Veeam Service Provider Console Improper Code Generation Code Execution

The vulnerability of the backup and data recovery software for Veeam Service Provider Console VSPC for remote and cloud-based customers is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Veeam Service Provider Console RCE

The vulnerability of the application software interface for data backup and restoration solutions for Veeam Service Provider Console VSPC remote and cloud customers is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Apache InLong Code Execution

The vulnerability of the Apache InLong data integration platform is related to improper code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2024-7104

Improper Control of Generation of Code 'Code Injection' vulnerability in SFS Consulting ww.Winsure allows Code Injection. This issue affects ww.Winsure: before 4.6.2...

JS Help Desk Plugin Arbitrary PHP Execution

The vulnerability of the JS Help Desk plugin of the WordPress content management system is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary PHP code remotely...

SFS Consulting – Www.Winsure: Code Injection Vulnerability

SFS Consulting ww.Winsure is an application from SFS Consulting, Inc. A code injection vulnerability exists in SFS Consulting ww.Winsure versions prior to 4.6.2 that stems from improper code generation controls that allow code injection...

Zabbix Code Generation Code Execution

The vulnerability of the Zabbix universal monitoring system is related to improper control of code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PyTorch JIT Annotations Code Execution

The vulnerability of the torch.jit.annotations.parsetypeline function in the PyTorch machine learning framework is related to incorrect code generation. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

D-Link DAP-2310 Code Execution

The vulnerability of the microprogrammed software in the wireless access point D-Link DAP-2310 is related to improper code generation. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

CVE-2024-43922

Improper Control of Generation of Code 'Code Injection' vulnerability in NitroPack Inc. NitroPack allows Code Injection.This issue affects NitroPack: from n/a through 1.16.7...

WordPress plugin NitroPack has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

GTK GUI Library Privilege Escalation

The vulnerability of the library used for creating graphical user interfaces in GTK GIMP Toolkit is related to improper code generation. Exploiting this vulnerability can allow an attacker to increase their privileges...

CBL Mariner 2.0 Security Update: libcxx / llvm / rust (CVE-2024-31852)

The version of libcxx / llvm / rust installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-31852 advisory. - LLVM before 18.1.3 generates code in which the LR register can be overwritten without data bei...

GitLab Code Execution

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to incorrect representation of the web application and command-line interface due to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute...

ROS-20240812-08

Node.js software platform vulnerability is related to mismanagement of code generation. Exploitation The vulnerability could allow a remote attacker to activate arbitrary code with elevated privileges when handling CAPNETBINDSERVICE exceptions. elevated privileges when handling CAPNETBINDSERVICE...

PT-2024-6293 · Apache · Apache Inlong

Name of the Vulnerable Software and Affected Versions: Apache InLong versions 1.10.0 through 1.12.0 Description: The issue affects Apache InLong due to improper control of code generation, which could lead to remote code execution. This allows a remote attacker to execute arbitrary code. Users ar...

OpenAM getCustomLoginUrlTemplate Code Execution

The vulnerability of the getCustomLoginUrlTemplate method in the OpenAM access and rights management software is related to improper code generation. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

SuperAGI eval Code Execution

The vulnerability of the eval function in the framework for creating, managing, and launching autonomous agents based on artificial intelligence, SuperAGI, is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code and gain full contro...

USN-6916-1: Lua vulnerabilities

It was discovered that Lua did not properly generate code when "ENV" is constant. An attacker could possibly use this issue to cause a denial of service or execute arbitrary unstrusted lua code. CVE-2022-28805 It was discovered that Lua did not properly handle C stack overflows during error...

Gogs Arbitrary Command Execution

The vulnerability of the Gogs self-managed Git repository creation software is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...