Mediaconversion SAP Commerce Cloud Full Control

The vulnerability of the Mediaconversion component of the SAP Commerce Cloud platform is related to errors in code generation. Exploiting this vulnerability could allow a malicious actor to gain full control over the application...

CVE-2019-2208

In PromiseBuiltinsAssembler::NewPromiseCapability of builtins-promise.cc, there is a possible out of bounds read in v8 JIT code due to a bug in code generation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for...

CVE-2019-2208

In PromiseBuiltinsAssembler::NewPromiseCapability of builtins-promise.cc, there is a possible out of bounds read in v8 JIT code due to a bug in code generation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for...

CVE-2019-2208

CVE-2019-2208 affects Android components (Android 8.1 and 9) with a flaw in V8 JIT code during PromiseBuiltinsAssembler::NewPromiseCapability, causing an out-of-bounds read. This can lead to remote information disclosure without user interaction or privileges. The connected records confirm the is...

libcurl Privilege Escalation Code Generation

The vulnerability of the libcurl library is related to incorrect code generation management. Exploiting this vulnerability can allow an attacker to enhance their privileges or execute arbitrary code...

thrift: Improper file path sanitization in t_go_generator.cc:format_go_output() of the go client library can allow an attacker to inject commands

The Apache Thrift Go client library exposed the potential during code generation for command injection due to using an external formatting tool. Affected Apache Thrift 0.9.3 and older, Fixed in Apache Thrift 0.10.0...

Docker Automation Tool Data Compromise

The vulnerability of the automation tool for deploying and managing applications in Docker-enabled environments is related to errors in code generation during dynamic library loading. Exploiting this vulnerability can allow a malicious actor to compromise data integrity, gain unauthorized access ...

PDF Viewer Component Code Execution

The vulnerability of the PDF Viewer component in Firefox ESR and Firefox browsers is related to errors in code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created PDF file...

CVE-2019-13550

Affected product: Advantech WebAccess (HMI/SCADA platform). The issue is CVE-2019-13550: improper authorization in WebAccess 8.4.1 and earlier that may allow an attacker to disclose sensitive information and, via improper control of generation of code, potentially enable remote code execution or ...

PT-2019-13420

Name of the Vulnerable Software and Affected Versions WebAccess versions 8.4.1 and prior Description The issue allows for improper control of code generation, potentially enabling remote code execution, data exfiltration, or causing a system crash when an exploit is executed over the network...

PT-2019-4337

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Application Server Java versions prior to 7.10 SAP NetWeaver Application Server Java versions prior to 7.20 SAP NetWeaver Application Server Java versions prior to 7.30 SAP NetWeaver Application Server Java versions prior to 7.31...

Windows EnterpriseDB Data Compromise

The vulnerability of the Windows EnterpriseDB database management system for PostgreSQL involves errors in code generation. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

PT-2019-4195

Name of the Vulnerable Software and Affected Versions SAP Commerce Cloud Mediaconversion Extension versions 6.4 through 6.7, 1808, 1811, 1905 Description The issue is related to errors in code generation management in the Mediaconversion component of the SAP Commerce Cloud e-commerce platform. It...

Rexical Command Injection Vulnerability

A command injection vulnerability appears in code generated by the Rexical gem versions v1.0.6 and earlier. It allows commands to be executed in a subprocess by Ruby's Kernel.open method...

Palo Alto Networks Traps Code Execution

The vulnerability of the Palo Alto Networks Traps software lies in improper code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary JavaScript or HTML code...

Sliver - Implant Framework

Sliver is a general purpose cross-platform implant framework that supports C2 over Mutual-TLS, HTTPS, and DNS. Implants are dynamically compiled with unique X.509 certificates signed by a per-instance certificate authority generated when you first run the binary. The server, client, and implant a...

Modicon Quantum Logic Error Unauthorized Modification Malfunction

The vulnerability of the microprogrammed programmable logic controller Modicon Quantum is related to errors in code generation. Exploiting this vulnerability allows an intruder to unauthorizedly modify the built-in software and cause malfunctions using the Modbus protocol...

CAPICOM Code Execution

The vulnerability of the CAPICOM cryptographic module is related to errors in code generation control. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Intel Converged Security and Manageability Engine Privilege Escalation

The vulnerability of the Intel Converged Security and Manageability Engine and the Intel Trusted Execution Engine is related to incorrect code generation management. Exploitation of this vulnerability can allow attackers to enhance their privileges...

PT-2019-2201

Name of the Vulnerable Software and Affected Versions Intel Converged Security and Manageability Engine versions prior to 11.8.65 Intel Converged Security and Manageability Engine versions prior to 11.11.65 Intel Converged Security and Manageability Engine versions prior to 11.22.65 Intel Converg...