419 matches found
CVE-2022-41576: Improper Control of Generation of Code
The rphone module has a script that can be maliciously modified.Successful exploitation of this vulnerability may cause irreversible programs to be implanted on user devices...
CVE-2022-34714: Improper Control of Generation of Code
Windows Secure Socket Tunneling Protocol SSTP Remote Code Execution Vulnerability...
CVE-2022-35777: Improper Control of Generation of Code
Visual Studio Remote Code Execution Vulnerability...
CVE-2022-35772: Improper Control of Generation of Code
Azure Site Recovery Remote Code Execution Vulnerability...
CVE-2022-35779: Improper Control of Generation of Code
Azure RTOS GUIX Studio Remote Code Execution Vulnerability...
CVE-2022-35766: Improper Control of Generation of Code
Windows Secure Socket Tunneling Protocol SSTP Remote Code Execution Vulnerability...
CVE-2022-35767: Improper Control of Generation of Code
Windows Secure Socket Tunneling Protocol SSTP Remote Code Execution Vulnerability...
CVE-2022-2636
Improper Control of Generation of Code 'Code Injection' in GitHub repository hestiacp/hestiacp prior to 1.6.6...
CVE-2022-37396: Improper Control of Generation of Code
In JetBrains Rider before 2022.2 Trust and Open Project dialog could be bypassed, leading to local code execution...
CVE-2022-37009: Improper Control of Generation of Code
In JetBrains IntelliJ IDEA before 2022.2 local code execution via a Vagrant executable was possible...
CVE-2022-34663: Improper Control of Generation of Code
A vulnerability has been identified in RUGGEDCOM i800, RUGGEDCOM i800NC, RUGGEDCOM i801, RUGGEDCOM i801NC, RUGGEDCOM i802, RUGGEDCOM i802NC, RUGGEDCOM i803, RUGGEDCOM i803NC, RUGGEDCOM M2100, RUGGEDCOM M2100F, RUGGEDCOM M2100NC, RUGGEDCOM M2200, RUGGEDCOM M2200F, RUGGEDCOM M2200NC, RUGGEDCOM M969...
CVE-2022-34821: Improper Control of Generation of Code
A vulnerability has been identified in RUGGEDCOM RM1224 LTE4G EU 6GK6108-4AM00-2BA2, RUGGEDCOM RM1224 LTE4G NAM 6GK6108-4AM00-2DA2, SCALANCE M804PB 6GK5804-0AP00-2AA2, SCALANCE M812-1 ADSL-Router 6GK5812-1AA00-2AA2, SCALANCE M812-1 ADSL-Router 6GK5812-1BA00-2AA2, SCALANCE M816-1 ADSL-Router...
Siemens RUGGEDCOM ROS Code Injection
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please seeSiemens' ProductCERT Security Advisories CERT Services | Services |...
CVE-2017-20095: Improper Control of Generation of Code
A vulnerability classified as critical was found in Simple Ads Manager Plugin. This vulnerability affects unknown code. The manipulation leads to code injection. The attack can be initiated remotely...
CVE-2022-0885: Improper Control of Generation of Code
The Member Hero WordPress plugin through 1.0.9 lacks authorization checks, and does not validate the a request parameter in an AJAX action, allowing unauthenticated users to call arbitrary PHP functions with no arguments...
Rockwell Automation Studio 5000 Logix Designer Improper Control of Generation of Code (CVE-2022-1159)
Rockwell Automation Studio 5000 Logix Designer all versions are vulnerable when an attacker who achieves administrator access on a workstation running Studio 5000 Logix Designer could inject controller code undetectable to a user. This plugin only works with Tenable.ot. Please visit...
CVE-2021-39908: Improper Control of Generation of Code
In all versions of GitLab CE/EE starting from 0.8.0 before 14.2.6, all versions starting from 14.3 before 14.3.4, and all versions starting from 14.4 before 14.4.1 certain Unicode characters can be abused to commit malicious code into projects without being noticed in merge request or source code...
CVE-2022-1159: Improper Control of Generation of Code
Rockwell Automation Studio 5000 Logix Designer all versions are vulnerable when an attacker who achieves administrator access on a workstation running Studio 5000 Logix Designer could inject controller code undetectable to a user...
CVE-2021-38967: Improper Control of Generation of Code
IBM MQ Appliance 9.2 CD and 9.2 LTS could allow a local privileged user to inject and execute malicious code. IBM X-Force ID: 212441...