40161 matches found
CVE-2026-95501
A vulnerability was found in mtrano APENCMS up to 6546096d354153309693efabb9a0d824628ed4f5. The affected element is the function eval of the file cms/weasel.php of the component Template Engine. The manipulation of the argument $CMS'site' results in code injection. The attack may be performed fro...
CVE-2026-65111
NVIDIA NeMo Speech for all platforms contains a vulnerability where malicious input created by an attacker could cause a code injection. A successful exploit of this vulnerability might lead to code execution, information disclosure, and data tampering...
CVE-2026-95501
mtrano APENCMS (a template engine component) is affected by a code injection vulnerability in the eval function of the file cms/weasel.php . Manipulating the $_CMS['site'] argument allows a remote attacker to inject and execute code. The attack requires high privileges and user interaction , resu...
CVE-2026-95501 mtrano APENCMS Template weasel.php eval code injection
A vulnerability was found in mtrano APENCMS up to 6546096d354153309693efabb9a0d824628ed4f5. The affected element is the function eval of the file cms/weasel.php of the component Template Engine. The manipulation of the argument $CMS'site' results in code injection. The attack may be performed fro...
EUVD-2026-84493
A vulnerability was found in mtrano APENCMS up to 6546096d354153309693efabb9a0d824628ed4f5. The affected element is the function eval of the file cms/weasel.php of the component Template Engine. The manipulation of the argument $CMS'site' results in code injection. The attack may be performed fro...
CVE-2026-95501 mtrano APENCMS Template weasel.php eval code injection
A vulnerability was found in mtrano APENCMS up to 6546096d354153309693efabb9a0d824628ed4f5. The affected element is the function eval of the file cms/weasel.php of the component Template Engine. The manipulation of the argument $CMS'site' results in code injection. The attack may be performed fro...
CVE-2026-65111
NVIDIA NeMo Speech for all platforms contains a vulnerability where malicious input created by an attacker could cause a code injection. A successful exploit of this vulnerability might lead to code execution, information disclosure, and data tampering...
CVE-2026-65111
NVIDIA NeMo Speech for all platforms is affected by a code injection vulnerability (CWE-77) where malicious input from an attacker can lead to code execution , information disclosure , and data tampering . The vulnerability impacts versions 0.0 to 2.9 across all platforms. To remediate this, user...
EUVD-2026-84404
NVIDIA NeMo Speech for all platforms contains a vulnerability where malicious input created by an attacker could cause a code injection. A successful exploit of this vulnerability might lead to code execution, information disclosure, and data tampering...
CVE-2026-65111
NVIDIA NeMo Speech for all platforms contains a vulnerability where malicious input created by an attacker could cause a code injection. A successful exploit of this vulnerability might lead to code execution, information disclosure, and data tampering...
Security Bulletin: IBM App Connect Enterprise is vulnerable to Code Injection due to Node.js module jsonata (CVE-2026-12208)
Summary IBM App Connect Enterprise Discovery Connectors is vulnerable to Code Injection due to Node.js module jsonata. Vulnerability Details CVEID:CVE-2026-12208 DESCRIPTION: A weakness has been identified in jsonata-js jsonata up to 2.2.0. The affected element is the function createFrame of the...
K000163365: Serialize-JavaScript NPM vulnerability GHSA-5c6j-r48x-rmvq
Security Advisory Description The serialize-javascript npm package versions tags, the injected code executes. GHSA-5c6j-r48x-rmvq Impact There is no impact; F5 products are not affected by this vulnerability. Security Advisory Status F5 Product Development has evaluated the currently supported...
CVE-2026-89275: Improper Control of Generation of Code
Adobe Campaign Classic ACC is affected by an Improper Control of Generation of Code 'Code Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue...
PT-2026-96917
Name of the Vulnerable Software and Affected Versions Adobe Campaign Classic ACC affected versions not specified Description An Improper Control of Generation of Code issue allows a low-privileged attacker to perform code injection, leading to arbitrary code execution within the context of the...
PT-2026-96916
Name of the Vulnerable Software and Affected Versions Adobe Campaign Classic affected versions not specified Description An Improper Control of Generation of Code flaw allows for code injection, which could result in arbitrary code execution in the context of the current user. This issue is...
CVE-2026-84412: Improper Control of Generation of Code
Adobe Campaign Classic ACC is affected by an Improper Control of Generation of Code 'Code Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue...
CVE-2026-75703: Improper Control of Generation of Code
Adobe Campaign Classic ACC is affected by an Improper Control of Generation of Code 'Code Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue...
CVE-2026-89276: Improper Control of Generation of Code
Adobe Campaign Classic ACC is affected by an Improper Control of Generation of Code 'Code Injection' vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation o...
PT-2026-96764
A vulnerability was found in mtrano APENCMS up to 6546096d354153309693efabb9a0d824628ed4f5. The affected element is the function eval of the file cms/weasel.php of the component Template Engine. The manipulation of the argument $ CMS'site' results in code injection. The attack may be performed fr...
PT-2026-96897
Name of the Vulnerable Software and Affected Versions Adobe Campaign Classic ACC affected versions not specified Description An Improper Control of Generation of Code issue allows for code injection, which could lead to arbitrary code execution within the context of the current user. This flaw ca...