420 matches found
CVE-2023-5500 Frauscher: FDS102 for FAdC/FAdCi remote code execution vulnerability
This vulnerability allows an remote attacker with low privileges to misuse Improper Control of Generation of Code 'Code Injection' to gain full control of the affected device...
CVE-2023-43301: Improper Control of Generation of Code
An issue in DARTS SHOP MAXIM mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...
CVE-2023-49070: Improper Control of Generation of Code
Pre-auth RCE in Apache Ofbiz 18.12.09. It's due to XML-RPC no longer maintained still present. This issue affects Apache OFBiz: before 18.12.10. Users are recommended to upgrade to version 18.12.10...
CVE-2023-44381: Improper Control of Generation of Code
October is a Content Management System CMS and web platform to assist with development workflow. An authenticated backend user with the editor.cmspages, editor.cmslayouts, or editor.cmspartials permissions who would normally not be permitted to provide PHP code to be executed by the CMS due to...
CVE-2023-44382: Improper Control of Generation of Code
October is a Content Management System CMS and web platform to assist with development workflow. An authenticated backend user with the editor.cmspages, editor.cmslayouts, or editor.cmspartials permissions who would normally not be permitted to provide PHP code to be executed by the CMS due to...
CVE-2023-5226: Improper Control of Generation of Code
An issue has been discovered in GitLab affecting all versions before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting from 16.6 before 16.6.1. Under certain circumstances, a malicious actor bypass prohibited branch checks using a specially crafted branch name to...
CVE-2023-6125: Improper Control of Generation of Code
Code Injection in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2...
CVE-2023-36437: Improper Control of Generation of Code
Azure DevOps Server Remote Code Execution Vulnerability...
CVE-2023-45560: Improper Control of Generation of Code
An issue in Yasukawa memberscard v.13.6.1 allows attackers to send crafted notifications via leakage of the channel access token...
CVE-2023-5539: Improper Control of Generation of Code
A remote code execution risk was identified in the Lesson activity. By default this was only available to teachers and managers...
CVE-2023-36014: Improper Control of Generation of Code
Microsoft Edge Chromium-based Remote Code Execution Vulnerability...
CVE-2023-36570: Improper Control of Generation of Code
Microsoft Message Queuing MSMQ Remote Code Execution Vulnerability...
CVE-2023-36591: Improper Control of Generation of Code
Microsoft Message Queuing MSMQ Remote Code Execution Vulnerability...
CVE-2023-36589: Improper Control of Generation of Code
Microsoft Message Queuing MSMQ Remote Code Execution Vulnerability...
CVE-2023-36575: Improper Control of Generation of Code
Microsoft Message Queuing MSMQ Remote Code Execution Vulnerability...
CVE-2023-36574: Improper Control of Generation of Code
Microsoft Message Queuing MSMQ Remote Code Execution Vulnerability...
CVE-2023-36571: Improper Control of Generation of Code
Microsoft Message Queuing MSMQ Remote Code Execution Vulnerability...
CVE-2023-36592: Improper Control of Generation of Code
Microsoft Message Queuing MSMQ Remote Code Execution Vulnerability...