Lucene search
K

400 matches found

BDU FSTEC
BDU FSTEC
added 2023/09/07 12:0 a.m.1 views

The vulnerability of the XWiki Platform, a platform for creating collaborative web applications, related to improper code generation, allows attackers to execute arbitrary code.

The vulnerability of the XWiki Platform lies in improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS8AI score0.04457EPSS
Exploits1References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/08/15 12:0 a.m.1 views

The vulnerability of the Ffmpeg multimedia library in Google Chrome browser allows a hacker to execute arbitrary code.

The vulnerability of the Ffmpeg multimedia library in the Google Chrome browser is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code via a specially crafted HTML page from a remote location...

10CVSS8.1AI score0.02046EPSS
Exploits1References7Affected Software3
Veracode
Veracode
added 2023/08/06 2:36 p.m.19 views

Code Injection

gitlab is vulnerable to Code Injection. The vulnerability exists due to the improper code rendering while rendering merge requests, which allows an attacker to inject and execute malicious code...

7.2CVSS7.3AI score0.00142EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/07/27 12:0 a.m.1 views

The vulnerability of the Cgo extension in the Go programming language allows a hacker to execute arbitrary code.

The vulnerability of the Cgo programming language extension is related to improper code generation when processing arguments from the CgoLDFLAGS directive. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS7.5AI score0.0009EPSS
Exploits0References11Affected Software7
BDU FSTEC
BDU FSTEC
added 2023/05/24 12:0 a.m.1 views

The vulnerability of the SolarWinds Orion Platform’s network monitoring software, related to improper code generation management, allows a intruder to execute arbitrary commands.

The vulnerability of the SolarWinds Orion Platform’s network monitoring software lies in improper code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

9CVSS7.7AI score0.04763EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/03/26 12:0 a.m.1 views

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird, related to improper code generation, allows attackers to trigger service failures or potentially cause other adverse effects.

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are related to improper code generation. Exploiting these vulnerabilities can allow a remote attacker to cause service failures or potentially have other adverse effects...

7.6CVSS7AI score0.00115EPSS
Exploits0References15Affected Software8
BDU FSTEC
BDU FSTEC
added 2023/03/22 12:0 a.m.1 views

The vulnerability of the Microsoft Dynamics 365 resource planning software server allows a hacker to execute arbitrary code.

The vulnerability of the software for quickly creating applications for Microsoft Dynamics 365 Unified Service Desk is related to improper code generation. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

10CVSS8.1AI score0.01561EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/03/06 12:0 a.m.1 views

The vulnerability of the Path.Combine method in the modular software solution for managing material flows and inventory control processes in the Kardex Mlog Control Center (MCC) allows a perpetrator to execute arbitrary code.

The vulnerability of the Path.Combine method in the modular software solution for managing material flows and inventory control processes in the Kardex Mlog Control Center MCC is related to improper code generation. Exploiting this vulnerability allows an attacker operating remotely to execute...

9.6CVSS8.2AI score0.61569EPSS
Exploits8References3
BDU FSTEC
BDU FSTEC
added 2023/03/06 12:0 a.m.1 views

The vulnerability of the Dell EMC Metro node’s data storage management system, related to improper code generation, allows a perpetrator to execute arbitrary commands.

The vulnerability of the Dell EMC Metro node’s data storage management system is related to improper code generation. Exploiting this vulnerability allows an attacker to execute arbitrary commands remotely...

9CVSS8AI score0.0222EPSS
Exploits0References4Affected Software1
SUSE CVE
SUSE CVE
added 2023/02/15 4:17 a.m.1 views

SUSE CVE-2019-3695

A Improper Control of Generation of Code vulnerability in the packaging of pcp of SUSE Linux Enterprise High Performance Computing 15-ESPOS, SUSE Linux Enterprise High Performance Computing 15-LTSS, SUSE Linux Enterprise Module for Development Tools 15, SUSE Linux Enterprise Module for Developmen...

8.4CVSS7AI score0.00118EPSS
Exploits1References9
BDU FSTEC
BDU FSTEC
added 2023/01/31 12:0 a.m.1 views

Microsoft Edge browser’s vulnerability, related to improper code generation management, allows attackers to escalate their privileges.

The vulnerability of Microsoft Edge is related to improper handling of code generation. Exploiting this vulnerability allows a malicious actor to enhance their privileges through a specially created web page...

8.3CVSS7.5AI score0.00661EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2023/01/10 12:0 a.m.3 views

PT-2023-7037 · Microsoft +1 · Visual Studio Code +1

Name of the Vulnerable Software and Affected Versions: Visual Studio Code affected versions not specified Description: The issue is related to improper code generation control in Visual Studio Code, allowing an attacker to execute arbitrary code. This can be exploited to gain unauthorized access...

7.8CVSS7.6AI score0.03136EPSS
Exploits0References8
BDU FSTEC
BDU FSTEC
added 2022/12/24 12:0 a.m.1 views

The vulnerability of the Command Line Interface (CLI) of the Microsoft Azure platform, which allows a hacker to execute arbitrary code.

The vulnerability of the Command Line Interface CLI of the Microsoft Azure platform is related to improper code generation. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

10CVSS8.2AI score0.01381EPSS
Exploits1References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/12/24 12:0 a.m.2 views

The vulnerability of the SPIP content management system, related to improper code generation, allows a hacker to execute arbitrary code.

The vulnerability of the SPIP content management system is related to improper handling of code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted request...

10CVSS6AI score
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/11/23 12:0 a.m.1 views

The vulnerability of Websoft HCM’s automation software for HR processes stems from improper code generation management, allowing attackers to execute arbitrary code.

The vulnerability of Websoft HCM’s automation software for HR processes is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code during the generation of HTTP requests...

9CVSS6AI score
Exploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/11/23 12:0 a.m.2 views

The vulnerability of Websoft HCM’s automation software for HR processes stems from improper code generation management, allowing attackers to execute arbitrary code.

The vulnerability of Websoft HCM’s automation software for HR processes is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code during the generation of HTTP requests...

10CVSS6AI score
Exploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/11/23 12:0 a.m.1 views

The vulnerability of Websoft HCM’s automation software for HR processes stems from improper code generation management, allowing attackers to execute arbitrary code.

The vulnerability of Websoft HCM’s automation software for HR processes is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code during the generation of HTTP requests...

9CVSS6AI score
Exploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/10/20 12:0 a.m.1 views

The vulnerability of the Apache Struts Showcase application on the Apache Struts software platform allows a attacker to execute arbitrary OGNL code.

The vulnerability of the Apache Struts Showcase application on the Apache Struts software platform is related to improper code generation. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary OGNL code using a specially created parameter name...

9.8CVSS7.5AI score0.94325EPSS
Exploits34References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/10/18 12:0 a.m.1 views

The vulnerability of the StringSubstitutor component in the Apache Common Text library, which allows a hacker to execute arbitrary code.

The vulnerability of the StringSubstitutor component in the Apache Common Text library is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS7.7AI score0.94251EPSS
Exploits41References7Affected Software4
BDU FSTEC
BDU FSTEC
added 2022/09/21 12:0 a.m.1 views

The vulnerability of the OGNL expression transformation class implementation in the Apache Struts software platform allows a hacker to execute arbitrary code.

The vulnerability of the OGNL expression transformation class implementation in the Apache Struts software framework is related to improper code generation management. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially crafted request...

9.6CVSS8.2AI score0.83013EPSS
Exploits0References6Affected Software5
Rows per page
Query Builder