Lucene search
+L

421 matches found

BDU FSTEC
BDU FSTEC
added 2023/09/15 12:0 a.m.15 views

The vulnerability of the Metabase data visualization and reporting software, related to improper code generation management, allows a perpetrator to execute arbitrary code.

The vulnerability of the Metabase data visualization and reporting software is related to improper code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.2AI score0.01349EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/09/07 12:0 a.m.13 views

The vulnerability of the XWiki Platform, a platform for creating collaborative web applications, related to improper code generation, allows attackers to execute arbitrary code.

The vulnerability of the XWiki Platform lies in improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS8AI score0.01535EPSS
SaveExploits1References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/08/15 12:0 a.m.17 views

The vulnerability of the Ffmpeg multimedia library in Google Chrome browser allows a hacker to execute arbitrary code.

The vulnerability of the Ffmpeg multimedia library in the Google Chrome browser is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code via a specially crafted HTML page from a remote location...

10CVSS8.1AI score0.0104EPSS
SaveExploits1References7Affected Software3
Veracode
Veracode
added 2023/08/06 2:36 p.m.26 views

Code Injection

gitlab is vulnerable to Code Injection. The vulnerability exists due to the improper code rendering while rendering merge requests, which allows an attacker to inject and execute malicious code...

7.2CVSS7.3AI score0.00965EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/07/27 12:0 a.m.10 views

The vulnerability of the Cgo extension in the Go programming language allows a hacker to execute arbitrary code.

The vulnerability of the Cgo programming language extension is related to improper code generation when processing arguments from the CgoLDFLAGS directive. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS7.5AI score0.01837EPSS
SaveExploits0References11Affected Software7
BDU FSTEC
BDU FSTEC
added 2023/05/24 12:0 a.m.12 views

The vulnerability of the SolarWinds Orion Platform’s network monitoring software, related to improper code generation management, allows a intruder to execute arbitrary commands.

The vulnerability of the SolarWinds Orion Platform’s network monitoring software lies in improper code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

9CVSS7.7AI score0.08458EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/03/26 12:0 a.m.9 views

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird, related to improper code generation, allows attackers to trigger service failures or potentially cause other adverse effects.

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are related to improper code generation. Exploiting these vulnerabilities can allow a remote attacker to cause service failures or potentially have other adverse effects...

7.6CVSS7AI score0.0069EPSS
SaveExploits0References15Affected Software8
BDU FSTEC
BDU FSTEC
added 2023/03/22 12:0 a.m.9 views

The vulnerability of the Microsoft Dynamics 365 resource planning software server allows a hacker to execute arbitrary code.

The vulnerability of the software for quickly creating applications for Microsoft Dynamics 365 Unified Service Desk is related to improper code generation. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

10CVSS8.1AI score0.00968EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/03/06 12:0 a.m.9 views

The vulnerability of the Path.Combine method in the modular software solution for managing material flows and inventory control processes in the Kardex Mlog Control Center (MCC) allows a perpetrator to execute arbitrary code.

The vulnerability of the Path.Combine method in the modular software solution for managing material flows and inventory control processes in the Kardex Mlog Control Center MCC is related to improper code generation. Exploiting this vulnerability allows an attacker operating remotely to execute...

9.6CVSS8.2AI score0.14832EPSS
SaveExploits8References3
BDU FSTEC
BDU FSTEC
added 2023/03/06 12:0 a.m.10 views

The vulnerability of the Dell EMC Metro node’s data storage management system, related to improper code generation, allows a perpetrator to execute arbitrary commands.

The vulnerability of the Dell EMC Metro node’s data storage management system is related to improper code generation. Exploiting this vulnerability allows an attacker to execute arbitrary commands remotely...

9CVSS8AI score0.00833EPSS
SaveExploits0References4Affected Software1
SUSE CVE
SUSE CVE
added 2023/02/15 4:17 a.m.5 views

SUSE CVE-2019-3695

A Improper Control of Generation of Code vulnerability in the packaging of pcp of SUSE Linux Enterprise High Performance Computing 15-ESPOS, SUSE Linux Enterprise High Performance Computing 15-LTSS, SUSE Linux Enterprise Module for Development Tools 15, SUSE Linux Enterprise Module for Developmen...

8.4CVSS7AI score0.00475EPSS
SaveExploits1References9
BDU FSTEC
BDU FSTEC
added 2023/01/31 12:0 a.m.16 views

Microsoft Edge browser’s vulnerability, related to improper code generation management, allows attackers to escalate their privileges.

The vulnerability of Microsoft Edge is related to improper handling of code generation. Exploiting this vulnerability allows a malicious actor to enhance their privileges through a specially created web page...

8.3CVSS7.5AI score0.00987EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2023/01/10 12:0 a.m.5 views

PT-2023-7037 · Microsoft +1 · Visual Studio Code +1

Name of the Vulnerable Software and Affected Versions: Visual Studio Code affected versions not specified Description: The issue is related to improper code generation control in Visual Studio Code, allowing an attacker to execute arbitrary code. This can be exploited to gain unauthorized access...

7.8CVSS7.6AI score0.02274EPSS
SaveExploits0References8
BDU FSTEC
BDU FSTEC
added 2022/12/24 12:0 a.m.8 views

The vulnerability of the SPIP content management system, related to improper code generation, allows a hacker to execute arbitrary code.

The vulnerability of the SPIP content management system is related to improper handling of code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted request...

10CVSS6AI score
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/12/24 12:0 a.m.11 views

The vulnerability of the Command Line Interface (CLI) of the Microsoft Azure platform, which allows a hacker to execute arbitrary code.

The vulnerability of the Command Line Interface CLI of the Microsoft Azure platform is related to improper code generation. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

10CVSS8.2AI score0.03295EPSS
SaveExploits1References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/11/23 12:0 a.m.12 views

The vulnerability of Websoft HCM’s automation software for HR processes stems from improper code generation management, allowing attackers to execute arbitrary code.

The vulnerability of Websoft HCM’s automation software for HR processes is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code during the generation of HTTP requests...

9CVSS6AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/11/23 12:0 a.m.8 views

The vulnerability of Websoft HCM’s automation software for HR processes stems from improper code generation management, allowing attackers to execute arbitrary code.

The vulnerability of Websoft HCM’s automation software for HR processes is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code during the generation of HTTP requests...

9CVSS6AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/11/23 12:0 a.m.8 views

The vulnerability of Websoft HCM’s automation software for HR processes stems from improper code generation management, allowing attackers to execute arbitrary code.

The vulnerability of Websoft HCM’s automation software for HR processes is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code during the generation of HTTP requests...

10CVSS6AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/10/20 12:0 a.m.10 views

The vulnerability of the Apache Struts Showcase application on the Apache Struts software platform allows a attacker to execute arbitrary OGNL code.

The vulnerability of the Apache Struts Showcase application on the Apache Struts software platform is related to improper code generation. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary OGNL code using a specially created parameter name...

9.8CVSS7.5AI score0.93437EPSS
SaveExploits1References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/10/18 12:0 a.m.9 views

The vulnerability of the StringSubstitutor component in the Apache Common Text library, which allows a hacker to execute arbitrary code.

The vulnerability of the StringSubstitutor component in the Apache Common Text library is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS7.7AI score0.99931EPSS
SaveExploits42References7Affected Software4
Rows per page
Query Builder