CWE-94

Improper Control of Generation of Code ('Code Injection') vulnerability in sunjianle ajax-extend ajax-extend allows Code

Improper Control of Generation of Code ('Code Injection') vulnerability in Ajit Bohra WP Query Console wp-query-console

Improper Input Validation vulnerability allows Remote Code Execution.  Affected products: ABB ASPECT - Enterprise v3.0

Unauthorized Access vulnerabilities allow Remote Code Execution.  Affected products: ABB ASPECT - Enterprise v3.08.02;

The issue stems from a missing validation of the pip field in a POST request sent to the /customnode/install endpoint us

ComfyUI-Bmad-Nodes is vulnerable to Code Injection. The issue stems from a validation bypass in the BuildColorRangeHSVAd

ComfyUI-Ace-Nodes is vulnerable to Code Injection. The ACE_ExpressionEval node contains an eval() in its entrypoint func

JumpServer is an open source bastion host and an operation and maintenance security audit system. Attackers can bypass t

JumpServer is an open source bastion host and an operation and maintenance security audit system. Attackers can exploit

Improper Control of Generation of Code ('Code Injection') vulnerability in InstaWP InstaWP Connect instawp-connect.This

Improper Control of Generation of Code ('Code Injection') vulnerability in Jack Arturo WP Fusion Lite wp-fusion-lite.Thi

Improper Control of Generation of Code ('Code Injection') vulnerability in Soflyy Oxygen Builder allows Code Injection.

: Improper Control of Generation of Code ('Code Injection') vulnerability in Soflyy Breakdance allows : Code Injection.T

Improper Control of Generation of Code ('Code Injection') vulnerability in Cwicly Builder, SL. Cwicly allows Code Inject

XWiki Platform is a generic wiki platform. Starting in version 5.0-rc-1 and prior to versions 14.10.20, 15.5.4, and 15.9

XWiki Platform is a generic wiki platform. Starting in version 7.2-rc-1 and prior to versions 4.10.20, 15.5.4, and 15.10

Improper Control of Generation of Code ('Code Injection') vulnerability in MainWP MainWP Code Snippets Extension allows

Improper Control of Generation of Code ('Code Injection') vulnerability in WPCustomify Customify Site Library allows Cod

The Woody code snippets – Insert Header Footer Code, AdSense Ads plugin for WordPress is vulnerable to Remote Code Execu

Improper Control of Generation of Code ('Code Injection') vulnerability in Membership Software WishList Member X allows

Gogs through 0.13.0 allows argument injection during the previewing of changes.

Thruk is a multibackend monitoring webinterface for Naemon, Nagios, Icinga and Shinken using the Livestatus API. This au

JupyterLab extension template is a `copier` template for JupyterLab extensions. Repositories created using this templat

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with e

An administrator with restricted permissions can exploit the script execution functionality within the Monitoring Hosts

The WPML plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.6.12 via Tw

A code injection vulnerability that permits a low-privileged user to upload arbitrary files to the server, leading to re

arduino-esp32 is an Arduino core for the ESP32, ESP32-S2, ESP32-S3, ESP32-C3, ESP32-C6 and ESP32-H2 microcontrollers. Th

The SQL Expressions experimental feature of Grafana allows for the evaluation of `duckdb` queries containing user input.

Deserialization of Untrusted Data vulnerability in Vollstart Event Tickets with Ticket Scanner event-tickets-with-ticket

The Widget Options – The #1 WordPress Widget & Block Control Plugin plugin for WordPress is vulnerable to Remote Code Ex

From the VSPC management agent machine, under condition that the management agent is authorized on the server, it is pos

XWiki Platform is a generic wiki platform. Starting in version 3.3-milestone-1 and prior to versions 15.10.9 and 16.3.0,

XWiki Platform is a generic wiki platform. Starting in version 9.7-rc-1 and prior to versions 15.10.11, 16.4.1, and 16.5

Improper Control of Generation of Code ('Code Injection') vulnerability in Apache InLong.This issue affects Apache InLon

Azure uAMQP is a general purpose C library for AMQP 1.0. The UAMQP library is used by several clients to implement AMQP

Remote Code Execution vulnerability in Apache IoTDB.This issue affects Apache IoTDB: from 1.0.0 through 1.2.2. Users ar

The School Management WordPress plugin before 9.9.7 contains an obfuscated backdoor injected in it's license checking co

An issue was discovered in badaix Snapcast version 0.27.0, allows remote attackers to execute arbitrary code and gain se

An issue in Hyper on macOS version 3.4.1 and before, allows remote attackers to execute arbitrary code via the RunAsNode

An issue in Loom on macOS version 0.196.1 and before, allows remote attackers to execute arbitrary code via the RunAsNod

Remote command execution vulnerability in SE-elektronic GmbH E-DDC3.3 affecting versions 03.07.03 and higher. An attacke

Miro Desktop 0.8.18 on macOS allows local Electron code injection via a complex series of steps that might be usable in

Before Beetl v3.15.12, the rendering template has a server-side template injection (SSTI) vulnerability. When the incomi

An issue in Blurams Lumi Security Camera (A31C) v23.0406.435.4120 allows attackers to execute arbitrary code.

Malwarebytes Binisoft Windows Firewall Control before 6.9.9.2 allows remote attackers to execute arbitrary code via gRPC

Yealink Meeting Server before v26.0.0.66 was discovered to contain an OS command injection vulnerability via the file up

The UAMQP is a general purpose C library for AMQP 1.0. During a call to open_get_offered_capabilities, a memory allocati

An issue in mystenlabs Sui Blockchain before v.1.6.3 allow a remote attacker to execute arbitrary code and cause a denia

The 802.11 beacon handling routine failed to validate the length of an IEEE 802.11s Mesh ID before copying it to a heap-