CVE-2021-38957: Improper Input Validation

IBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 could disclose sensitive information due to hazardous input validation during QR code generation. IBM X-Force ID: 212040...

D-Link DSL-3782 Router Code Execution

The vulnerability of the index.php script in the D-Link DSL-3782 router microprogramming system is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Media Foundation Component Code Execution

The vulnerability of the Media Foundation component in Microsoft Windows operating systems is related to improper code generation. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially crafted request...

Unraid Code Execution

The vulnerability of the Unraid operating system is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Hyper-V Hardware Virtualization Code Execution

The vulnerability of the Hyper-V hardware virtualization technology for Windows operating systems is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Identity Service Bypass Security Restrictions

The vulnerability of the Identity Service for operating systems tvOS, iOS, iPadOS, and watchOS is related to incorrect code generation. Exploiting this vulnerability can allow attackers to circumvent security restrictions...

PT-2021-30944

Уязвимость программного средства QVPN Service связана с неверным управлением генерацией кода. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольный код...

Microsoft Edge Code Execution

The vulnerability of Microsoft Edge is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CommCell storage management software Code Execution

The vulnerability of the CommCell storage management software is related to improper handling of code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted request remotely...

HEVC Video Extensions Code Execution

The vulnerability of HEVC Video Extensions is related to improper code generation. Exploiting this vulnerability allows an attacker to execute arbitrary code...

Moodle Code Execution

The vulnerability of the Moodle administration system is related to errors in code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted request...

Microsoft Dynamics 365 Code Execution

The vulnerability of the Microsoft Dynamics 365 resource planning software is related to improper code generation. Exploitation of this vulnerability allows a malicious actor to execute arbitrary code remotely and completely compromise the vulnerable system by using specially crafted requests...

DNS Server Component Microsoft Windows Code Execution

The vulnerability of the DNS Server component of the Microsoft Windows operating system is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Microsoft Exchange Server Code Execution

The vulnerability of Microsoft Exchange Server is related to errors in code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

vBulletin Arbitrary Command Execution

The vulnerability of the commercial vBulletin web forum is related to errors in code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using a specially created parameter in the ajax/render/widgetphp script...

Windows font driver Code Execution

The vulnerability of the font driver in Microsoft Windows operating systems is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Microsoft Exchange Server Code Execution

The vulnerability of Microsoft Exchange Server is related to errors in code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Microsoft Windows Media Foundation Code Execution

The vulnerability of the Microsoft Windows Media Foundation component in the Windows operating system is related to improper code generation. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Information disclosure

In code generated by BuildParcelFields of generatecpp.cpp, there is a possible way for a crafted parcelable to reveal uninitialized memory of a target process due to uninitialized data. This could lead to local information disclosure across Binder transactions with no additional execution...

PT-2021-6300

Name of the Vulnerable Software and Affected Versions Microsoft Windows Remote Desktop Client affected versions not specified Description The issue is related to incorrect code generation management in the Remote Desktop Client of Microsoft Windows operating systems. It allows a remote attacker t...