CVE-2023-27893: Improper Control of Generation of Code

An attacker authenticated as a user with a non-administrative role and a common remote execution authorization in SAP Solution Manager and ABAP managed systems ST-PI - versions 20881700, 20081710, 740, can use a vulnerable interface to execute an application function to perform actions which they...

CVE-2022-32846: Improper Control of a Resource Through its Lifetime

A logic issue was addressed with improved state management. This issue is fixed in Apple Music 3.9.10 for Android. An app may be able to access user-sensitive data...

Kardex Mlog MCC 5.7.12+0-a203c2a213-master File Inclusion / Remote Code Execution Vulnerabilities

Kardex Mlog MCC version 5.7.12+0-a203c2a213-master suffers from a file inclusion vulnerability that allows for remote code execution. Remote Code Execution in Kardex MLOG ======================================================================= Product: Kardex Mlog MCC Vendor: Kardex Holding AG...

Kardex Mlog MCC 5.7.12+0-a203c2a213-master File Inclusion / Remote Code Execution

Remote Code Execution in Kardex MLOG ======================================================================= Product: Kardex Mlog MCC Vendor: Kardex Holding AG Tested Version: 5.7.12+0-a203c2a213-master Fixed Version: inline patch - no new version number Vulnerability Type: Improper Control of...

CVE-2021-26277: Improper Control of Generation of Code

The framework service handles pendingIntent incorrectly, allowing a malicious application with certain privileges to perform privileged actions...

CVE-2023-21553: Improper Control of Generation of Code

Azure DevOps Server Remote Code Execution Vulnerability...

CVE-2023-25560: Improper Control of Dynamically-Managed Code Resources

DataHub is an open-source metadata platform. The AuthServiceClient which is responsible for creation of new accounts, verifying credentials, resetting them or requesting access tokens, crafts multiple JSON strings using format strings with user-controlled data. This means that an attacker may be...

CVE-2023-0575 Remote Code Execution

External Control of Critical State Data, Improper Control of Generation of Code 'Code Injection' vulnerability in YugaByte, Inc. Yugabyte DB on Windows, Linux, MacOS, iOS DevopsBase.Java:execCommand, TableManager.Java:runCommand modules allows API Manipulation, Privilege Abuse. This vulnerability...

CVE-2023-22960

Lexmark products through 2023-01-10 have Improper Control of Interaction Frequency...

CVE-2023-22960

Lexmark products through 2023-01-10 have Improper Control of Interaction Frequency...

PT-2023-18802

Name of the Vulnerable Software and Affected Versions Lexmark products through 2023-01-10 Description The issue is related to Improper Control of Interaction Frequency in Lexmark products. It affects the built-in web server interface of more than 60 Lexmark printer models, specifically concerning...

CVE-2023-22960

CVE-2023-22960 : Lexmark printer firmware prior to 2023-01-10 is affected by Improper Control of Interaction Frequency, enabling bypass of login brute-force protections. Connected sources indicate exploitation involves the Embedded Web Server interface; impact is limited to authentication bypass ...

CVE-2023-22960: Improper Restriction of Excessive Authentication Attempts

Lexmark products through 2023-01-10 have Improper Control of Interaction Frequency...

Lexmark 安全漏洞

Lexmark is a line of printers in the United States. A security vulnerability exists in Lexmark products version 2023-01-10 and prior versions, which stems from improper control of interaction frequency...

CVE-2021-37774: Improper Control of Generation of Code

An issue was discovered in function httpProcDataSrv in TL-WDR7660 2.0.30 that allows attackers to execute arbitrary code...

CVE-2023-21890: Improper Control of Generation of Code

Vulnerability in the Oracle Communications Converged Application Server product of Oracle Communications component: Core. Supported versions that are affected are 7.1.0 and 8.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via UDP to compromise Oracle...

CVE-2023-21886: Improper Control of Generation of Code

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 6.1.42 and prior to 7.0.6. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Orac...

CVE-2023-0022: Improper Control of Generation of Code

SAP BusinessObjects Business Intelligence Analysis edition for OLAP allows an authenticated attacker to inject malicious code that can be executed by the application over the network. On successful exploitation, an attacker can perform operations that may completely compromise the application...

CVE-2023-0048: Improper Control of Generation of Code

Code Injection in GitHub repository lirantal/daloradius prior to master-branch...

CVE-2022-28287: Improper Control of a Resource Through its Lifetime

In unusual circumstances, selecting text could cause text selection caching to behave incorrectly, leading to a crash. This vulnerability affects Firefox 99...