Lucene search
+L

537 matches found

BDU FSTEC
BDU FSTEC
•added 2020/11/24 12:00 a.m.•25 views

The vulnerability of the HEIF Image Extension relates to improper handling of the code generation process, allowing an attacker to execute arbitrary code.

The vulnerability of the HEIF Image Extension is related to improper handling of code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS7.7AI score0.00947EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2020/11/24 12:00 a.m.•15 views

The vulnerability of the HEVC Video Extension codec, related to improper code generation, allows a perpetrator to execute arbitrary code.

The vulnerability of the HEVC Video Extension codec is related to improper code generation control. Exploiting this vulnerability may allow a remote attacker to execute arbitrary code...

10CVSS7.7AI score0.04033EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2020/11/19 12:00 a.m.•15 views

The vulnerability of HEVC Video Extensions relates to improper code generation, allowing attackers to execute arbitrary code.

The vulnerability of HEVC Video Extensions is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS7.7AI score0.04033EPSS
SaveExploits0References4
CNVD
CNVD
•added 2020/09/29 12:00 a.m.•95 views

MediaWiki code issue vulnerability (CNVD-2020-58046)

MediaWiki is a set of free and freely available web-based Wiki engines from the MediaWiki Wikimedia Foundation in the United States. It can be used to deploy in-house knowledge management and content management systems. A code issue vulnerability exists in MediaWiki. The vulnerability stems from ...

6.1CVSS7.1AI score0.01104EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2020/05/21 12:00 a.m.•20 views

The vulnerability of the MQTT protocol implementation on the Apache ActiveMQ software platform allows a intruder to trigger a service failure.

The vulnerability of the MQTT protocol implementation on the Apache ActiveMQ software platform is related to improper code generation. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.8CVSS6.8AI score0.12033EPSS
SaveExploits0References14Affected Software5
Positive Technologies
Positive Technologies
•added 2020/04/28 12:00 a.m.•13 views

PT-2020-6327 · Adobe · Magento

Name of the Vulnerable Software and Affected Versions: Magento versions 2.3.4 and earlier Magento versions 2.2.11 and earlier Magento versions 1.14.4.4 and earlier Magento versions 1.9.4.4 and earlier Description: The issue is related to incorrect code generation management in the Magento Commerc...

10CVSS9.5AI score0.04946EPSS
SaveExploits0References9
OSV
OSV
•added 2020/03/03 11:15 a.m.•11 views

CVE-2019-3695

A Improper Control of Generation of Code vulnerability in the packaging of pcp of SUSE Linux Enterprise High Performance Computing 15-ESPOS, SUSE Linux Enterprise High Performance Computing 15-LTSS, SUSE Linux Enterprise Module for Development Tools 15, SUSE Linux Enterprise Module for Developmen...

7.8CVSS7.2AI score0.00475EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
•added 2020/02/03 12:00 a.m.•30 views

The vulnerability of the web interface of the Mongo-express database management system for MongoDB allows a hacker to execute arbitrary code on the target system by sending a specially crafted request.

The vulnerability in the web interface of the Mongo-express database management system is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the target system by sending a specially crafted request...

10CVSS8.2AI score0.84726EPSS
SaveExploits5References6Affected Software1
BDU FSTEC
BDU FSTEC
•added 2020/01/13 12:00 a.m.•21 views

The vulnerability of the Jira bug tracking system, related to improper code generation management, allows a violator to execute arbitrary code.

The vulnerability of the Jira bug tracking system is related to improper management of code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS9.1AI score0.84621EPSS
SaveExploits3References5Affected Software1
BDU FSTEC
BDU FSTEC
•added 2020/01/13 12:00 a.m.•22 views

The vulnerability of SAP NetWeaver Application Server Java, related to improper code generation management, allows a perpetrator to execute arbitrary code.

The vulnerability of SAP NetWeaver Application Server Java is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS7.6AI score0.01562EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2019/10/29 12:00 a.m.•24 views

The vulnerability of the libcurl library, related to improper code generation, allows attackers to escalate their privileges or execute arbitrary code.

The vulnerability of the libcurl library is related to incorrect code generation management. Exploiting this vulnerability can allow an attacker to enhance their privileges or execute arbitrary code...

7.8CVSS5.9AI score0.0069EPSS
SaveExploits0References5Affected Software3
BDU FSTEC
BDU FSTEC
•added 2019/08/02 12:00 a.m.•18 views

The vulnerability of the Palo Alto Networks Traps software lies in improper code generation management, allowing attackers to execute arbitrary JavaScript or HTML code.

The vulnerability of the Palo Alto Networks Traps software lies in improper code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary JavaScript or HTML code...

6.5CVSS6AI score0.00902EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
•added 2018/07/11 12:00 a.m.•3 views

PT-2018-18501

Name of the Vulnerable Software and Affected Versions Microsoft Visual Studio affected versions not specified Description A Tampering issue exists due to improper code validation in Microsoft Macro Assembler. Recommendations At the moment, there is no information about a newer version that contai...

7.8CVSS0.01174EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2018/04/27 12:00 a.m.•20 views

The vulnerability of the conference communication component in Telecommunications Systems Mitel Connect OnSite and ST14.2 allows a intruder to execute arbitrary code.

The vulnerability of the conference communication components in Mitel Connect OnSite and ST 14.2 systems relates to improper handling of code generation. Exploiting this vulnerability allows a malicious actor to inject arbitrary code into the generated PHP files and execute it using specially...

10CVSS5.8AI score0.02718EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2018/04/27 12:00 a.m.•20 views

The vulnerability of the conference communication component in Telecommunications Systems Mitel Connect OnSite and ST14.2 allows a intruder to execute arbitrary code.

The vulnerability of the conference communication components in Mitel Connect OnSite and ST 14.2 systems relates to improper code generation. Exploiting this vulnerability allows an attacker to inject arbitrary code into the generated PHP file and execute it using specially crafted requests to th...

10CVSS5.8AI score0.0173EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2018/04/27 12:00 a.m.•19 views

The vulnerability of the executable file RunExeFile.exe of the DEWESoft data collection and processing software allows a perpetrator to execute arbitrary code.

The vulnerability of the RunExeFile.exe executable file of the DEWESoft data collection and processing software is related to improper code generation management. Exploiting this vulnerability allows an attacker who operates remotely to execute internal commands or execute arbitrary code...

10CVSS6AI score0.60741EPSS
SaveExploits5References4
BDU FSTEC
BDU FSTEC
•added 2015/10/29 12:00 a.m.•15 views

The vulnerability of the SAP HANA database management system allows a hacker to execute arbitrary XSJS codes.

The vulnerability of the Development Workbench component of the SAP HANA database management system is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary XSJS code remotely...

6.5CVSS5.8AI score0.0148EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder