Lucene search
+L

420 matches found

Cvelist
Cvelist
•added 2023/12/11 7:13 a.m.•31 views

CVE-2023-5500 Frauscher: FDS102 for FAdC/FAdCi remote code execution vulnerability

This vulnerability allows an remote attacker with low privileges to misuse Improper Control of Generation of Code 'Code Injection' to gain full control of the affected device...

8.8CVSS9.2AI score0.00958EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/07 12:00 a.m.•6 views

CVE-2023-43301: Improper Control of Generation of Code

An issue in DARTS SHOP MAXIM mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

8.2CVSS7.6AI score0.00577EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/05 12:00 a.m.•3 views

CVE-2023-49070: Improper Control of Generation of Code

Pre-auth RCE in Apache Ofbiz 18.12.09. It's due to XML-RPC no longer maintained still present. This issue affects Apache OFBiz: before 18.12.10. Users are recommended to upgrade to version 18.12.10...

9.8CVSS8.5AI score0.95368EPSS
SaveExploits11References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/01 12:00 a.m.•2 views

CVE-2023-44381: Improper Control of Generation of Code

October is a Content Management System CMS and web platform to assist with development workflow. An authenticated backend user with the editor.cmspages, editor.cmslayouts, or editor.cmspartials permissions who would normally not be permitted to provide PHP code to be executed by the CMS due to...

4.9CVSS5.5AI score0.00511EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/01 12:00 a.m.•3 views

CVE-2023-44382: Improper Control of Generation of Code

October is a Content Management System CMS and web platform to assist with development workflow. An authenticated backend user with the editor.cmspages, editor.cmslayouts, or editor.cmspartials permissions who would normally not be permitted to provide PHP code to be executed by the CMS due to...

9.1CVSS8.2AI score0.00873EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/01 12:00 a.m.•2 views

CVE-2023-5226: Improper Control of Generation of Code

An issue has been discovered in GitLab affecting all versions before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting from 16.6 before 16.6.1. Under certain circumstances, a malicious actor bypass prohibited branch checks using a specially crafted branch name to...

7.5CVSS7AI score0.00551EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/14 12:00 a.m.•4 views

CVE-2023-6125: Improper Control of Generation of Code

Code Injection in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2...

8.8CVSS6AI score0.00809EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/14 12:00 a.m.•3 views

CVE-2023-36437: Improper Control of Generation of Code

Azure DevOps Server Remote Code Execution Vulnerability...

8.8CVSS7.9AI score0.01951EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/14 12:00 a.m.•5 views

CVE-2023-45560: Improper Control of Generation of Code

An issue in Yasukawa memberscard v.13.6.1 allows attackers to send crafted notifications via leakage of the channel access token...

7.5CVSS7.2AI score0.00693EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/09 12:00 a.m.•3 views

CVE-2023-5539: Improper Control of Generation of Code

A remote code execution risk was identified in the Lesson activity. By default this was only available to teachers and managers...

8.8CVSS8.1AI score0.01862EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/09 12:00 a.m.•2 views

CVE-2023-36014: Improper Control of Generation of Code

Microsoft Edge Chromium-based Remote Code Execution Vulnerability...

7.3CVSS7.4AI score0.0135EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/10 12:00 a.m.•3 views

CVE-2023-36570: Improper Control of Generation of Code

Microsoft Message Queuing MSMQ Remote Code Execution Vulnerability...

7.3CVSS7.3AI score0.00967EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/10 12:00 a.m.•2 views

CVE-2023-36591: Improper Control of Generation of Code

Microsoft Message Queuing MSMQ Remote Code Execution Vulnerability...

7.3CVSS7.3AI score0.00921EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/10 12:00 a.m.•1 views

CVE-2023-36589: Improper Control of Generation of Code

Microsoft Message Queuing MSMQ Remote Code Execution Vulnerability...

7.3CVSS7.3AI score0.00967EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/10 12:00 a.m.•3 views

CVE-2023-36575: Improper Control of Generation of Code

Microsoft Message Queuing MSMQ Remote Code Execution Vulnerability...

7.3CVSS7.3AI score0.00967EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/10 12:00 a.m.•4 views

CVE-2023-36574: Improper Control of Generation of Code

Microsoft Message Queuing MSMQ Remote Code Execution Vulnerability...

7.3CVSS7.3AI score0.00967EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/10 12:00 a.m.•3 views

CVE-2023-36571: Improper Control of Generation of Code

Microsoft Message Queuing MSMQ Remote Code Execution Vulnerability...

7.3CVSS7.3AI score0.00967EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/10 12:00 a.m.•2 views

CVE-2023-36592: Improper Control of Generation of Code

Microsoft Message Queuing MSMQ Remote Code Execution Vulnerability...

7.3CVSS7.3AI score0.00967EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/10 12:00 a.m.•3 views

CVE-2023-36702: Improper Control of Generation of Code

Microsoft DirectMusic Remote Code Execution Vulnerability...

7.8CVSS7.4AI score0.00955EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/10 12:00 a.m.•3 views

CVE-2023-36572: Improper Control of Generation of Code

Microsoft Message Queuing MSMQ Remote Code Execution Vulnerability...

7.3CVSS7.3AI score0.00967EPSS
SaveExploits0References2
Rows per page
Query Builder