remote Desktop Client +1
Name of the Vulnerable Software and Affected Versions: Microsoft Windows Remote Desktop Client affected versions not specified Description: The issue is related to incorrect code generation management in the Remote Desktop Client of Microsoft Windows. It allows a remote attacker to execute...
PT-2022-1952 · Unknown · Raw Image Extension
Name of the Vulnerable Software and Affected Versions: Raw Image Extension affected versions not specified Description: The issue is related to incorrect code generation management in the Raw Image Extension plugin for viewing RAW images. Exploitation of this issue may allow an attacker to execut...
The vulnerability of the threat detection mechanism for Microsoft Defender for IoT, related to improper code generation, allows a malicious actor to execute arbitrary code.
The vulnerability of the Microsoft Defender for IoT threat detection mechanism is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially crafted request...
The vulnerability of HEVC Video Extensions relates to improper code generation, allowing attackers to execute arbitrary code.
The vulnerability of HEVC Video Extensions is related to incorrect code generation management. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the Microsoft Dynamics 365 Business Central software for small and medium-sized businesses lies in improper code generation, allowing an attacker to execute arbitrary code.
The vulnerability of the Microsoft Dynamics 365 Business Central software for small and medium-sized businesses is related to improper code generation. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially crafted request...
The vulnerability of the DNS Server component of the Microsoft Windows operating system, which allows a perpetrator to execute arbitrary code.
The vulnerability of the DNS Server component of the Microsoft Windows operating system is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the MSHTML platform on Microsoft Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the MSHTML platform in Microsoft Windows systems is related to improper handling of code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code through a specially created web page...
The vulnerability of the Demo_ExecuteProcessOnGroup process in the CommCell storage management software allows a hacker to execute arbitrary code.
The vulnerability of the DemoExecuteProcessOnGroup process in the CommCell storage management software is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted request remotely...
The vulnerability of the DirectWrite programming interface in Microsoft Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the DirectWrite programming interface in Microsoft Windows operating systems is related to improper handling of code generation. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...
The vulnerability of the Media Foundation component in Microsoft Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the Media Foundation component in Microsoft Windows operating systems is related to improper code generation. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially crafted request...
The vulnerability of the DNS Server component of the Microsoft Windows operating system, which allows a perpetrator to execute arbitrary code.
The vulnerability of the DNS Server component of the Microsoft Windows operating system is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of Microsoft SharePoint Foundation, SharePoint Server, and SharePoint Enterprise Server lies in improper code generation management, allowing an attacker to execute arbitrary code.
The vulnerability of Microsoft SharePoint Foundation, SharePoint Server, and SharePoint Enterprise Server is related to improper code generation management. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially crafted request...
The vulnerability of the threat detection mechanism for Microsoft Defender for IoT, related to improper code generation, allows a malicious actor to execute arbitrary code.
The vulnerability of the Microsoft Defender for IoT threat detection mechanism is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially crafted request...
The vulnerability of Microsoft SharePoint Server and Microsoft SharePoint packages lies in improper code generation management, allowing attackers to execute arbitrary code.
The vulnerability of Microsoft SharePoint Server packages is related to improper code generation management. Exploiting this vulnerability allows an attacker to execute arbitrary code through a specially crafted request...