RichFaces Arbitrary Java Code Execution

The vulnerability of the RichFaces library is related to errors in code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary Java code with privileges of the target server...

Microsoft SharePoint Server Code Execution

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and the Microsoft SharePoint Foundation software relates to errors in code generation. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

CVE-2018-19002

LCDS Laquis SCADA prior to version 4.1.0.4150 allows improper control of generation of code when opening a specially crafted project file, which may allow remote code execution, data exfiltration, or cause a system crash...

SpamAssassin PDFInfo Code Execution

The vulnerability of the PDFInfo plugin of the SpamAssassin filtering software relates to errors in code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2018-1925

Name of the Vulnerable Software and Affected Versions Apache SpamAssassin versions prior to 3.4.2 Description A potential Remote Code Execution issue exists with the PDFInfo plugin in Apache SpamAssassin. The vulnerability is related to errors in code generation management. Exploitation of this...

[SECURITY] Fedora 28 Update: CuraEngine-lulzbot-3.2.23-1.fc28

CuraEngine-lulzbot is a C++ console application for 3D printing G-code gene ration. It has been made as a better and faster alternative to the old Skeinforge engi ne. This is just a console application for G-code generation. For a full graphi cal application look at cura-lulzbot which is the...

PouchBD MapReduce Code Execution

The vulnerability of the map/reduce function implementation in the PouchBD database is related to deficiencies in code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code or system commands remotely...

Remote Code Execution (RCE)

microsoft.chakracore is vulnerable to remote code execution. This happens because it allows redeferral of functions during byte code generation.This CVE ID is different from CVE-2017-11792, CVE-2017-11793, CVE-2017-11796, CVE-2017-11797, CVE-2017-11798, CVE-2017-11799, CVE-2017-11800,...

Telecommunications Systems Mitel Connect OnSite ST14.2 Code Execution

The vulnerability of the conference communication components in Mitel Connect OnSite and ST 14.2 systems relates to improper handling of code generation. Exploiting this vulnerability allows a malicious actor to inject arbitrary code into the generated PHP files and execute it using specially...

Telecommunications Systems Mitel Connect OnSite ST14.2 Code Execution

The vulnerability of the conference communication components in Mitel Connect OnSite and ST 14.2 systems is related to improper code generation. Exploiting this vulnerability allows an attacker to inject arbitrary code into the generated PHP files and execute it using specially crafted requests t...

Telecommunications Systems Mitel Connect OnSite ST14.2 Code Execution

The vulnerability of the conference communication components in Mitel Connect OnSite and ST 14.2 systems relates to improper code generation. Exploiting this vulnerability allows an attacker to inject arbitrary code into the generated PHP file and execute it using specially crafted requests to th...

DEWESoft RunExeFile.exe Code Execution

The vulnerability of the RunExeFile.exe executable file of the DEWESoft data collection and processing software is related to improper code generation management. Exploiting this vulnerability allows an attacker who operates remotely to execute internal commands or execute arbitrary code...

PT-2019-5767

Name of the Vulnerable Software and Affected Versions Wireshark versions 2.4.0 through 2.4.14 Wireshark versions 2.6.0 through 2.6.8 Wireshark versions 3.0.0 through 3.0.1 Description The issue is related to a flaw in the dissection engine of Wireshark, a network traffic analyzer, which can lead ...

Information disclosure

Edger8r tool in the Intel SGX SDK before version 2.1.2 Linux and 1.9.6 Windows may generate code that is susceptible to a side channel potentially allowing a local user to access unauthorized information...

PT-2018-1147

Name of the Vulnerable Software and Affected Versions Mitel Connect ONSITE versions R1711-PREM and earlier Mitel ST 14.2 release GA28 and earlier Description A vulnerability in the conferencing component could allow an unauthenticated attacker to copy a malicious script into a newly generated PHP...

Junos Improper Code Generation Code Execution

The vulnerability of the Junos operating system is related to incorrect code generation management. Exploiting this vulnerability allows a malicious actor to enhance their privileges and gain full control over the device by executing arbitrary commands or code on the target device. Alternatively,...

CVE-2016-5397

The Apache Thrift Go client library exposed the potential during code generation for command injection due to using an external formatting tool. Affected Apache Thrift 0.9.3 and older, Fixed in Apache Thrift 0.10.0...

CVE-2016-5397

The Apache Thrift Go client library exposed the potential during code generation for command injection due to using an external formatting tool. Affected Apache Thrift 0.9.3 and older, Fixed in Apache Thrift 0.10.0...

UBUNTU-CVE-2016-5397

The Apache Thrift Go client library exposed the potential during code generation for command injection due to using an external formatting tool. Affected Apache Thrift 0.9.3 and older, Fixed in Apache Thrift 0.10.0...

DEBIAN-CVE-2016-5397

The Apache Thrift Go client library exposed the potential during code generation for command injection due to using an external formatting tool. Affected Apache Thrift 0.9.3 and older, Fixed in Apache Thrift 0.10.0...