[SECURITY] Fedora 35 Update: golang-github-cheekybits-genny-1.0.0-9.20200724git3e22f1a.fc35

Genny is a code-generation generics solution. It allows you write normal buildable and testable Go code which, when processed by the genny gen tool, w ill replace the generics with specific types...

Moxa MXView Code Execution

The vulnerability of the Moxa MXView network control software is related to improper handling of code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or increase their privileges through a specially created module...

PT-2022-3742 · Microsoft · Windows Network File System +1

Name of the Vulnerable Software and Affected Versions: Windows Network File System affected versions not specified Description: The issue is related to incorrect code generation management in the Windows Network File System NFS, allowing remote attackers to execute arbitrary code and affect the...

PT-2022-3721 · Microsoft · Windows Network File System +1

Name of the Vulnerable Software and Affected Versions: Windows Network File System affected versions not specified Description: The issue is related to incorrect code generation management in the Windows Network File System NFS, allowing remote attackers to execute arbitrary code and affect the...

Apache Commons Configuration Code Execution

The vulnerability of the Apache Commons Configuration library is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially crafted script, DNS, and URL requests...

SSCE Code Execution

The vulnerability of the component responsible for creating, designing, configuring, and displaying information panels of the Self Service Composition Environment SSCE platform for SAP Manufacturing Integration and Intelligence is related to deficiencies in access control and improper management ...

[SECURITY] Fedora 36 Update: golang-github-googleapis-gnostic-0.5.3-6.fc36

This package contains a Go command line tool which converts JSON and YAML OpenAPI descriptions to and from equivalent Protocol Buffer representations. Protocol Buffers provide a language-neutral, platform-neutral, extensible mechanism for serializing structured data. gnostic's Protocol Buffer...

[SECURITY] Fedora 36 Update: golang-github-google-wire-0.5.0-3.fc36

Wire is a code generation tool that automates connecting components using dependency injection. Dependencies between components are represented in Wire as function parameters, encouraging explicit initialization instead of global variables. Because Wire operates without runtime state or reflectio...

abstraps (0.1.8), aivm (>=0.2.0, <=0.3.0) +229 more potentially affected by CVE-2022-31104 via cranelift-codegen (>=0.14.0, <=0.84.0)

cranelift-codegen CARGO version =0.14.0, =0.2.0, =0.1.0, =0.1.0, =0.5.0, =0.26.1, =0.1.0, =0.1.0, =0.1.0, =1.1.0-rc.1, =0.13.2, =0.8.0-alpha1, =1.3.4 and more Source cves: CVE-2022-31104 Source advisory: OSV:GHSA-JQWC-C49R-4W2X...

Intel Unprotected Access

The vulnerability of Intel microprogramming software is related to improper code generation management. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

PHP Smarty Template Handlers Arbitrary PHP Code Execution

The vulnerability of PHP Smarty templates is related to incorrect code generation management. Exploiting this vulnerability allows an attacker to execute arbitrary PHP code remotely...

Sourcegraph gitserver Code Execution

The vulnerability of the gitserver service in the Sourcegraph search and navigation system is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted HTTP request...

Windows Hyper-V Code Execution

The vulnerability of the Windows Hyper-V hardware virtualization technology in Windows operating systems is related to improper code generation. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Generated code can read and write out of bounds in safe code

Code generated by flatbuffers' compiler is unsafe but not marked as such. See https://github.com/google/flatbuffers/issues/6627 for details. All users that use generated code by flatbuffers compiler are recommended to: 1. not expose flatbuffer generated code as part of their public APIs 2. audit...

Remote Desktop Protocol Code Execution

The vulnerability of the Remote Desktop Protocol implementation in the Microsoft Windows operating system is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Win32 Stream Enumeration Code Execution

The vulnerability of the Win32 Stream Enumeration component in Windows operating systems is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

DNS Server Microsoft Windows Code Execution

The vulnerability of the DNS server of the Microsoft Windows operating system is related to incorrect code generation management. Exploitation of this vulnerability can allow a remote attacker to execute arbitrary code...

Win32 Stream Enumeration Code Execution

The vulnerability of the Win32 Stream Enumeration component in Windows operating systems is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Win32 Stream Enumeration Code Execution

The vulnerability of the Win32 Stream Enumeration component in Windows operating systems is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

DNS Server Microsoft Windows Code Execution

The vulnerability of the DNS server of the Microsoft Windows operating system is related to incorrect code generation management. Exploitation of this vulnerability can allow a remote attacker to execute arbitrary code...