Lucene search
+L

2078 matches found

BDU FSTEC
BDU FSTEC
•added 2022/06/09 12:00 a.m.•16 views

DNS Server Microsoft Windows Code Execution

The vulnerability of the DNS server of the Microsoft Windows operating system is related to incorrect code generation management. Exploitation of this vulnerability can allow a remote attacker to execute arbitrary code...

9CVSS7.8AI score0.03516EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2022/06/06 12:00 a.m.•24 views

DNS Server Microsoft Windows Code Execution

The vulnerability of the DNS server of the Microsoft Windows operating system is related to incorrect code generation management. Exploitation of this vulnerability can allow a remote attacker to execute arbitrary code...

9CVSS7.8AI score0.03576EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2022/06/02 12:00 a.m.•21 views

DNS Server Microsoft Windows Code Execution

The vulnerability of the DNS server of the Microsoft Windows operating system is related to incorrect code generation management. Exploitation of this vulnerability can allow a remote attacker to execute arbitrary code...

9CVSS7.7AI score0.03839EPSS
SaveExploits0References3
Redos
Redos
•added 2022/05/30 12:00 a.m.•81 views

ROS-20220530-03

Vulnerability of Array method of Mozilla Firefox and Mozilla Firefox ESR browsers and Thunderbird mail client is related to code generation errors. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary JavaScript code. remotely to execute arbitrary...

8.8CVSS8.8AI score0.26709EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2022/05/26 12:00 a.m.•17 views

Microsoft Excel Code Generation Code Execution

The vulnerability of Microsoft Excel editors is related to improper handling of code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9.3CVSS7.8AI score0.02108EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2022/05/26 12:00 a.m.•27 views

Microsoft Excel Code Generation Code Execution

The vulnerability of Microsoft Excel editors is related to improper handling of code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9.3CVSS7.7AI score0.02511EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2022/05/24 5:11 p.m.•38 views

Improper Control of Generation of Code in doT

The dot package v1.1.2 uses Function to compile templates. This can be exploited by the attacker if they can control the given template or if they can control the value set on Object.prototype...

8.8CVSS8.3AI score0.02138EPSS
SaveExploits1References3Affected Software1
osv_ghsa
osv_ghsa
•added 2022/05/24 5:11 p.m.•18 views

GHSA-297X-8XJ4-VCXV Improper Control of Generation of Code in doT

The dot package v1.1.2 uses Function to compile templates. This can be exploited by the attacker if they can control the given template or if they can control the value set on Object.prototype...

8.8CVSS7.2AI score0.02138EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
•added 2022/05/23 12:00 a.m.•19 views

Mozilla Firefox Array Method JavaScript Execution

The vulnerability of the Array method in Mozilla Firefox and Mozilla Firefox ESR browsers, as well as the Thunderbird email client, is related to errors during code generation. Exploiting this vulnerability allows an attacker to execute arbitrary JavaScript code in a privileged context...

10CVSS8.2AI score0.26709EPSS
SaveExploits0References18Affected Software14
BDU FSTEC
BDU FSTEC
•added 2022/05/20 12:00 a.m.•32 views

MyBB Admin CP Code Execution

The vulnerability of the Admin CP module for the MyBB forum creation software is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9CVSS7.5AI score0.77827EPSS
SaveExploits9References5Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/05/20 12:00 a.m.•21 views

Microsoft Office Access Connectivity Engine Code Execution

The vulnerability of the Microsoft Office Access Connectivity Engine component of the Microsoft Office software suite is related to improper code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS7.6AI score0.07987EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2022/05/17 5:18 a.m.•45 views

Improper Control of Generation of Code in Spring Security

CRLF injection vulnerability in the logout functionality in VMware SpringSource Spring Security before 2.0.7 and 3.0.x before 3.0.6 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the spring-security-redirect parameter...

4.3CVSS5AI score0.04646EPSS
SaveExploits2References4Affected Software1
osv_ghsa
osv_ghsa
•added 2022/05/17 5:18 a.m.•109 views

GHSA-5XM9-RF63-WJ7H Improper Control of Generation of Code in Spring Security

CRLF injection vulnerability in the logout functionality in VMware SpringSource Spring Security before 2.0.7 and 3.0.x before 3.0.6 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the spring-security-redirect parameter...

4.3CVSS6.7AI score0.04646EPSS
SaveExploits2References4
osv_ghsa
osv_ghsa
•added 2022/05/17 4:17 a.m.•93 views

GHSA-49J7-QGHP-5WJ8 Improper Control of Generation of Code in HawtJNI

Race condition in hawtjni-runtime/src/main/java/org/fusesource/hawtjni/runtime/Library.java in HawtJNI before 1.8, when a custom library path is not specified, allows local users to execute arbitrary Java code by overwriting a temporary JAR file with a predictable name in /tmp...

4.4CVSS6.1AI score0.00589EPSS
SaveExploits1References15
BDU FSTEC
BDU FSTEC
•added 2022/05/17 12:00 a.m.•11 views

Redis Code Execution

The vulnerability of the Redis database management system is related to improper code generation. Exploiting this vulnerability allows an attacker to execute arbitrary code...

3.9CVSS7AI score0.02264EPSS
SaveExploits1References14Affected Software4
Github Security Blog
Github Security Blog
•added 2022/05/13 1:25 a.m.•41 views

Apache Thrift Go Library Command Injection

The Apache Thrift Go client library exposed the potential during code generation for command injection due to using an external formatting tool. Affected Apache Thrift 0.9.3 and older, Fixed in Apache Thrift 0.10.0...

9CVSS9AI score0.06873EPSS
SaveExploits0References8Affected Software1
osv_ghsa
osv_ghsa
•added 2022/05/13 1:25 a.m.•50 views

GHSA-R4M4-PMVW-M6J5 Apache Thrift Go Library Command Injection

The Apache Thrift Go client library exposed the potential during code generation for command injection due to using an external formatting tool. Affected Apache Thrift 0.9.3 and older, Fixed in Apache Thrift 0.10.0...

8.8CVSS8.9AI score0.06873EPSS
SaveExploits0References7
Github Security Blog
Github Security Blog
•added 2022/05/13 1:02 a.m.•48 views

Improper Control of Generation of Code in Apache Kafka

In Apache Kafka 0.9.0.0 to 0.9.0.1, 0.10.0.0 to 0.10.2.1, 0.11.0.0 to 0.11.0.2, and 1.0.0, authenticated Kafka users may perform action reserved for the Broker via a manually created fetch request interfering with data replication, resulting in data loss...

5.5CVSS4.4AI score0.04801EPSS
SaveExploits0References12Affected Software1
osv_ghsa
osv_ghsa
•added 2022/05/13 1:02 a.m.•68 views

GHSA-GH27-38P5-MRXC Improper Control of Generation of Code in Apache Kafka

In Apache Kafka 0.9.0.0 to 0.9.0.1, 0.10.0.0 to 0.10.2.1, 0.11.0.0 to 0.11.0.2, and 1.0.0, authenticated Kafka users may perform action reserved for the Broker via a manually created fetch request interfering with data replication, resulting in data loss...

5.4CVSS5.4AI score0.04801EPSS
SaveExploits0References11
Fedora
Fedora
•added 2022/05/07 5:10 a.m.•43 views

[SECURITY] Fedora 36 Update: CuraEngine-4.13.1-2.fc36

CuraEngine is a C++ console application for 3D printing G-code generation. It has been made as a better and faster alternative to the old Skeinforge engine. This is just a console application for G-code generation. For a full graphical application look at cura with is the graphical frontend for...

6.5CVSS6.8AI score0.02093EPSS
SaveExploits1
Rows per page
Query Builder