1030 matches found
CVE-2026-124703
In Telerik UI for WPF, versions prior to 2026.4.1110, an improper control of code generation vulnerability exists that allows an attacker to execute unauthorized code in the context of the affected application...
EUVD-2026-124344
In Telerik UI for WPF, versions prior to 2026.4.1110, an improper control of code generation vulnerability exists that allows an attacker to execute unauthorized code in the context of the affected application...
CVE-2026-124703
In Telerik UI for WPF , versions prior to 2026.4.1110 , an improper control of code generation vulnerability exists. This flaw allows an attacker to execute unauthorized code within the context of the affected application. The vulnerability is associated with CWE-94 . No specific exploit details ...
CVE-2026-124703 Improper Control of Generation of Code in Progress Telerik UI for WPF
In Telerik UI for WPF, versions prior to 2026.4.1110, an improper control of code generation vulnerability exists that allows an attacker to execute unauthorized code in the context of the affected application...
CVE-2026-124699 Improper Control of Generation of Code in Progress Telerik UI for WinForms
In Telerik UI for WinForms, versions prior to 2026.4.1111, an improper control of code generation vulnerability exists that allows an attacker to supply a crafted expression and execute unauthorized code in the context of the affected application...
Fortinet FortiManager Improper control of generation of code (FG-IR-26-230)
The version of FortiManager installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-26-230 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version...
Fortinet FortiAnalyzer Improper control of generation of code (FG-IR-26-230)
The version of FortiAnalyzer installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-26-230 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version...
Fortinet FortiManager Improper control of generation of code in GUI (FG-IR-26-227)
The version of FortiManager installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-26-227 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version...
PT-2026-144896
Name of the Vulnerable Software and Affected Versions FortiAnalyzer versions 8.0.0 through 8.0.1 FortiAnalyzer versions 7.6.0 through 7.6.7 FortiAnalyzer versions 7.4.0 through 7.4.11 FortiAnalyzer version 7.2 FortiAnalyzer Cloud version 8.0.1 FortiAnalyzer Cloud versions 7.6.0 through 7.6.7...
CVE-2026-9764
IBM Bob 1.0.4 through 2.0.1 could allow a remote attacker to inject arbitrary code on the system, due to the improper control of user input code...
CVE-2026-9764 IBM Bob is vulnerable to Remote Code Execution due to improper control of workspace-defined MCP server execution
IBM Bob 1.0.4 through 2.0.1 could allow a remote attacker to inject arbitrary code on the system, due to the improper control of user input code...
PT-2026-140148
IBM Bob 1.0.4 through 2.0.1 could allow a remote attacker to inject arbitrary code on the system, due to the improper control of user input code...
CVE-2026-120841 WordPress WpTravelly plugin <= 2.3.8 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Magepeople inc. WpTravelly tour-booking-manager allows PHP Local File Inclusion.This issue affects WpTravelly: from n/a through 2.3.8...
CVE-2026-17359
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code due to improper control of generation of code. A user-supplied value can influence code that the product generates, which could lead to code execution...
CVE-2026-17342
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code due to improper control of generation of code...
CVE-2026-17140
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code due to improper control of generation of code. Input supplied by a user can influence code generated by the product, which could lead to code execution...
EUVD-2026-118744
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code due to improper control of generation of code. A user-supplied value can influence code that the product generates, which could lead to code execution...
CVE-2026-17359
IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 are affected by multiple vulnerabilities that allow a remote authenticated attacker to achieve arbitrary code execution . The root cause is identified as improper control of generation of code , where a user-supplie...
CVE-2026-17359 Multiple Vulnerabilities in IBM API Connect
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code due to improper control of generation of code. A user-supplied value can influence code that the product generates, which could lead to code execution...