Apache NiFi Remote ResourceHandler Code Execution

The vulnerability of the Remote ResourceHandler component of the Apache NiFi data processing platform is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Ghostscript gdevijs.c Code Execution

The vulnerability of the gdevijs.c component in the Ghostscript document processing software lies in improper code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

StruxureWare Data Center Expert Code Execution

The vulnerability of the StruxureWare Data Center Expert monitoring system relates to improper code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Apache NiFi DBCPConnectionPool HikariCPConnectionPool Code Execution

The vulnerability of the DBCPConnectionPool and HikariCPConnectionPool control servers of the Apache NiFi data processing platform is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

StruxureWare Data Center Expert Code Execution

The vulnerability of the StruxureWare Data Center Expert monitoring system relates to improper code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Trane Symbio Improper Control of Generation of Code (CVE-2021-38448)

The affected controllers do not properly sanitize the input containing code syntax. As a result, an attacker could craft code to alter the intended controller flow of the software. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more informatio...

RocketMQ Arbitrary Command Execution

The vulnerability of the RocketMQ messaging platform is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

Docker Desktop Code Execution

The vulnerability of the Docker Desktop platform for developing and delivering container applications is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Docker Desktop Code Execution

The vulnerability of the Docker Desktop platform for developing and delivering container applications is related to improper code generation management. Exploiting this vulnerability allows a remote attacker to inject arbitrary code into the system...

OpenEMR Code Generation Redirect

The vulnerability of the OpenEMR software for managing medical organizations is related to incorrect code generation. Exploiting this vulnerability allows a malicious actor to redirect users to any arbitrary URL address...

Ansible Semaphore Code Execution

The vulnerability of the Ansible Semaphore configuration management interface is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

MODULYS GP (MOD3GP-SY-120K) module-based Code Execution

The vulnerability of the MODULYS GP MOD3GP-SY-120K module-based power supply management web application is related to incorrect code generation. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

IBM DB2 JDBC Client Driver Code Execution

The vulnerability of the JDBC client driver of the IBM DB2 database management system is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

IBM DB2 JDBC Client Driver Code Execution

The vulnerability of the JDBC client driver of the IBM DB2 database management system is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

go.mod RCE

The vulnerability of the go.mod file in the Go programming language is related to improper handling of code generation during the loading of the Go Toolchain. Exploiting this vulnerability allows an attacker to enhance their privileges and execute arbitrary code...

Metabase Code Execution

The vulnerability of the Metabase data visualization and reporting software is related to improper code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Amazon Linux 2023 : cpp, gcc, gcc-c++ (ALAS2023-2023-342)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-342 advisory. An issue was found in a defense in depth feature of the GCC compiler on aarch64 platforms. The stack protector feature -fstack-protector did not detect or defend against overflows of dynamically-sized...

Medium: gcc

Issue Overview: An issue was found in a defense in depth feature of the GCC compiler on aarch64 platforms. The stack protector feature -fstack-protector did not detect or defend against overflows of dynamically-sized local variables. This update to the GCC compiler remedies code generation for th...

PT-2023-7219 · Zabbix +3 · Zabbix +3

Name of the Vulnerable Software and Affected Versions: Go versions prior to 1.21 Zabbix affected versions not specified Description: The issue concerns the improper handling of backticks in Javascript template literals within Go templates, potentially allowing for the injection of arbitrary...

SQLite JDBC Code Execution

The vulnerability of the library for accessing and creating SQLite JDBC files is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...